Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F0A188A64BFE11EDBDB6D9C4F1222468.roa
File:                     F0A188A64BFE11EDBDB6D9C4F1222468.roa (raw, json)
Hash identifier:          FOgHeea4LsHr9wqHXQMYG7UVwIR+Cl9U9ikrPPpcMXI=
Subject key identifier:   2B:29:28:BF:5B:CB:35:F6:C1:C4:F0:62:76:AF:5B:35:CD:FC:88:30
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       085A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F0A188A64BFE11EDBDB6D9C4F1222468.roa
Signing time:             Fri 14 Oct 2022 20:29:45 +0000
ROA not before:           Fri 14 Oct 2022 20:29:40 +0000
ROA not after:            Tue 15 Oct 2024 20:29:40 +0000
asID:                     140947
IP address blocks:        102.129.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138 (0x85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 14 20:29:40 2022 GMT
            Not After : Oct 15 20:29:40 2024 GMT
        Subject: CN=6349c6b9-4d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:76:2a:d9:1e:42:b6:d4:36:34:d1:4c:78:
                    15:19:7f:c6:ba:9f:e4:10:c7:2d:f7:0d:0a:4b:e6:
                    a9:fb:78:56:f4:dd:43:a6:3f:e5:85:6c:ea:1d:7a:
                    12:d3:2b:e6:5f:b4:4a:f0:2f:77:ef:d2:bb:88:2b:
                    b8:3c:ee:2e:a2:43:7e:2b:74:46:e1:78:9b:e9:55:
                    09:42:c8:6f:90:71:7e:4d:fc:a3:7d:cb:4b:b9:3b:
                    38:15:29:63:28:15:b5:6d:33:0d:3c:43:77:86:b6:
                    2e:0d:8a:f5:58:98:d8:a2:a3:fa:df:7c:7b:fa:32:
                    ae:ca:1f:27:9f:42:f4:0d:f5:10:78:2b:2c:e4:fb:
                    15:fe:59:55:93:16:fc:74:34:fd:9f:54:e4:37:a1:
                    5a:2b:61:37:c5:e6:c4:91:14:44:c4:9d:ce:36:b8:
                    57:4d:8a:2b:6e:0a:f9:a0:a5:d7:3f:41:4e:ef:27:
                    c2:a9:7f:b2:6a:c5:a7:a8:80:23:36:8d:61:98:bb:
                    7d:54:96:37:47:f3:62:ea:b0:54:a9:7a:59:58:49:
                    48:9f:93:68:e3:fa:27:71:d5:e8:32:1f:02:0f:b0:
                    f4:c3:af:05:0c:84:a7:e9:56:82:fb:f4:ef:12:d6:
                    ff:92:08:a8:86:35:cb:38:46:09:32:be:e4:3d:ec:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:29:28:BF:5B:CB:35:F6:C1:C4:F0:62:76:AF:5B:35:CD:FC:88:30
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F0A188A64BFE11EDBDB6D9C4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:27:64:00:d7:60:b5:26:a8:d8:19:b1:b7:47:41:66:a8:3f:
         ca:6e:d3:8a:d8:df:35:40:ee:9e:2d:29:8a:ce:59:5d:a3:5f:
         8f:22:2d:cb:31:64:9e:fa:f7:25:e8:d9:8e:56:22:7a:33:30:
         a7:1b:85:f0:ec:93:aa:0f:f2:df:ff:e0:1f:e5:db:c8:23:00:
         14:2d:59:31:29:00:6c:38:e1:f9:9b:32:8a:6f:b1:7c:35:f5:
         08:ca:70:d6:8e:cb:94:bd:3d:64:97:ad:dd:44:a2:38:aa:81:
         08:ff:ab:1b:0b:5b:fd:e1:a9:c0:1a:6b:53:36:58:06:1b:66:
         b4:3e:4d:1e:f6:c6:d4:77:6c:e7:20:1b:a7:8d:ea:68:20:1c:
         40:00:a4:71:4f:3e:d4:01:ca:9a:2d:db:03:5a:6f:31:91:bf:
         f0:00:f9:a8:84:a7:05:ed:a0:ef:6e:a9:8c:3d:d7:8a:39:05:
         04:4a:90:ae:eb:04:b7:8a:a1:70:65:22:04:f5:06:48:bc:f6:
         9c:77:90:57:7d:a9:f4:c3:86:63:a1:a4:82:b9:4c:96:2d:bd:
         8d:e3:26:73:1a:c1:ea:c1:38:14:2a:b0:d8:f0:83:e7:d5:df:
         ca:c0:31:1a:9e:ca:8c:c2:9f:fa:c3:55:b4:ee:16:65:82:4e:
         73:dc:ac:d6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCFowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjEwMTQyMDI5NDBaFw0yNDEwMTUyMDI5NDBaMBgxFjAU
BgNVBAMMDTYzNDljNmI5LTRkMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/0XYq2R5CttQ2NNFMeBUZf8a6n+QQxy33DQpL5qn7eFb03UOmP+WFbOod
ehLTK+ZftErwL3fv0ruIK7g87i6iQ34rdEbheJvpVQlCyG+QcX5N/KN9y0u5OzgV
KWMoFbVtMw08Q3eGti4NivVYmNiio/rffHv6Mq7KHyefQvQN9RB4Kyzk+xX+WVWT
Fvx0NP2fVOQ3oVorYTfF5sSRFETEnc42uFdNiituCvmgpdc/QU7vJ8Kpf7Jqxaeo
gCM2jWGYu31UljdH82LqsFSpellYSUifk2jj+idx1egyHwIPsPTDrwUMhKfpVoL7
9O8S1v+SCKiGNcs4RgkyvuQ97L25AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKyko
v1vLNfbBxPBidq9bNc38iDAwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0YwQTE4OEE2NEJGRTExRURCREI2RDlDNEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfYwDQYJKoZIhvcNAQEL
BQADggEBABgnZADXYLUmqNgZsbdHQWaoP8pu04rY3zVA7p4tKYrOWV2jX48iLcsx
ZJ769yXo2Y5WInozMKcbhfDsk6oP8t//4B/l28gjABQtWTEpAGw44fmbMopvsXw1
9QjKcNaOy5S9PWSXrd1EojiqgQj/qxsLW/3hqcAaa1M2WAYbZrQ+TR72xtR3bOcg
G6eN6mggHEAApHFPPtQBypot2wNabzGRv/AA+aiEpwXtoO9uqYw914o5BQRKkK7r
BLeKoXBlIgT1Bki89px3kFd9qfTDhmOhpIK5TJYtvY3jJnMawerBOBQqsNjwg+fV
38rAMRqeyozCn/rDVbTuFmWCTnPcrNY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org