Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D44F772EED6811EDA14C5B714AD9E6FC.roa
File:                     D44F772EED6811EDA14C5B714AD9E6FC.roa (raw, json)
Hash identifier:          pN42ah7iXuy3M8wTfG7ElnQNwi4yxghSSIoRDnt9PIo=
Subject key identifier:   F1:5E:22:69:D3:93:81:74:AD:04:80:D2:07:A0:BE:93:06:67:4F:C6
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0B5A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D44F772EED6811EDA14C5B714AD9E6FC.roa
Signing time:             Mon 08 May 2023 06:23:21 +0000
ROA not before:           Mon 08 May 2023 06:23:17 +0000
ROA not after:            Wed 07 May 2025 06:23:17 +0000
asID:                     60781
IP address blocks:        102.129.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Jun 2023 17:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2906 (0xb5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: May  8 06:23:17 2023 GMT
            Not After : May  7 06:23:17 2025 GMT
        Subject: CN=64589559-1efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:2d:61:4b:20:b6:4d:05:76:68:9f:8d:12:
                    92:02:7c:10:00:c5:98:02:97:a5:72:f8:6c:a1:82:
                    53:b2:ea:4a:01:d6:1d:6a:d2:ab:81:fd:12:2b:c6:
                    3c:a3:29:b3:69:54:1a:ef:3e:e7:2b:bb:da:96:d2:
                    41:37:d8:ba:6e:0a:61:1c:90:20:7c:34:d1:38:22:
                    82:fc:35:52:d9:e0:2d:b5:b2:4d:3f:c2:f8:3b:16:
                    c8:b2:92:39:ce:86:67:cd:00:fc:46:14:c3:63:96:
                    94:d9:e3:63:f3:c8:ff:3b:3b:4e:ec:2d:d3:ca:0b:
                    5e:68:d3:77:93:43:69:3e:b2:9a:87:ef:5d:97:7c:
                    75:34:c8:30:66:7e:20:e4:65:77:02:89:ad:de:29:
                    ce:68:62:55:b5:ea:96:93:45:c3:c2:c1:2d:33:ac:
                    89:3b:a7:37:79:70:bf:2c:27:94:f8:fe:01:8b:ee:
                    28:8d:5e:50:72:c2:b8:e1:98:2c:b5:87:d4:ce:6c:
                    d2:5c:e4:a1:66:bb:8c:35:b5:2a:a3:5b:14:0b:19:
                    19:fd:48:8f:6b:84:50:70:f1:b4:91:94:90:1c:c9:
                    2f:2e:bf:30:44:82:49:d0:fe:2a:4e:41:90:29:df:
                    a6:f1:1c:f1:71:89:fa:5e:e2:57:37:d7:8b:21:e7:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:22:69:D3:93:81:74:AD:04:80:D2:07:A0:BE:93:06:67:4F:C6
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D44F772EED6811EDA14C5B714AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:6b:6a:72:5c:1f:8b:49:72:7a:0b:f2:28:49:76:19:3a:e2:
         f4:f9:13:b6:21:48:4b:7c:11:d5:2c:aa:5e:92:1d:15:21:9c:
         ea:e5:45:48:8f:36:27:f5:b5:4e:20:e6:2c:94:47:ed:b8:9f:
         4a:cb:4a:e0:58:ed:21:f2:0d:b9:a8:dc:fc:a0:4f:15:72:ce:
         df:b0:6d:58:d9:3c:65:fe:4f:09:a2:7d:03:c0:84:8b:e6:ae:
         c4:49:0e:2b:15:4e:82:ca:78:40:e1:5b:67:0f:76:c8:a4:74:
         b7:31:93:82:84:26:e6:84:0f:2c:a5:78:29:5a:81:3d:2a:67:
         13:96:f2:3e:85:a4:0a:25:6f:b7:7d:bb:40:fc:13:98:4a:cd:
         36:6e:4f:53:d5:c7:63:db:02:a2:7a:18:10:bb:98:12:74:6d:
         d1:89:05:c8:a1:79:d2:0c:2d:15:d0:e8:d7:dc:8b:fe:0a:e5:
         61:6f:d2:cc:e9:10:98:59:16:50:7b:79:18:bd:10:d1:75:e1:
         74:b2:dd:ce:b1:bc:3a:7e:c1:aa:34:5f:59:9b:cb:72:e8:32:
         3d:a5:6f:bc:de:6a:53:fe:69:e7:9e:b8:c7:27:f8:be:4a:af:
         11:33:08:b0:58:51:ba:9a:1f:d2:b4:58:9f:be:b0:c1:fd:c8:
         1d:0a:c8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org