Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/99F1676026AB11EDB3D0A594F1222468.roa
File:                     99F1676026AB11EDB3D0A594F1222468.roa (raw, json)
Hash identifier:          WosJkPs8CnZ/plGBnpn9k1j45qpJY8tIPFBl55JtOh8=
Subject key identifier:   92:29:98:14:1E:B0:6B:32:0C:2D:8C:CB:0F:5C:47:4D:8D:6E:F0:4C
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       07AE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/99F1676026AB11EDB3D0A594F1222468.roa
Signing time:             Sun 28 Aug 2022 08:29:58 +0000
ROA not before:           Sun 28 Aug 2022 08:29:55 +0000
ROA not after:            Mon 28 Aug 2023 08:29:55 +0000
asID:                     7018
IP address blocks:        102.129.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1966 (0x7ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Aug 28 08:29:55 2022 GMT
            Not After : Aug 28 08:29:55 2023 GMT
        Subject: CN=630b2786-3ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:ef:fa:24:2e:e2:54:37:2f:9e:d3:62:a2:
                    a1:86:e7:a0:36:d9:b4:53:44:7c:63:e1:db:39:93:
                    a8:09:e7:d3:2d:16:78:73:ed:dc:24:5d:b3:a5:b5:
                    19:ee:f0:0a:d8:8b:ab:9a:f0:6c:28:dd:79:c1:a4:
                    f8:6d:0c:53:1a:86:4c:42:9d:be:f6:b1:c8:05:61:
                    11:04:e4:9a:e1:41:9b:5e:32:e1:1c:86:6b:4e:a1:
                    b2:2e:fa:af:cb:66:ba:ef:ef:52:0f:c7:fa:8d:c5:
                    ba:d5:d6:74:0f:66:a1:09:3c:50:d0:19:07:81:82:
                    aa:6f:b2:90:e6:30:f9:08:7e:00:77:19:72:89:25:
                    3b:07:1e:7a:44:12:cf:bf:48:45:ea:39:24:95:9a:
                    30:85:bb:b1:de:3e:bd:5d:f1:d2:21:e6:da:0f:c0:
                    4d:d3:19:70:f0:2c:54:bb:cc:8c:a2:2a:b2:d4:66:
                    88:cf:04:8d:eb:f2:e3:ae:15:b4:a2:c7:d3:55:42:
                    7c:f9:c0:69:30:fe:7c:57:c2:c5:c0:0f:84:ee:27:
                    48:99:34:21:d3:09:51:4b:cf:dd:ef:e9:b9:9d:a9:
                    c2:f7:a1:03:cf:b6:64:15:3c:d4:33:fb:1c:04:8a:
                    0d:50:57:cd:4e:a8:2d:45:3d:e7:6a:af:c8:db:29:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:29:98:14:1E:B0:6B:32:0C:2D:8C:CB:0F:5C:47:4D:8D:6E:F0:4C
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/99F1676026AB11EDB3D0A594F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:96:fe:bb:5f:09:0e:e5:6b:12:d5:1b:5f:14:03:d6:84:1e:
         d7:69:1c:3f:d9:45:e9:fe:67:e2:6a:63:dc:38:02:77:45:84:
         b5:13:ae:40:1c:69:5b:38:cd:52:34:47:0c:b1:2c:b1:86:ce:
         19:8f:f0:05:77:f1:a3:83:f6:71:55:29:76:a2:06:d5:19:0d:
         31:da:b0:92:0e:93:ab:5c:ed:ff:ef:04:53:17:f1:08:fd:45:
         a6:92:6c:c6:de:1e:0f:bf:83:c5:7c:ce:e9:43:ee:4a:62:cd:
         1e:5f:e1:8c:4e:aa:8d:f8:11:c0:7e:83:0e:2a:ce:41:9f:40:
         72:78:ca:13:0a:44:4a:e8:8f:71:c5:f5:ff:6a:15:3a:3a:fe:
         44:3e:4f:e0:e7:b8:d7:5f:19:d7:af:a0:97:54:f5:05:f2:0a:
         10:76:20:2b:46:e9:91:37:a6:61:42:b3:59:67:b6:19:f0:7b:
         6e:86:4d:72:a6:77:f4:25:92:cb:59:dd:09:79:7b:be:f4:71:
         18:c0:7a:45:f7:af:08:fa:ab:b9:09:11:cf:9f:64:36:cf:fd:
         a4:b7:f0:37:80:b4:81:8a:6e:62:88:26:0a:89:a5:96:ca:82:
         4c:ca:d0:2b:bf:09:a3:cc:3c:8b:b0:cf:0b:93:77:02:ef:6f:
         f9:4e:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org