Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CB73A980553911ED91F613BFF1222468.roa
File:                     CB73A980553911ED91F613BFF1222468.roa (raw, json)
Hash identifier:          AEz7mZenG+f4/D4TbqAci/U2Y1GKHzrTGKjmsmYWZ+M=
Subject key identifier:   23:D5:0E:76:FC:35:CE:43:FF:9C:E4:54:5E:79:5E:E0:29:32:E7:B5
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       089E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CB73A980553911ED91F613BFF1222468.roa
Signing time:             Wed 26 Oct 2022 14:23:43 +0000
ROA not before:           Wed 26 Oct 2022 14:23:40 +0000
ROA not after:            Sun 27 Oct 2024 14:23:40 +0000
asID:                     61317
IP address blocks:        102.129.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206 (0x89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 26 14:23:40 2022 GMT
            Not After : Oct 27 14:23:40 2024 GMT
        Subject: CN=635942ef-c4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:56:d7:2e:a6:b6:04:ba:3c:c9:3e:dd:b8:
                    0f:93:63:86:3a:d8:f4:12:c1:dc:5e:80:c2:c2:6b:
                    b0:5c:58:57:1d:83:93:61:1e:6e:ea:a9:0c:1c:6f:
                    7f:d9:24:46:81:75:a9:d7:01:23:79:9e:6f:de:9b:
                    e5:50:97:17:55:55:94:12:67:dc:18:11:f8:1c:f1:
                    3c:ac:6d:6a:3e:16:c7:b2:a0:ef:31:14:2a:57:48:
                    70:e7:97:7d:e4:c6:7a:76:71:ce:e9:bf:62:8b:de:
                    dd:74:16:6f:ba:88:6f:b5:70:ec:c4:bb:ec:64:32:
                    f6:0b:95:72:37:5b:93:c0:58:50:0b:80:3f:71:ed:
                    ef:9c:19:7f:5b:24:c8:aa:ce:d5:64:ba:89:90:21:
                    da:f9:94:48:86:06:31:a5:5f:ef:28:e4:4c:7e:b4:
                    c2:82:da:3e:c0:38:ec:89:b2:42:74:f7:12:81:da:
                    b8:df:06:4e:5a:1a:b9:96:83:33:5c:94:b8:a0:48:
                    3d:29:d9:8f:9d:cf:b2:76:ef:d7:37:1a:d1:81:fb:
                    2a:4e:29:0f:ce:8c:f7:62:59:cd:92:9d:27:c0:7e:
                    d2:83:70:5f:46:83:78:63:8a:85:1d:4c:6c:09:94:
                    f7:07:ff:8e:10:36:8d:b9:90:0b:49:a1:83:50:1f:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D5:0E:76:FC:35:CE:43:FF:9C:E4:54:5E:79:5E:E0:29:32:E7:B5
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CB73A980553911ED91F613BFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:bb:db:a5:05:0a:9b:f2:08:5f:0b:c4:44:6a:20:90:57:32:
         f4:10:3d:da:b9:82:cb:68:d5:0c:8a:c7:e2:cd:75:c8:7d:74:
         f6:46:73:96:c1:01:eb:b5:b0:d6:2f:20:e0:26:0c:81:f0:30:
         c0:83:c9:01:82:08:b9:97:f1:d1:0b:e3:5e:7c:9f:80:ee:76:
         fb:ce:0f:79:62:38:3c:a0:3e:da:54:2e:18:e4:99:77:60:d3:
         5b:46:52:19:1f:9d:a9:19:47:1d:21:99:8a:eb:61:aa:1b:97:
         00:0c:5a:0f:c2:7b:77:9d:b3:c4:87:f2:37:ea:de:35:84:7f:
         da:49:0b:bd:7c:67:aa:ea:ac:de:90:91:6c:f3:91:57:13:1b:
         e2:0c:06:f7:25:f7:70:63:f9:1f:27:7e:a6:71:5d:0c:22:e5:
         7a:aa:f3:b8:63:4c:38:12:39:25:5e:23:8f:78:b3:43:3b:cd:
         96:d1:0b:3b:75:88:cb:ca:77:1b:33:ee:4d:65:9b:b7:97:1c:
         ea:d1:3c:70:09:05:14:85:f0:3f:21:cf:12:92:17:a9:83:d5:
         07:61:89:4b:64:49:4e:4c:47:c9:27:b3:0c:0f:01:a1:71:f5:
         e9:94:f7:12:ab:6a:e4:b0:a0:4a:30:fb:1e:fc:c5:30:c1:6d:
         2d:26:1d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:34 2024 by rpki-client on console-ams.rpki-client.org