Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/82BE4610434A11EDAD3268C7F1222468.roa
File:                     82BE4610434A11EDAD3268C7F1222468.roa (raw, json)
Hash identifier:          WsC7fdTqOUHPufi25gQcX+JMBMDULXoQOMhaeUhnwQI=
Subject key identifier:   77:97:64:75:58:87:3D:CF:DB:74:D1:35:69:F2:9C:60:41:FF:46:AF
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0823
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/82BE4610434A11EDAD3268C7F1222468.roa
Signing time:             Mon 03 Oct 2022 18:38:02 +0000
ROA not before:           Mon 03 Oct 2022 18:37:58 +0000
ROA not after:            Thu 03 Oct 2024 18:37:58 +0000
asID:                     209104
IP address blocks:        102.165.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 29 Nov 2022 16:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  3 18:37:58 2022 GMT
            Not After : Oct  3 18:37:58 2024 GMT
        Subject: CN=633b2c0a-4a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:19:fa:15:8d:08:54:d5:eb:5b:fc:aa:8f:e7:
                    a1:c5:e8:71:e2:b4:00:c4:10:9f:d9:29:2e:04:81:
                    94:e6:43:9a:7f:3a:d4:6c:dd:5a:da:aa:a1:09:7d:
                    66:6e:92:a1:37:5a:dc:ee:9d:37:1b:44:73:dc:a9:
                    0c:c2:8d:e7:a2:8a:61:8b:d4:94:f3:7b:d0:85:d8:
                    b3:dc:64:71:f8:0f:80:70:b3:1a:a5:d5:b5:31:cf:
                    79:26:21:c1:f6:82:2c:92:fc:3f:41:b1:45:98:6d:
                    e5:f9:54:e7:a6:fd:dc:af:c4:ec:b1:d0:5d:05:77:
                    54:11:41:ef:63:b0:10:64:75:95:af:f2:25:50:2d:
                    eb:71:a2:28:4d:4c:23:68:b4:0a:70:22:c2:3f:80:
                    8e:0d:af:ee:f4:28:fb:86:90:16:ef:05:97:e1:89:
                    ae:1e:c0:ed:88:d1:83:c9:21:d4:8e:4f:7e:b1:76:
                    2c:ce:65:9a:e3:19:53:d9:52:e4:a8:f8:c0:44:86:
                    54:85:f6:27:a6:03:10:e5:a0:1b:98:a3:7e:6f:92:
                    4f:93:83:5f:55:61:76:ef:6e:2b:c1:5c:d6:ab:1e:
                    99:95:4c:b0:27:f0:bd:6a:af:e3:b4:01:bb:cb:d1:
                    78:98:25:d0:88:b1:0b:09:de:46:34:34:24:c2:83:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:97:64:75:58:87:3D:CF:DB:74:D1:35:69:F2:9C:60:41:FF:46:AF
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/82BE4610434A11EDAD3268C7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:3e:4f:b0:b8:54:ea:a6:44:cb:01:7e:db:0d:d0:f1:06:06:
         2d:8a:76:77:ce:e0:1d:0c:5c:3a:bb:88:1e:96:12:d9:fd:12:
         20:1c:31:b1:14:e7:98:74:1d:f8:a7:32:87:8a:c7:9a:51:30:
         e4:a0:ee:94:78:eb:bb:ce:a1:15:5f:0e:65:33:1e:cd:bd:51:
         8b:43:bc:af:97:5b:be:e8:6f:4c:c4:6a:f5:b6:1a:91:9e:fc:
         cc:7f:e6:f6:3c:05:95:2b:ec:eb:9a:4c:8c:75:23:6d:d7:39:
         40:0e:d4:8c:7c:e2:68:66:83:ee:52:7f:5c:cb:43:f5:ed:ab:
         34:65:c0:ab:96:fa:44:6e:f7:e8:b3:0b:bb:98:91:d1:e8:8f:
         db:35:dd:76:92:1d:74:a3:f8:e6:4a:72:58:54:53:7e:e2:c8:
         94:0e:4e:6b:98:2b:8b:91:6d:39:37:43:ce:07:b2:e5:ff:a0:
         37:e2:22:6f:43:b2:0d:2e:a0:ac:4c:b6:b1:a9:4f:86:e1:12:
         63:ab:cc:51:ce:90:37:d4:0e:8c:b8:43:bc:0c:fc:4f:1e:fb:
         a4:70:70:be:8f:ef:e6:7a:41:d5:f9:d0:f0:c7:71:00:fb:ae:
         df:bc:17:ce:a0:64:8c:34:a0:06:d1:82:24:21:66:9a:48:b4:
         98:7c:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org