Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B62256EE668C11ED812BBADBF1222468.roa
File:                     B62256EE668C11ED812BBADBF1222468.roa (raw, json)
Hash identifier:          y6T/8q5+Xjj2TWWgj8ZlweRuGSDBfEC+8caQK6wVdD4=
Subject key identifier:   12:AB:C0:13:35:03:41:1B:05:C9:73:46:0B:AB:FC:CE:B7:60:68:E1
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       08EF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B62256EE668C11ED812BBADBF1222468.roa
Signing time:             Thu 17 Nov 2022 15:30:06 +0000
ROA not before:           Thu 17 Nov 2022 15:30:00 +0000
ROA not after:            Sun 17 Nov 2024 15:30:00 +0000
asID:                     62240
IP address blocks:        102.129.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287 (0x8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Nov 17 15:30:00 2022 GMT
            Not After : Nov 17 15:30:00 2024 GMT
        Subject: CN=6376537e-82ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:19:ed:a6:b1:f5:d1:09:e5:31:92:c5:5d:
                    87:cc:42:b5:59:52:8e:9e:45:77:01:3d:68:7d:ee:
                    0f:75:d6:5d:88:29:ae:a9:ea:f1:e0:0c:ed:04:59:
                    99:c3:66:c7:4a:ab:db:f8:ff:ea:ab:de:8e:48:96:
                    d5:7b:f1:de:0b:ec:13:d5:cb:8c:93:9c:2a:12:61:
                    2a:ab:a3:44:bf:36:4a:5e:93:9b:08:15:17:3b:08:
                    b9:c5:38:e5:e5:6a:b9:c6:ce:b5:b1:e7:59:d0:dc:
                    1f:70:75:c6:1a:5a:bd:cb:d7:c3:bc:b2:46:bf:c8:
                    59:0c:5b:63:81:0d:54:e0:5d:78:e2:87:bc:4e:df:
                    f4:18:65:81:ed:46:f0:05:40:ad:e5:a0:cd:82:00:
                    94:89:ae:7e:75:8f:3e:b7:18:79:ae:c3:0c:8a:ea:
                    b7:bc:74:e1:b7:7a:c5:8e:c9:d0:18:bf:f1:e0:72:
                    89:31:d9:06:de:f8:db:86:26:68:89:cd:f8:ef:9c:
                    8d:43:e6:c2:9c:ac:bb:bd:bb:ec:0f:38:cd:df:45:
                    06:0a:37:5b:0c:a3:78:41:2b:fa:6b:7e:77:53:17:
                    db:08:06:f0:75:5c:89:56:87:72:90:87:56:a5:8d:
                    57:e4:10:dd:43:99:b9:a1:5d:64:f0:af:68:1f:fd:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AB:C0:13:35:03:41:1B:05:C9:73:46:0B:AB:FC:CE:B7:60:68:E1
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B62256EE668C11ED812BBADBF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:2e:69:7e:b3:a9:6f:b8:66:1c:71:d8:f2:4a:5d:27:61:a3:
         59:a0:6e:76:95:5e:01:81:ff:e2:b0:35:c7:d0:8f:01:71:26:
         68:d7:3e:8f:d2:1f:3e:41:9c:27:69:94:62:a6:a3:66:b2:df:
         e1:17:06:84:0e:51:ee:4f:be:b0:ff:ab:b7:f5:bc:20:77:a2:
         a3:01:df:f7:dc:29:ff:d1:f8:6e:9d:c5:89:9d:a4:1b:e5:a1:
         57:4c:40:e1:3c:3e:75:5c:f5:99:30:35:87:ea:95:fe:25:56:
         2f:15:10:25:4b:31:84:c7:f3:ed:cc:9f:78:2d:9a:0c:b7:2d:
         b1:a3:48:ce:de:4a:1d:50:a7:78:2d:d9:93:56:27:ae:2e:fb:
         3b:56:47:7a:6b:5f:dc:f0:70:0b:f9:d5:63:f8:26:c6:8a:19:
         97:48:2d:89:3f:75:f4:10:5f:54:b0:cb:40:7e:9d:a2:26:37:
         a4:8d:69:ef:cc:4e:e0:73:91:d2:98:f3:60:b0:bf:0c:9d:38:
         af:64:56:f9:47:5c:20:0f:d4:30:6b:b0:26:96:74:b7:df:67:
         8b:69:77:29:9a:cf:f2:7c:c9:48:17:3d:f5:04:bf:47:8a:2e:
         c0:15:99:27:19:73:0a:fd:ca:0c:22:15:b2:f9:15:35:7d:37:
         19:31:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org