Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F78752B2EBF511EDAC7A71884AD9E6FC.roa
File:                     F78752B2EBF511EDAC7A71884AD9E6FC.roa (raw, json)
Hash identifier:          Ou3TU62YdUMX6GP4ykl1KrttusQI1aFIxPXh9PVo/x0=
Subject key identifier:   34:A8:A7:D8:18:F4:A8:3A:59:A4:3A:24:B0:3B:BA:D5:4D:6E:EE:8D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0B55
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F78752B2EBF511EDAC7A71884AD9E6FC.roa
Signing time:             Sat 06 May 2023 10:08:37 +0000
ROA not before:           Sat 06 May 2023 10:08:32 +0000
ROA not after:            Wed 14 May 2025 10:08:32 +0000
asID:                     984
IP address blocks:        102.129.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 06 Oct 2023 07:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2901 (0xb55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: May  6 10:08:32 2023 GMT
            Not After : May 14 10:08:32 2025 GMT
        Subject: CN=64562725-e953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:3e:67:bf:6b:8f:c9:1f:c6:1f:04:16:17:
                    93:61:bf:a6:db:27:43:57:aa:4c:87:65:20:0e:bb:
                    48:6c:18:30:c0:e9:cf:64:ab:70:61:86:0e:7f:ce:
                    de:d6:75:31:17:0b:6c:60:d9:16:d1:d8:e7:2d:9d:
                    2e:c7:85:bb:0f:c3:0e:18:10:00:ba:15:4e:36:6b:
                    3f:63:d4:8b:d2:6a:20:a1:44:71:99:82:f5:13:8c:
                    e0:a6:55:8e:5a:7d:ba:c4:a9:58:92:31:fb:c5:e4:
                    8b:a3:88:49:1e:82:c7:f5:d0:33:8c:a1:20:f1:84:
                    df:e5:81:d1:aa:db:f1:6a:6b:05:9a:42:e7:55:ce:
                    68:56:c2:66:da:24:dc:78:5b:59:f1:df:44:33:d7:
                    96:08:38:f0:da:5f:37:1f:30:1b:22:93:54:7f:c6:
                    a4:17:74:5c:81:e2:9d:14:f8:23:de:b9:a4:97:8b:
                    c7:39:9e:95:a8:38:f0:8d:43:21:cd:10:e9:58:9e:
                    e3:5e:20:fa:13:2c:c9:59:e1:1b:34:ec:80:04:a4:
                    14:66:cc:12:cc:86:94:b7:54:42:6d:e6:18:1f:a5:
                    e0:bb:cd:43:3c:49:7d:98:70:4a:1e:fb:6b:72:4b:
                    08:4e:7d:fe:92:0c:84:5f:32:e1:c9:af:62:1d:bc:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A8:A7:D8:18:F4:A8:3A:59:A4:3A:24:B0:3B:BA:D5:4D:6E:EE:8D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F78752B2EBF511EDAC7A71884AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:59:b3:34:45:d2:73:8d:0c:22:18:8a:ba:8b:00:1c:91:64:
         c8:90:28:db:8f:ca:4d:95:26:fd:84:97:67:ca:46:cb:3f:44:
         53:6d:be:6e:d0:c2:dd:0d:74:74:e6:a9:99:57:c5:16:ce:79:
         ef:f9:e5:b9:33:fd:73:6d:e2:9b:40:bf:9e:fe:1a:2a:bc:00:
         3f:85:e9:2c:11:8c:f1:01:28:12:93:55:b5:45:4f:4c:9a:db:
         e5:6e:1c:8e:00:62:5e:f1:56:6a:20:1c:a2:a0:c6:a9:2e:39:
         02:e3:28:15:63:29:48:b5:81:60:61:f7:31:ad:8f:a0:e2:03:
         d6:d4:9f:65:9a:04:ff:6b:4d:b3:50:09:de:46:15:ea:d3:19:
         89:d1:b9:bf:f6:20:ba:4d:32:44:68:74:55:b1:f7:0a:7f:26:
         a8:c2:68:7f:73:85:e9:2e:f7:5f:84:88:db:78:9b:7e:76:dd:
         26:05:41:2f:81:29:6a:6c:b5:36:c1:53:82:ad:0f:6d:7d:40:
         90:11:e2:8e:36:71:e3:34:c1:bd:69:a3:29:91:ff:ec:c0:38:
         12:4f:2f:37:aa:8e:07:b4:ae:02:ce:0f:41:1c:22:86:03:3e:
         d7:c3:23:36:c6:5d:db:92:d5:d2:d9:df:2b:d1:d6:d8:f1:ad:
         e3:df:06:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org