Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A221466C2FAF11EFB18E4A82762E951A.roa
File:                     A221466C2FAF11EFB18E4A82762E951A.roa (raw, json)
Hash identifier:          wnlQfrBRT+OxsY99ve0xx3B4dNJNgqyZnoEKySftv5k=
Subject key identifier:   E5:68:DD:2F:D8:FD:92:E7:DB:CD:32:A4:34:13:8B:04:A8:DC:0C:87
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1104
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A221466C2FAF11EFB18E4A82762E951A.roa
Signing time:             Fri 21 Jun 2024 09:21:26 +0000
ROA not before:           Fri 21 Jun 2024 09:21:23 +0000
ROA not after:            Sat 20 Jun 2026 09:21:23 +0000
asID:                     7018
IP address blocks:        102.129.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 05:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4356 (0x1104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun 21 09:21:23 2024 GMT
            Not After : Jun 20 09:21:23 2026 GMT
        Subject: CN=66754616-61d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:42:fb:02:2b:7d:4c:c9:47:4d:28:c5:5e:31:
                    00:32:ff:7c:6a:f4:d8:55:a9:51:de:ee:3d:78:9f:
                    bb:72:af:4e:af:88:37:30:0a:3a:b9:30:fc:e1:d7:
                    83:66:02:7b:c1:bb:b3:ef:cd:42:7a:42:10:73:55:
                    21:c2:cc:c3:ea:83:72:7a:7f:a1:24:b1:41:31:c3:
                    d9:42:ce:f4:e9:a2:50:20:d7:6d:29:14:df:bb:1e:
                    8a:94:f2:91:bc:14:cc:a5:c3:9b:e5:6a:b4:bb:aa:
                    7b:34:99:a6:62:ad:a4:3d:cc:14:0e:a6:eb:3f:18:
                    a5:2c:7b:f6:62:5b:1d:a3:52:eb:9a:05:d1:a7:f9:
                    d7:93:60:d4:36:f6:6c:da:37:59:f1:2f:d5:68:2c:
                    05:5c:d6:ec:3f:d8:6c:19:72:57:5a:e4:08:59:8b:
                    ef:4e:e3:f2:7c:fc:4a:9d:16:82:12:a1:2a:7b:6e:
                    31:78:22:ee:d7:87:b7:dd:69:ff:7d:26:57:69:2a:
                    51:88:8e:fc:84:22:23:59:9f:37:ed:04:a2:d6:d4:
                    19:5a:f0:a3:35:40:15:4a:53:4e:33:68:fd:22:ff:
                    bd:c8:40:cc:7b:62:13:fe:28:ce:87:68:df:7e:80:
                    ae:29:a3:d7:5e:06:c5:df:a9:20:67:bd:b6:bf:0c:
                    bf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:68:DD:2F:D8:FD:92:E7:DB:CD:32:A4:34:13:8B:04:A8:DC:0C:87
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A221466C2FAF11EFB18E4A82762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:8b:33:9e:3a:af:ff:94:10:36:6e:7a:c8:53:f0:93:48:14:
         06:07:06:08:41:dc:3c:38:e1:6c:85:7e:1b:e9:85:7b:50:69:
         04:47:fb:2e:ac:2a:c2:7d:48:78:f1:20:d6:3c:31:f5:1d:3c:
         a0:25:79:21:0f:32:ef:b7:b0:2e:4d:55:8a:46:78:6e:23:83:
         1f:ce:84:08:42:58:cf:e5:a9:ed:3b:b7:51:72:d1:e7:88:d5:
         67:82:08:08:8d:27:f4:97:4c:fa:c6:02:04:07:03:34:51:8c:
         cc:82:7e:57:2b:bf:03:7a:21:f5:ff:a0:9c:b4:7e:c6:89:53:
         13:f1:39:18:af:dd:e6:fb:78:30:29:c0:ee:88:a6:43:41:52:
         dc:1d:b5:b0:35:31:2e:e0:7f:76:0f:c5:c7:e5:a7:9b:67:b2:
         15:f1:7d:3b:94:a1:0e:89:7c:a6:67:28:a7:f1:9a:82:0f:72:
         c8:bc:41:35:08:0d:d5:17:36:34:79:ac:0f:a9:cb:06:78:85:
         cc:81:2b:ff:46:52:d4:5f:45:da:85:dd:f0:f1:28:23:d4:c7:
         95:9b:a7:22:d7:6e:f4:15:1e:1a:cb:d0:66:58:5f:f3:11:64:
         d8:42:be:11:45:56:d9:4c:6b:a7:ba:1b:0c:95:49:f8:86:0c:
         5a:a9:37:a5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEQQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA2MjEwOTIxMjNaFw0yNjA2MjAwOTIxMjNaMBgxFjAU
BgNVBAMTDTY2NzU0NjE2LTYxZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDsQvsCK31MyUdNKMVeMQAy/3xq9NhVqVHe7j14n7tyr06viDcwCjq5MPzh
14NmAnvBu7PvzUJ6QhBzVSHCzMPqg3J6f6EksUExw9lCzvTpolAg120pFN+7HoqU
8pG8FMylw5vlarS7qns0maZiraQ9zBQOpus/GKUse/ZiWx2jUuuaBdGn+deTYNQ2
9mzaN1nxL9VoLAVc1uw/2GwZclda5AhZi+9O4/J8/EqdFoISoSp7bjF4Iu7Xh7fd
af99JldpKlGIjvyEIiNZnzftBKLW1Bla8KM1QBVKU04zaP0i/73IQMx7YhP+KM6H
aN9+gK4po9deBsXfqSBnvba/DL+RAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5Wjd
L9j9kufbzTKkNBOLBKjcDIcwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0EyMjE0NjZDMkZBRjExRUZCMThFNEE4Mjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgeIwDQYJKoZIhvcNAQEL
BQADggEBAFGLM546r/+UEDZueshT8JNIFAYHBghB3Dw44WyFfhvphXtQaQRH+y6s
KsJ9SHjxINY8MfUdPKAleSEPMu+3sC5NVYpGeG4jgx/OhAhCWM/lqe07t1Fy0eeI
1WeCCAiNJ/SXTPrGAgQHAzRRjMyCflcrvwN6IfX/oJy0fsaJUxPxORiv3eb7eDAp
wO6IpkNBUtwdtbA1MS7gf3YPxcflp5tnshXxfTuUoQ6JfKZnKKfxmoIPcsi8QTUI
DdUXNjR5rA+pywZ4hcyBK/9GUtRfRdqF3fDxKCPUx5WbpyLXbvQVHhrL0GZYX/MR
ZNhCvhFFVtlMa6e6GwyVSfiGDFqpN6U=
-----END CERTIFICATE-----
Generated at Mon Jul 22 06:53:55 2024 by rpki-client on console-ams.rpki-client.org