Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AE51F428FB9411ECBE3D7D9FF1222468.roa
File:                     AE51F428FB9411ECBE3D7D9FF1222468.roa (raw, json)
Hash identifier:          cv1TmK/QPyUd59kevEjie90NYDDOQg46zTUK5bVsm+Q=
Subject key identifier:   15:17:76:87:A4:17:90:F4:65:D2:47:F8:47:E3:B1:C8:CF:60:57:74
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0717
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AE51F428FB9411ECBE3D7D9FF1222468.roa
Signing time:             Mon 04 Jul 2022 12:27:34 +0000
ROA not before:           Mon 04 Jul 2022 12:27:30 +0000
ROA not after:            Thu 04 Jul 2024 12:27:30 +0000
asID:                     40676
IP address blocks:        102.129.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul  4 12:27:30 2022 GMT
            Not After : Jul  4 12:27:30 2024 GMT
        Subject: CN=62c2dcb6-5060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bb:6c:d2:33:b9:a3:e7:68:3e:d5:55:c0:68:
                    30:87:97:0c:62:ee:c2:65:61:bd:fb:45:38:36:74:
                    17:f4:4c:3e:2e:56:62:1a:dc:ef:13:1e:50:80:d3:
                    ee:0f:42:d7:cd:26:87:28:cc:25:7f:4c:0f:54:eb:
                    2b:1f:b5:b2:2d:a2:b0:42:8e:c8:b9:86:3f:56:c0:
                    88:b1:b1:aa:b7:d2:7f:23:31:68:dc:75:76:ec:8e:
                    ba:ce:19:c8:79:7b:d3:18:c7:0c:7c:bd:b4:28:8c:
                    9b:9b:f3:c9:ab:65:08:5a:ba:bf:6b:15:0b:73:8c:
                    59:bb:d5:10:19:d4:20:37:cc:23:ce:1d:76:56:7c:
                    4b:ef:69:cd:f1:db:2e:f8:73:a7:3f:c4:17:f7:50:
                    dd:03:94:8e:cd:bc:11:af:92:1d:b1:9b:97:bc:5c:
                    34:28:61:04:c2:8b:c3:f1:4f:5f:7c:81:ac:60:ff:
                    01:9c:60:a9:53:96:0f:a0:8c:aa:16:07:8e:a2:28:
                    5b:23:35:e0:b6:15:70:98:9c:e1:1d:6b:e3:65:a4:
                    a2:5b:3a:f5:11:93:95:02:38:07:4b:cc:6a:74:db:
                    be:77:d2:83:f2:48:80:f8:ce:58:43:68:b1:7e:c6:
                    d5:a0:67:5a:f5:60:06:12:b2:57:ec:99:4c:31:34:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:17:76:87:A4:17:90:F4:65:D2:47:F8:47:E3:B1:C8:CF:60:57:74
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AE51F428FB9411ECBE3D7D9FF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:4d:b8:46:96:4e:b4:f9:4b:77:91:4d:f3:be:c7:4c:2d:40:
         42:41:b1:10:34:1d:6f:1d:61:ef:b9:f1:f5:93:16:06:27:f6:
         17:19:f4:c0:41:d7:03:cc:f9:49:bf:43:36:be:ce:82:28:63:
         21:ad:3c:43:f8:aa:8c:89:32:f5:4a:e0:04:52:7d:5e:31:5f:
         3b:f6:7c:aa:0d:f3:e5:de:e7:74:37:61:84:eb:dd:6d:74:48:
         2b:24:7d:80:2c:5a:80:eb:f9:78:f4:35:33:1e:22:4f:11:f1:
         d6:a8:34:e8:2c:70:63:4f:0b:13:84:ff:75:84:d9:e8:06:45:
         18:84:6c:0b:83:d8:c9:a9:62:c8:8d:20:95:3e:41:9c:18:77:
         f8:89:c6:2f:c3:14:dc:bf:83:f3:08:5c:31:00:2d:e9:1c:4b:
         7a:20:13:c8:b8:be:37:f8:e7:68:98:a8:b7:e2:c4:83:ae:45:
         ca:53:ae:9c:33:25:e5:1e:a6:8e:28:28:c8:74:da:b1:61:2a:
         cc:47:c0:ee:b4:a0:39:92:4c:b3:b5:cf:1d:71:28:84:20:cb:
         58:f4:7a:eb:4d:f3:ee:49:eb:ae:6a:f6:d2:74:6a:8e:d1:e4:
         cf:e8:28:78:0d:b5:fd:a9:78:04:80:a8:30:96:f5:dd:4d:31:
         f1:4a:a5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 10:29:29 2023 by rpki-client on console-ams.rpki-client.org