Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F9230D94E7FC11ECA35757DBF1222468.roa
File:                     F9230D94E7FC11ECA35757DBF1222468.roa (raw, json)
Hash identifier:          9aKSU4LiFovosME7VqlJUyQwIvdUiPYMn+vXMnNIjbY=
Subject key identifier:   AC:37:DA:5C:FD:6A:35:23:93:F1:59:1F:25:BE:97:58:B1:34:A5:1C
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       068C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F9230D94E7FC11ECA35757DBF1222468.roa
Signing time:             Thu 09 Jun 2022 14:03:44 +0000
ROA not before:           Thu 09 Jun 2022 14:03:40 +0000
ROA not after:            Sun 09 Jun 2024 14:03:40 +0000
asID:                     40676
IP address blocks:        102.129.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 29 Aug 2023 09:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun  9 14:03:40 2022 GMT
            Not After : Jun  9 14:03:40 2024 GMT
        Subject: CN=62a1fdc0-8e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:bd:c3:c4:cc:37:7d:28:fe:01:cd:29:7d:
                    93:6b:ba:f1:55:0e:a2:eb:f0:73:73:3a:53:74:c0:
                    54:7a:7d:30:3b:45:8b:d3:8c:69:7a:8b:ab:80:df:
                    0e:06:06:c4:e4:2c:68:a8:a8:ef:62:fc:b2:f0:00:
                    88:ac:2e:3c:e1:09:98:6e:2b:f7:39:89:ee:56:ad:
                    b8:d9:e4:59:7a:6e:10:8f:6a:d4:fa:bc:24:dd:ca:
                    ef:c5:e8:72:05:cb:fd:ff:44:ee:fa:4b:9f:06:27:
                    2d:60:f3:cf:ec:39:3f:ca:85:ae:00:d6:f2:c7:41:
                    42:19:0c:dd:66:f8:2b:d9:b2:88:3a:a6:91:5e:8c:
                    6a:24:91:4b:a9:96:5b:39:3d:f0:e8:1c:df:75:68:
                    9d:80:04:6f:7d:20:3c:80:92:55:2d:f5:92:f0:31:
                    cb:3b:78:9a:38:a3:10:fc:29:6f:b4:55:4f:4d:b5:
                    c2:88:38:5e:e0:30:3d:69:72:24:d4:7b:df:9e:2f:
                    89:dc:40:6b:1f:79:6d:13:36:22:50:c3:88:39:20:
                    2d:34:d3:43:37:de:0e:01:e2:29:cd:0a:06:d6:7e:
                    fa:14:18:4f:c3:96:55:59:ef:06:a5:97:cb:88:85:
                    9e:7f:52:67:32:08:1d:4e:42:2d:90:83:c1:9f:f5:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:37:DA:5C:FD:6A:35:23:93:F1:59:1F:25:BE:97:58:B1:34:A5:1C
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F9230D94E7FC11ECA35757DBF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:c5:a4:59:b1:7d:91:a7:14:a1:c6:02:d2:68:c6:df:ef:3d:
         3c:5f:fc:ab:cd:63:9d:cf:4f:ed:89:da:b3:87:99:5f:b8:31:
         19:13:f7:02:c9:cf:19:9d:9f:75:b1:6b:41:01:2f:c4:aa:3f:
         07:32:2f:b4:92:80:9a:c4:6b:48:cb:18:c1:98:c6:10:7b:c1:
         cd:c0:11:21:31:cd:05:dc:ed:ef:aa:99:ef:e2:a3:02:e5:c9:
         ae:fd:39:8e:07:27:1f:2a:c1:45:bd:47:68:3d:a2:78:b6:a2:
         2e:84:37:af:09:db:eb:60:65:81:cd:b5:ad:00:22:69:96:b6:
         21:0a:4e:08:98:d3:ee:c8:79:d9:c0:60:a3:67:0d:53:06:82:
         c2:ed:c8:ff:a9:c0:86:dc:35:1f:6a:f5:b7:fc:09:03:f9:2f:
         db:95:d7:2e:04:db:6f:b6:5f:4b:9d:33:f0:80:47:5b:65:ed:
         d2:ca:2f:17:3a:1a:2e:4b:16:aa:95:1d:f9:8f:38:28:1f:7f:
         98:67:79:db:99:62:17:33:f2:5d:69:e7:91:e6:a7:08:87:fa:
         c5:5d:0e:64:a0:2f:6a:f0:b7:bb:44:6b:ec:95:d5:25:0e:e6:
         db:19:19:bd:2c:bf:00:79:f1:af:70:0d:59:d0:96:9e:aa:8f:
         51:d5:e2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org