Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/81745BF4FFCF11EDAB820C764AD9E6FC.roa
File:                     81745BF4FFCF11EDAB820C764AD9E6FC.roa (raw, json)
Hash identifier:          59UUhbCMAMdcLNGfk8stubLHS4qlKvn+Dw7MOOXufRE=
Subject key identifier:   3F:51:5A:A7:7B:22:7F:6A:F5:9D:40:CE:0D:27:3F:49:A1:7C:AC:6A
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0BB0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/81745BF4FFCF11EDAB820C764AD9E6FC.roa
Signing time:             Wed 31 May 2023 16:23:41 +0000
ROA not before:           Wed 31 May 2023 16:23:37 +0000
ROA not after:            Sat 31 May 2025 16:23:37 +0000
asID:                     61317
IP address blocks:        102.129.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2992 (0xbb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: May 31 16:23:37 2023 GMT
            Not After : May 31 16:23:37 2025 GMT
        Subject: CN=6477748d-5325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:59:12:4d:b5:16:54:73:7e:d0:19:d9:82:
                    fd:38:1a:8c:48:dd:d1:cf:bb:a8:c7:7e:9f:35:1c:
                    d9:cb:6a:cc:ef:b6:63:e0:c5:cb:1a:b1:69:a0:5b:
                    59:2d:cf:60:84:8c:21:87:35:d8:85:a9:aa:2f:b1:
                    47:a2:41:2f:21:c1:cc:c8:42:cb:70:46:a4:21:03:
                    35:ff:4c:4d:0b:05:75:44:f1:62:9e:37:4c:8e:fb:
                    44:0f:49:b0:4e:63:93:0c:24:64:fa:4a:c8:b5:54:
                    ae:29:e5:b3:85:52:37:81:4a:1a:21:e5:cf:a7:43:
                    3c:bb:e0:58:0f:95:92:be:c7:7a:41:85:28:27:a0:
                    ab:9b:5d:23:75:c8:47:d7:a9:a2:fb:11:32:93:98:
                    9d:23:ee:b5:eb:cc:22:da:e6:43:ad:28:22:90:f5:
                    03:d9:ba:87:0e:e8:7b:7f:ef:c5:e2:93:cb:9f:0d:
                    ee:0a:7d:aa:0e:b0:18:a0:d8:79:16:4e:ba:85:2a:
                    c9:a5:1e:0b:ee:5e:a5:13:3d:7a:fc:a9:e9:61:54:
                    3f:b2:ed:f7:e1:7e:7d:78:e3:2f:a1:0b:ba:f0:46:
                    3f:60:87:d5:95:a9:14:0e:ea:58:27:d1:45:0b:5a:
                    12:b8:f0:d5:47:0e:ae:2d:2e:37:61:70:4f:9e:63:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:51:5A:A7:7B:22:7F:6A:F5:9D:40:CE:0D:27:3F:49:A1:7C:AC:6A
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/81745BF4FFCF11EDAB820C764AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:46:7d:42:05:33:14:4e:30:c4:eb:5f:eb:81:65:5f:69:d1:
         7d:82:68:2e:9c:28:48:c3:2c:06:e3:f7:98:2b:07:e2:c1:eb:
         c1:80:d2:e5:82:3a:0c:53:11:2b:92:2c:58:9e:04:fe:a3:f4:
         f9:2a:da:1b:25:4c:7c:00:3e:a9:11:b6:11:31:4b:fe:cd:7a:
         4f:1e:42:97:db:e5:aa:e6:a5:d0:b4:31:c4:fa:ac:de:3a:7a:
         d9:58:cb:5d:28:3b:1f:38:94:2f:fa:0c:bb:93:69:cd:00:d7:
         b6:59:28:fd:f1:61:8c:70:3a:5d:c5:aa:f0:61:c6:e5:72:f6:
         11:2a:c8:66:fa:dd:ea:7a:dc:63:0a:2b:48:b8:f9:b9:d7:5f:
         dc:ff:f2:7d:c1:b4:5d:8c:d2:05:3a:ed:a0:88:bd:c2:bb:17:
         63:0d:58:e3:ed:5a:fb:86:c3:49:56:ca:f8:9b:b0:5b:5c:76:
         7c:66:b8:3f:f3:72:16:34:5f:9d:15:ab:b0:5a:29:54:53:c9:
         ca:ab:fe:90:ae:e9:34:3c:66:b0:6f:b0:b2:5b:13:02:07:2e:
         06:03:35:08:58:b0:aa:63:18:cf:7e:11:93:80:ad:06:1b:ba:
         46:e1:9f:42:b9:dd:40:33:7f:ce:ae:b5:bb:f2:6e:56:80:fb:
         d3:c8:b5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org