Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/74E2533CE73E11ECA7C6AA7CF1222468.roa
File:                     74E2533CE73E11ECA7C6AA7CF1222468.roa (raw, json)
Hash identifier:          jBBRFV1/++9hAxkXCKD9bBXHZd977EoKk68tCQk7O0w=
Subject key identifier:   90:A1:84:2A:63:C2:DD:38:74:6C:93:54:A2:53:96:01:6A:39:C8:51
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0689
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/74E2533CE73E11ECA7C6AA7CF1222468.roa
Signing time:             Wed 08 Jun 2022 15:19:58 +0000
ROA not before:           Wed 08 Jun 2022 15:19:54 +0000
ROA not after:            Sat 08 Jun 2024 15:19:54 +0000
asID:                     40676
IP address blocks:        102.165.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun  8 15:19:54 2022 GMT
            Not After : Jun  8 15:19:54 2024 GMT
        Subject: CN=62a0be1e-921c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:36:91:7c:84:8e:f1:5a:61:ce:8e:36:0b:
                    6c:a7:86:51:f1:c4:ac:8f:fd:be:ec:76:58:e4:ca:
                    80:fd:2a:4f:1f:3e:bb:4f:39:5a:1f:50:3f:81:1c:
                    4e:29:e0:f5:f2:ef:73:66:01:27:fa:a2:e7:bf:50:
                    79:22:5f:f0:e7:51:42:5b:79:7a:16:9b:87:77:7c:
                    86:fc:7c:12:ab:53:2f:45:95:66:b4:94:a6:10:3d:
                    a9:61:79:fa:2a:34:59:bd:58:36:1b:5b:45:8f:e2:
                    9a:2c:a1:f4:db:7d:ec:ef:a8:a7:37:22:ff:2c:c9:
                    36:42:1f:72:7e:3d:04:85:e6:1f:5a:a5:4b:8f:71:
                    d8:49:7b:1e:10:f0:d1:93:b9:ce:36:cf:ff:ba:fc:
                    f0:7e:cc:31:cf:ed:f2:80:4f:e7:16:36:46:3a:a6:
                    d7:5b:c6:f0:81:b3:f5:7d:de:68:92:8d:a0:26:ac:
                    86:ac:3c:22:19:98:9c:6e:85:d7:5a:ec:db:12:e6:
                    11:52:60:8d:db:b7:2b:5f:fb:e7:34:13:df:14:56:
                    98:ac:a4:ad:4c:a9:af:42:ee:74:dc:2d:3d:b3:74:
                    b7:21:9e:aa:da:73:c3:3d:8d:ee:14:bc:1d:e8:ea:
                    5c:ba:ab:e4:44:c1:22:31:9d:ff:61:b9:97:29:9b:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A1:84:2A:63:C2:DD:38:74:6C:93:54:A2:53:96:01:6A:39:C8:51
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/74E2533CE73E11ECA7C6AA7CF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ad:aa:55:a0:42:7b:04:3a:e3:50:b3:47:5d:d0:93:20:a8:
         14:73:0c:5d:71:36:f6:e7:1b:e2:39:15:fa:d0:c3:39:d9:2c:
         c7:26:cf:c8:de:55:65:00:3f:27:db:5f:04:a3:a9:69:2e:f8:
         00:43:f7:34:c3:79:64:65:98:47:3f:79:6a:56:c8:b4:25:e1:
         1b:33:39:57:6c:e0:11:e4:bc:cb:a3:d6:04:05:1a:64:15:96:
         d2:00:6e:05:5f:d6:4d:40:5a:ba:8b:92:b6:7f:a1:c7:47:63:
         9b:e0:e9:9d:a3:63:e3:3b:54:c9:a9:47:1c:6b:30:a4:58:dc:
         4a:49:f9:92:4b:ea:a8:c7:ea:51:c7:70:a8:19:12:d7:57:b3:
         04:c4:f0:6a:44:7b:31:1e:bf:49:7e:d9:19:36:65:d1:33:19:
         25:43:bb:fd:94:0d:10:bd:3b:f9:42:9f:91:44:04:40:c8:76:
         10:71:2a:50:d7:66:66:24:c1:15:c6:03:21:9c:c4:a2:56:82:
         a3:5a:47:f0:2c:d8:81:32:1c:2a:c7:e2:48:18:d1:93:dc:fa:
         a6:f1:ca:eb:d3:62:cb:09:43:0e:59:4a:92:f6:63:bb:5d:32:
         af:ae:6a:81:4b:6c:1b:07:12:7b:5c:c1:35:64:e6:1e:71:6f:
         e2:13:fc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org