Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8EEDAFD2D0AE11EEAE911D73775412E6.roa
File:                     8EEDAFD2D0AE11EEAE911D73775412E6.roa (raw, json)
Hash identifier:          FFtm3Lp4aP6YXXVmHwOrODWowuHpue5iaY3Ogo8gi8s=
Subject key identifier:   DF:4D:4B:1B:1B:E6:3F:F7:E2:FD:C7:57:6B:13:A1:7F:DA:8F:60:67
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0F73
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8EEDAFD2D0AE11EEAE911D73775412E6.roa
Signing time:             Wed 21 Feb 2024 11:44:24 +0000
ROA not before:           Wed 21 Feb 2024 11:44:20 +0000
ROA not after:            Sat 21 Feb 2026 11:44:20 +0000
asID:                     61317
IP address blocks:        102.165.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Mar 2024 16:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3955 (0xf73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Feb 21 11:44:20 2024 GMT
            Not After : Feb 21 11:44:20 2026 GMT
        Subject: CN=65d5e217-0352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:67:68:53:7c:e4:10:9d:e5:4a:26:d7:12:
                    74:97:14:a0:64:00:44:42:b7:d7:b3:af:73:ae:36:
                    50:88:84:50:93:c0:68:b1:02:ee:7c:38:89:b7:83:
                    64:80:37:58:96:83:9f:e9:ee:4c:0a:68:cd:25:15:
                    52:4b:e9:5c:65:c8:ff:d6:50:c0:ff:7e:b9:40:c8:
                    c5:f2:45:8f:7e:ba:6d:d0:5b:47:bf:74:89:ec:78:
                    a5:eb:c9:65:6b:6d:0d:fc:e4:76:54:dc:a2:de:87:
                    a0:23:73:c9:0e:a1:49:84:cb:d6:04:53:e1:2c:d2:
                    68:fa:87:37:fe:28:0a:22:6c:c3:89:81:b7:52:7e:
                    0c:76:ac:9a:6f:49:84:3a:dd:f0:a6:c1:f4:f3:ce:
                    2e:59:0d:1d:04:ed:65:8c:95:92:e4:02:3e:35:97:
                    59:14:85:50:1a:77:24:44:75:a9:39:da:a5:0e:dd:
                    76:b2:16:de:1a:31:33:bb:9e:94:d6:4d:89:10:eb:
                    58:c6:10:f1:34:b2:73:b6:27:8a:b6:d2:a8:5f:0d:
                    9e:83:0a:83:ac:45:96:95:30:3b:ae:af:06:62:9a:
                    a8:7e:08:60:7b:92:71:41:ca:93:66:4c:c8:19:9b:
                    ac:7b:75:6c:0d:24:77:a7:d1:37:c3:ac:11:31:1c:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4D:4B:1B:1B:E6:3F:F7:E2:FD:C7:57:6B:13:A1:7F:DA:8F:60:67
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8EEDAFD2D0AE11EEAE911D73775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ec:f0:f2:09:35:76:9f:e1:13:9f:1d:41:3a:04:f2:89:15:
         aa:be:e8:ba:2b:7a:c1:b0:67:cf:30:45:f8:c5:c4:bb:6c:3b:
         25:f3:40:63:69:1a:98:33:ba:e8:58:fb:f8:fa:8d:b3:d2:14:
         0d:2d:ce:eb:85:fd:f8:c3:95:7f:e3:de:61:33:88:ed:b0:37:
         de:c8:e6:6e:9b:06:db:93:da:66:e0:ed:8b:c6:88:47:d0:51:
         22:c4:c5:6f:4f:59:60:45:31:19:3f:43:a3:28:44:a5:48:06:
         73:a2:fc:86:53:fa:0c:d2:d6:17:11:9a:02:57:7b:5a:af:94:
         97:06:5d:4f:80:54:b3:43:cf:f5:f0:ea:87:b9:6a:5b:de:ed:
         05:34:d3:e3:50:fc:89:2d:72:1f:16:da:df:93:74:e4:b3:bd:
         eb:93:cf:fd:fc:bb:5b:02:39:d2:20:6c:44:41:e9:bd:4b:7d:
         12:c3:94:2a:17:2b:28:00:17:c4:4d:c5:2c:5b:c8:a4:a0:5e:
         a0:66:39:89:e3:43:b0:e7:dc:c8:75:34:89:a9:48:ff:68:d0:
         53:19:4c:52:3e:bd:17:3c:ed:30:ee:2d:ad:da:3d:76:85:1b:
         ce:6e:fd:a6:a0:a0:a2:46:5f:1d:29:43:e5:d0:03:c0:a5:b8:
         77:42:76:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----