Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FC2840AA553811ED81124BBDF1222468.roa
File:                     FC2840AA553811ED81124BBDF1222468.roa (raw, json)
Hash identifier:          hgGyDGYujjm+w/MyfAYVma6+wU8Jn0AM7qUdO+C5wqY=
Subject key identifier:   51:8E:26:D8:59:04:9F:D4:C2:44:35:38:99:DF:57:88:A9:13:D5:2F
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0899
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FC2840AA553811ED81124BBDF1222468.roa
Signing time:             Wed 26 Oct 2022 14:17:56 +0000
ROA not before:           Wed 26 Oct 2022 14:17:52 +0000
ROA not after:            Sun 27 Oct 2024 14:17:52 +0000
asID:                     61317
IP address blocks:        102.165.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 16 Aug 2023 18:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2201 (0x899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 26 14:17:52 2022 GMT
            Not After : Oct 27 14:17:52 2024 GMT
        Subject: CN=63594193-2593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:28:39:71:c4:2a:26:6e:5b:05:70:29:c1:f2:
                    b4:87:98:cc:0d:22:b7:74:36:fc:a1:05:77:f7:c9:
                    c0:f5:d5:87:be:c8:cf:91:56:05:72:5d:b4:7e:ce:
                    de:bc:ce:43:46:22:21:eb:4f:74:8f:02:25:13:dd:
                    be:bc:b5:23:3f:d2:bc:bf:97:29:cf:ae:0f:1b:78:
                    a7:89:e6:2d:6f:2e:69:2c:0e:1e:8d:90:1b:0d:d7:
                    42:ac:af:6f:48:a7:09:0d:a5:97:8e:dd:c2:d7:a6:
                    d0:7c:cf:f6:f1:e5:3a:76:92:53:a9:c4:79:7e:e3:
                    aa:2a:33:65:7c:aa:70:ae:38:89:3a:a2:e1:7e:63:
                    76:c7:3a:04:81:9a:bd:63:87:e1:a0:85:e4:66:9f:
                    37:4e:3c:98:95:03:ae:e1:c1:f7:16:f4:31:81:02:
                    73:b0:f7:4e:53:15:89:d4:d4:05:05:28:c7:66:e1:
                    c5:ca:d9:2e:d0:cb:21:23:be:10:ef:0e:23:df:4c:
                    74:b1:0e:17:35:23:5c:5e:f8:c4:3d:18:d3:3b:0f:
                    1f:f2:1f:d4:10:a9:74:35:22:b6:41:e5:8f:99:f6:
                    d0:88:5a:b9:c4:af:f9:2b:32:09:57:29:df:57:c7:
                    5d:2c:ed:6b:d2:d0:08:86:2a:bb:bc:bb:15:8b:65:
                    94:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8E:26:D8:59:04:9F:D4:C2:44:35:38:99:DF:57:88:A9:13:D5:2F
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FC2840AA553811ED81124BBDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ed:b5:12:c0:2e:06:c3:77:02:06:a9:01:f0:c1:a1:3c:9c:
         7c:94:36:13:23:01:8f:0e:f3:d4:ff:f7:5b:1a:1c:58:b9:02:
         93:37:bd:13:8d:de:ed:9d:46:08:17:70:9b:53:42:92:3c:39:
         45:39:25:9b:52:f3:1b:61:4a:0c:d0:d3:a8:3d:ba:e8:d8:a0:
         8a:15:fe:0a:d5:a6:2a:09:82:28:13:16:ab:9a:17:14:42:95:
         9a:92:f3:e9:e6:ff:7c:2d:5b:94:0d:da:0d:87:e3:ed:42:bf:
         f6:a6:c1:0e:10:57:0d:19:f8:ce:e1:82:a0:05:d5:e5:de:4e:
         f1:0b:64:20:d2:18:90:08:00:4b:9e:cc:09:5e:ac:f3:3a:af:
         8c:0b:12:0c:f1:34:e6:cb:9b:a9:4d:fa:ae:ec:d0:c6:1c:89:
         9e:1b:20:0f:4d:f0:1d:83:f8:ba:69:6e:62:c7:03:3e:3f:7f:
         1b:42:5f:68:91:7f:3f:79:ed:b4:69:d4:05:e3:98:8e:cc:4d:
         90:d7:fd:77:f7:28:07:76:25:68:4c:de:30:e0:e9:59:ba:ff:
         45:28:37:1e:43:39:3c:d7:ef:75:5d:85:f1:9c:f1:93:20:4f:
         50:1b:4a:68:6c:26:a5:fc:dd:90:db:97:76:3c:4c:8d:e3:ab:
         df:74:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org