Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/727A839AF48411EDA0929D2F4AD9E6FC.roa
File:                     727A839AF48411EDA0929D2F4AD9E6FC.roa (raw, json)
Hash identifier:          6CfXHd9NTYGvR7eaXw162k37JQ7bQbQE68v8v+udbEo=
Subject key identifier:   82:A1:91:58:75:1E:80:3C:9C:EE:E3:F0:6D:73:44:9E:81:00:C6:89
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0B7D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/727A839AF48411EDA0929D2F4AD9E6FC.roa
Signing time:             Wed 17 May 2023 07:28:41 +0000
ROA not before:           Wed 17 May 2023 07:28:37 +0000
ROA not after:            Fri 16 May 2025 07:28:37 +0000
asID:                     834
IP address blocks:        102.129.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Jun 2023 11:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2941 (0xb7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: May 17 07:28:37 2023 GMT
            Not After : May 16 07:28:37 2025 GMT
        Subject: CN=64648229-8e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:06:2b:08:ae:60:1b:49:9e:fa:2c:92:74:
                    c6:19:45:78:c2:e6:ad:00:24:e9:ef:ff:01:c4:94:
                    17:00:a7:dc:07:7a:a1:16:4f:05:c5:76:3c:64:37:
                    c1:61:13:a5:7b:69:6e:e8:48:58:28:51:e4:be:98:
                    c1:1d:4a:bb:47:c8:b1:81:b3:1b:9c:37:66:e3:12:
                    7a:80:77:9f:13:21:04:df:b1:1c:e1:98:2d:6b:cd:
                    11:db:9e:0f:bb:d5:69:a5:e1:93:c2:3b:eb:cf:f0:
                    e2:20:08:78:79:29:7f:52:28:f7:da:bb:34:0f:f3:
                    80:c8:47:97:1a:97:92:15:08:1b:89:93:44:f8:2a:
                    eb:13:9b:43:b3:21:03:62:09:ca:42:aa:c5:f2:58:
                    0d:93:5a:b7:54:d0:f6:dd:c3:cb:c7:30:c1:ab:14:
                    39:6c:a3:04:bb:39:38:fe:38:f0:6d:62:71:ca:d2:
                    9a:4d:25:d9:cc:0d:1f:bf:4c:51:3f:1b:aa:1d:41:
                    06:a7:92:3e:49:37:7d:a6:be:a1:1d:af:32:e1:05:
                    60:80:e0:c1:bf:3a:7e:b2:dd:79:00:9d:45:a5:5c:
                    4e:b7:a5:70:b3:f4:b2:de:86:f3:01:80:fe:7f:34:
                    6c:69:af:5b:aa:2a:77:a9:bc:c4:e6:08:26:08:37:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A1:91:58:75:1E:80:3C:9C:EE:E3:F0:6D:73:44:9E:81:00:C6:89
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/727A839AF48411EDA0929D2F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:3a:af:03:7f:bd:24:e8:24:df:77:d5:d9:f3:5a:18:71:3a:
         a0:75:4b:95:0c:2f:54:3c:2b:e0:11:d2:8d:06:4f:21:21:fb:
         c3:14:c9:92:c9:70:8d:91:2c:99:03:be:b9:55:41:c5:bc:77:
         cf:30:62:67:6f:50:e9:91:16:4a:f7:9a:1a:38:dc:28:c3:9f:
         f1:75:ed:c1:90:09:ec:b9:dd:c9:24:a0:69:19:df:91:3e:0b:
         69:79:b9:61:ab:64:35:89:ac:78:d7:8a:23:12:0e:be:73:3a:
         34:d1:e7:56:3e:f1:9d:58:e3:15:03:e5:4d:ca:ec:27:18:5b:
         16:ce:cb:4c:8e:08:2d:e2:77:15:73:ff:65:de:cf:ae:59:7f:
         bf:cc:e7:58:a5:43:83:a3:90:05:04:e8:94:c5:85:8b:47:0a:
         ac:b4:60:e9:b1:6b:cb:eb:53:f8:b9:d8:4e:4c:e1:18:1f:e0:
         e8:46:0e:9d:46:f7:09:7a:df:7d:c1:06:6a:b5:2f:39:40:be:
         ae:ba:7a:7a:39:9a:0d:5c:00:2b:48:08:22:a1:29:7d:bf:fe:
         0a:fb:a2:46:bb:54:11:1c:c5:72:63:96:9c:d1:9c:61:bc:35:
         1c:94:b4:4d:14:db:8a:2e:ea:16:fd:a7:a1:de:f0:87:3f:66:
         1e:6b:a8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org