Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8657CA18A42711EF92C36848762E951A.roa
File:                     8657CA18A42711EF92C36848762E951A.roa (raw, json)
Hash identifier:          L/41IIJTAb8aMwAkHkIp+NOw47ec4OPUIefADV7Yet8=
Subject key identifier:   FE:96:4E:C0:19:3D:87:72:20:7E:33:50:DC:12:75:12:6E:AB:DA:3D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       12B9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8657CA18A42711EF92C36848762E951A.roa
Signing time:             Sat 16 Nov 2024 14:31:54 +0000
ROA not before:           Sat 16 Nov 2024 14:31:50 +0000
ROA not after:            Tue 17 Nov 2026 14:31:50 +0000
asID:                     834
IP address blocks:        102.165.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 08:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4793 (0x12b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Nov 16 14:31:50 2024 GMT
            Not After : Nov 17 14:31:50 2026 GMT
        Subject: CN=6738acda-4d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:30:21:1d:06:c7:c8:84:fc:bf:c1:2b:b0:
                    1c:f0:fc:aa:fd:7b:e4:e0:87:1c:83:3d:9c:e0:7d:
                    5b:23:09:a1:5f:b1:04:71:8d:bf:7e:e0:ed:1d:f1:
                    6d:67:71:71:31:64:10:35:a1:b3:3e:ad:ae:1f:5d:
                    bc:28:b2:6c:f4:28:69:a0:b1:da:44:d1:27:e9:32:
                    30:07:b4:f2:97:aa:3a:af:1f:f6:a7:01:21:cb:5d:
                    30:36:c8:48:34:7c:53:1d:45:6f:56:77:65:77:56:
                    c3:93:57:b6:aa:02:b7:5d:69:2a:bb:70:8f:94:58:
                    f4:9d:94:50:6d:19:e0:42:74:5c:eb:25:4b:05:e7:
                    f3:5d:2c:46:24:8b:09:e3:1c:b2:17:66:69:b4:be:
                    11:94:f4:4f:f7:a2:6c:ca:96:0d:28:a0:93:06:c3:
                    7d:78:88:52:e2:4b:2c:11:73:02:ed:99:31:61:f4:
                    d0:17:89:35:2b:71:87:e1:c7:0d:3f:5c:51:e0:dd:
                    20:0c:6b:9e:c1:ef:fd:74:45:0c:c6:54:ec:12:df:
                    3b:95:c3:8a:5a:04:8e:02:6b:0a:af:91:ce:ce:f5:
                    e2:33:f8:07:7c:ed:d3:30:28:a7:2b:cc:45:10:34:
                    45:28:3b:34:6d:db:49:36:9e:24:19:70:71:ce:f5:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:96:4E:C0:19:3D:87:72:20:7E:33:50:DC:12:75:12:6E:AB:DA:3D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8657CA18A42711EF92C36848762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:cc:32:24:40:7e:44:cd:ef:fc:d3:46:1e:f8:ac:eb:ec:2d:
         ce:0d:37:cb:6a:a0:78:99:79:cd:a8:52:92:91:73:0c:0d:39:
         dd:f8:cf:f0:97:e9:50:97:9e:c7:ec:9b:bd:36:5f:91:9d:b3:
         9c:f5:de:e5:84:a2:00:f4:61:ef:e5:fe:51:22:1e:e8:ca:d4:
         25:e3:38:65:41:d0:77:08:6e:df:4a:fb:7e:fd:a9:d5:30:a4:
         ff:bd:58:3c:45:75:81:0b:8a:5f:81:15:f9:61:60:20:ad:dd:
         7e:f4:0d:2e:c0:e2:e3:50:be:e7:98:02:ce:1d:96:26:b6:0e:
         c6:c9:50:15:72:7e:7b:8b:99:50:06:11:60:8c:9f:09:62:d0:
         72:95:06:e6:da:6a:eb:9b:0c:cf:60:0e:d5:a7:1e:d4:86:d3:
         0b:41:2f:69:c8:cc:bf:8d:fa:69:5f:8f:f0:62:72:da:dc:d0:
         35:c5:0b:b7:8a:88:34:98:13:66:0f:48:de:1f:40:74:4f:bb:
         a4:e5:6b:8f:ff:5a:81:9f:b5:22:3f:eb:28:a8:a2:f2:2d:7d:
         3f:58:7e:fa:d1:c7:b8:66:2b:71:be:46:9e:28:67:84:b3:43:
         32:35:b8:f9:30:ba:fd:ba:e0:2e:18:ae:f0:1d:a8:68:dd:cd:
         0e:89:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:17:25 2024 by rpki-client on console-ams.rpki-client.org