Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABE5B5FEB37011EEBACC17C4775412E6.roa
File:                     ABE5B5FEB37011EEBACC17C4775412E6.roa (raw, json)
Hash identifier:          rFxn4bViFyj3THtOg/WnmgQLJo9eJhrdzTjrEZfFygs=
Subject key identifier:   9D:8B:B2:5E:31:CC:50:12:6A:4B:18:BD:81:F6:E9:C4:1F:04:BF:54
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0EF2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABE5B5FEB37011EEBACC17C4775412E6.roa
Signing time:             Mon 15 Jan 2024 06:38:20 +0000
ROA not before:           Mon 15 Jan 2024 06:38:16 +0000
ROA not after:            Thu 15 Jan 2026 06:38:16 +0000
asID:                     834
IP address blocks:        102.129.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jan 2024 09:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3826 (0xef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jan 15 06:38:16 2024 GMT
            Not After : Jan 15 06:38:16 2026 GMT
        Subject: CN=65a4d2dc-7b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:3f:c8:28:cf:81:e0:af:67:98:40:26:29:
                    2d:17:f9:f5:81:73:99:bf:d2:38:64:4d:14:8a:36:
                    1c:4d:1e:bd:4e:d4:42:c7:c4:b3:b2:75:4f:6e:9f:
                    9b:45:ab:21:dd:9c:84:99:ef:c6:0c:77:d8:ff:2a:
                    ab:4e:24:0e:1d:ce:18:3b:dc:dc:cf:f5:cd:7b:e1:
                    2a:18:1a:9b:ad:77:7d:63:86:15:0e:e9:65:55:3a:
                    f9:b3:a4:fe:15:2e:cc:8e:cd:e4:e1:c2:50:93:7f:
                    0b:48:4d:ac:77:ba:9a:7d:71:b4:0b:e0:84:53:f4:
                    1e:be:68:3b:c5:9e:7c:4f:4b:e7:1b:da:71:d6:61:
                    12:d6:88:b4:dd:5b:37:17:ea:d0:23:2e:8d:61:d9:
                    0a:c4:02:4d:40:c0:42:cc:2d:1c:04:71:ce:17:7e:
                    65:45:3f:03:ab:00:74:ec:74:04:9e:b7:0c:50:63:
                    81:8e:65:fe:a8:6b:da:6c:10:7b:90:96:38:ad:14:
                    a2:a6:e3:3d:f9:d0:bc:d1:af:88:9d:97:33:6c:b1:
                    1a:dd:2a:cc:43:06:82:3d:d9:0a:a6:ad:a3:ac:84:
                    93:f2:16:b6:6f:9e:e3:11:e9:a0:f0:93:a0:07:2a:
                    d6:ba:75:a0:8a:ee:e0:80:4d:dc:52:56:38:e3:30:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8B:B2:5E:31:CC:50:12:6A:4B:18:BD:81:F6:E9:C4:1F:04:BF:54
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABE5B5FEB37011EEBACC17C4775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:32:7d:0a:ba:b0:d9:c7:61:42:d6:8b:b2:a9:76:d4:0b:eb:
         87:0a:ad:29:98:0a:fe:4b:1c:cb:8d:b7:46:3e:c2:4c:5a:15:
         da:32:a9:24:25:b0:09:5d:ce:16:f4:56:6f:2d:e5:3f:11:5c:
         54:b6:a3:99:5a:78:91:e8:08:87:89:16:0b:2b:64:b3:23:f3:
         88:6f:1b:30:b4:dd:16:55:2a:2a:17:db:54:5a:f9:91:1d:3a:
         b3:2b:ae:8f:f5:02:eb:43:31:16:20:e8:47:30:71:2a:b2:40:
         06:89:0f:76:cb:88:80:e7:8c:2e:8d:96:d9:c1:08:24:6f:e3:
         0e:d0:71:0b:01:d4:ad:28:2b:ea:08:e7:d1:c3:42:56:23:92:
         d8:19:c7:5b:2e:0c:4c:88:43:09:db:e8:b5:64:91:08:dc:a6:
         65:ea:38:94:aa:92:24:42:d6:e0:7a:31:7b:5c:2d:4b:b5:82:
         6d:13:96:1f:42:4d:a4:9f:90:65:6b:02:a6:bc:75:0f:90:6c:
         43:22:64:69:96:8f:59:66:3f:64:6e:2f:d3:87:e8:38:60:7f:
         1d:a0:c0:f9:4a:63:5b:c8:fe:27:71:f6:b9:d8:6e:38:4f:16:
         54:58:d9:03:d1:52:88:ad:7c:23:50:50:b6:21:d0:d9:f6:53:
         c5:af:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org