Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97CE5E1812EA11ED801D4CC8F1222468.roa
File:                     97CE5E1812EA11ED801D4CC8F1222468.roa (raw, json)
Hash identifier:          lrLrct6LFbI+2h9i2EOCqzpcFNMfSNfX2O5i/WB0VOk=
Subject key identifier:   D8:E3:78:D8:87:2C:2A:2F:E8:2E:57:2B:8F:19:15:A0:BF:DF:B0:14
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       075F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97CE5E1812EA11ED801D4CC8F1222468.roa
Signing time:             Wed 03 Aug 2022 05:10:30 +0000
ROA not before:           Wed 03 Aug 2022 05:10:24 +0000
ROA not after:            Sat 03 Aug 2024 05:10:24 +0000
asID:                     207459
IP address blocks:        102.129.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Aug  3 05:10:24 2022 GMT
            Not After : Aug  3 05:10:24 2024 GMT
        Subject: CN=62ea0346-ae38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:2a:bf:78:ce:d8:f5:4f:87:c1:ca:94:90:
                    7f:9e:8a:13:cc:7d:46:b0:ed:d4:c0:d2:06:b5:1c:
                    ec:b0:c9:1e:e9:eb:98:e2:e6:28:ad:d7:df:57:a3:
                    5a:32:bc:1b:a7:60:e6:25:67:3b:48:a1:dd:e1:d5:
                    2f:5d:98:1d:ad:21:39:29:22:89:54:b6:24:02:43:
                    0a:4e:cd:9e:3b:1f:92:a5:0a:f4:6d:e5:64:8f:e3:
                    23:83:70:92:73:ac:11:2c:c3:39:9c:a1:7d:67:d9:
                    c9:ab:0b:f3:83:f3:c6:8e:72:66:39:89:04:ba:d8:
                    cc:ed:76:d9:c6:df:03:4a:b9:42:bf:41:6a:82:00:
                    a7:26:97:7f:08:9e:9a:e4:6c:8b:8d:8a:64:55:6c:
                    b6:d9:5a:b4:53:57:6e:55:12:50:b6:a6:5e:9b:63:
                    b0:5f:ee:c1:ae:7c:59:1b:e2:59:64:26:8e:16:dd:
                    0f:d8:68:be:82:d2:5f:f9:f3:13:b3:35:b0:b5:02:
                    41:e4:58:3d:9f:61:9a:c7:9b:01:52:f1:8a:70:4e:
                    20:23:17:f6:79:8e:21:0b:1c:8f:9c:f0:a7:ad:67:
                    9a:d7:d3:4a:6b:63:b4:6a:a5:9d:f4:31:56:99:da:
                    2b:ae:14:37:3f:ab:11:8b:1f:84:d1:e0:ee:1e:f3:
                    fa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E3:78:D8:87:2C:2A:2F:E8:2E:57:2B:8F:19:15:A0:BF:DF:B0:14
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/97CE5E1812EA11ED801D4CC8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d3:a0:3b:d3:40:90:5b:5c:53:bf:88:40:0d:58:c0:ef:f3:
         64:9b:bc:18:4b:cd:cd:e1:cd:ca:97:b5:70:a1:af:94:ff:95:
         c2:18:06:d7:75:f7:bf:d4:d8:9d:d0:be:aa:76:af:8c:fe:1b:
         85:eb:a4:a0:30:cf:27:76:1c:fd:c2:0a:5d:e4:75:dd:68:28:
         0c:62:ba:a3:f8:4d:cd:73:de:a2:bc:db:b3:7f:4e:54:fa:42:
         ee:bd:0e:9a:50:a1:9c:e7:50:25:58:b6:ac:f5:ce:bd:90:1a:
         da:3d:9f:5e:11:9c:64:14:b2:e0:d2:57:2e:b2:d1:ab:2a:18:
         b7:3d:fd:bc:ab:84:cb:92:44:e7:8c:04:dc:3d:59:dc:ea:67:
         32:d1:49:ca:16:15:58:26:85:30:db:7e:b9:b1:89:9d:cc:98:
         0f:96:56:ed:55:60:e5:95:3a:b5:cc:a9:40:d2:a2:f2:41:73:
         92:34:09:3e:6e:45:c6:40:5a:cc:6a:0c:bf:92:16:a2:59:36:
         9d:49:9c:ef:0a:9b:88:23:72:10:ca:18:41:09:b3:7a:e8:98:
         38:f9:0d:47:b3:ed:ce:24:e7:6d:23:a7:5e:88:6d:b0:4d:4f:
         d2:c7:12:b6:d3:24:5e:6b:94:a2:07:47:c4:ef:a7:a0:be:81:
         d5:b8:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org