Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BDCB8C26ED5B11EC87F3B9EDF1222468.roa
File:                     BDCB8C26ED5B11EC87F3B9EDF1222468.roa (raw, json)
Hash identifier:          xAetHmF5kmOG5kt+5YYltLhzUftpHIjZJnjmtFUU95E=
Subject key identifier:   83:A7:17:FA:B4:C0:22:9A:07:FD:99:08:7A:8D:8F:89:DE:44:17:FF
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       069F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BDCB8C26ED5B11EC87F3B9EDF1222468.roa
Signing time:             Thu 16 Jun 2022 10:04:42 +0000
ROA not before:           Thu 16 Jun 2022 10:04:37 +0000
ROA not after:            Sun 16 Jun 2024 10:04:37 +0000
asID:                     40676
IP address blocks:        196.251.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695 (0x69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun 16 10:04:37 2022 GMT
            Not After : Jun 16 10:04:37 2024 GMT
        Subject: CN=62ab003a-d0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:b9:e4:9d:21:94:e5:8f:11:89:95:04:1c:
                    3a:ea:ff:6d:97:21:a9:de:bc:5b:a8:0c:8c:cf:cb:
                    12:1c:56:27:d6:e3:ae:dd:b2:b2:dd:fc:c2:cd:78:
                    4d:df:9b:8a:04:bb:d9:e4:a9:7b:43:ed:42:a3:68:
                    22:15:b1:30:08:94:55:2f:f1:0b:f2:b0:6a:44:3d:
                    8e:1f:1a:36:27:52:16:f8:af:bd:b2:ab:21:dd:79:
                    4c:87:34:f0:74:bc:97:0e:a4:73:4e:2e:f8:1b:54:
                    22:97:f0:6a:01:eb:6b:a4:7a:e8:c5:de:40:e8:3a:
                    a9:dc:05:27:31:08:9f:38:d9:b9:ac:dd:de:aa:5b:
                    4f:52:50:fb:97:86:14:2e:4b:02:eb:ef:fd:a5:f3:
                    57:bc:98:69:8a:21:c8:2f:5c:f9:ca:dc:4f:32:9c:
                    78:39:c6:73:fc:94:47:4b:4f:d4:25:96:e1:16:4f:
                    fb:ca:a4:39:5f:76:a5:f4:3c:5f:8e:3b:09:06:23:
                    24:c4:98:50:0d:41:e7:6e:3d:e6:1b:57:d9:9d:4e:
                    4d:16:97:d5:50:c3:58:2b:36:3d:79:06:2d:2a:97:
                    72:02:13:14:c0:d2:61:cc:06:77:3b:26:51:cd:d0:
                    fb:29:6e:02:1a:b4:51:4b:c5:bb:9b:4c:0c:2d:33:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A7:17:FA:B4:C0:22:9A:07:FD:99:08:7A:8D:8F:89:DE:44:17:FF
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BDCB8C26ED5B11EC87F3B9EDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e4:44:5e:5e:10:82:a7:5e:da:f5:5a:33:f7:08:40:c1:5d:
         b2:1f:4c:09:f4:4a:3e:59:05:50:d2:80:ae:f5:eb:24:b2:fb:
         cc:34:96:63:94:03:56:46:70:47:db:4a:50:4c:4e:9d:d0:21:
         ef:23:51:e8:93:5e:55:3e:09:1f:72:72:64:ea:31:64:19:60:
         ee:f1:44:46:e9:a1:18:b9:42:ce:8e:a9:b3:2d:77:31:e8:d1:
         d5:47:23:97:8e:30:91:2c:45:78:32:e0:0d:ce:49:66:4b:2c:
         d8:62:e9:98:bb:4d:17:c8:ff:da:16:71:8e:ad:67:ca:7c:b7:
         2d:d7:f5:77:08:6f:a5:8e:5e:d4:aa:da:35:0b:a4:4c:d5:5f:
         73:6c:83:85:d6:2d:5b:af:1c:3d:11:d7:03:e5:1a:18:2a:b7:
         5d:c7:41:f1:17:00:9f:28:13:31:0b:59:8e:90:db:c1:cf:01:
         5e:03:06:ad:1c:db:0d:f7:fc:ea:99:fd:a4:c7:a0:bb:8b:a7:
         1b:73:c4:96:4e:42:d6:d2:3c:03:74:dc:be:0b:28:e8:58:2f:
         d4:18:b3:b0:6f:58:c2:40:1d:a2:9a:33:b4:c0:f7:87:28:e4:
         33:23:bd:cf:54:e7:98:52:fe:eb:c1:c9:c0:bb:e9:d5:ea:7c:
         d1:92:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org