Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/1E5FEBEE48F011EFB9BFD745762E951A.roa
File:                     1E5FEBEE48F011EFB9BFD745762E951A.roa (raw, json)
Hash identifier:          PTqvlhOUii83LEr1qJ+vZHVrSOoJNI+jvnvWw3B5l+8=
Subject key identifier:   A4:8E:13:1A:56:E6:D1:96:19:07:B7:EC:06:9B:DB:77:6D:CA:18:61
Certificate issuer:       /CN=F36E68C0AF/serialNumber=8C4E77FA322349C0B27F01763233AE47B0DC9AF3
Certificate serial:       02
Authority key identifier: 8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/1E5FEBEE48F011EFB9BFD745762E951A.roa
Signing time:             Tue 23 Jul 2024 12:36:01 +0000
ROA not before:           Tue 23 Jul 2024 12:35:58 +0000
ROA not after:            Tue 23 Jul 2030 12:35:58 +0000
asID:                     328464
IP address blocks:        102.222.240.0/22 maxlen: 22
                          2c0f:4f80::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 14:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E68C0AF/serialNumber=8C4E77FA322349C0B27F01763233AE47B0DC9AF3
        Validity
            Not Before: Jul 23 12:35:58 2024 GMT
            Not After : Jul 23 12:35:58 2030 GMT
        Subject: CN=669fa3b1-7ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:83:4f:21:09:19:d5:a5:b5:4b:26:4d:3b:
                    75:d2:10:0c:55:f5:d7:e9:a1:6d:07:04:0d:0d:c5:
                    ed:84:d4:3d:f0:c9:de:d0:9d:57:49:c4:34:3a:38:
                    90:e1:c6:d2:b1:d6:d0:cb:95:6b:7b:39:6d:cb:4b:
                    d0:9b:88:94:e6:ab:d4:de:36:36:8e:8a:60:f6:70:
                    c2:f0:a0:01:4f:ab:42:13:02:45:fe:f8:1f:0b:f0:
                    4b:3a:a0:11:be:6d:ad:d0:91:0c:a6:7d:22:e6:2c:
                    4f:5d:b8:6e:14:f2:08:a2:9b:d8:4b:5b:69:0f:27:
                    a7:d7:76:72:89:bf:70:c6:1d:15:e6:44:6c:3e:25:
                    8b:64:ae:d6:07:26:d6:9b:b9:a8:7a:6b:c6:d0:f5:
                    01:c9:35:bb:a9:50:4f:47:a4:2c:27:bb:5f:d9:11:
                    65:9a:1f:c9:dd:fd:e4:f5:be:69:1c:24:a6:6e:62:
                    64:02:ae:3e:36:1e:55:06:44:91:ef:e6:4d:43:82:
                    e6:e0:bd:52:90:36:e8:e2:a5:26:45:08:69:09:ce:
                    5c:69:da:02:8c:de:67:37:32:24:03:14:5f:5c:22:
                    f6:62:f5:35:b8:6c:1e:a5:00:30:40:7e:1b:37:fd:
                    4c:59:90:e8:07:08:ab:08:9c:95:d0:54:a0:83:5f:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8E:13:1A:56:E6:D1:96:19:07:B7:EC:06:9B:DB:77:6D:CA:18:61
            X509v3 Authority Key Identifier:
                keyid:8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/1E5FEBEE48F011EFB9BFD745762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.222.240.0/22
                IPv6:
                  2c0f:4f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:b7:92:04:e3:11:2d:9e:22:82:c4:ae:bd:fa:e8:46:18:2a:
         d6:2a:ac:e9:46:62:06:fb:05:23:46:d8:97:86:15:f2:c7:38:
         57:25:a5:98:1d:42:dc:cf:37:bf:7a:59:17:9f:88:b6:35:71:
         3e:5c:1b:43:98:2c:79:9b:23:b3:84:59:80:ce:de:08:11:23:
         1f:c6:67:ac:2e:c8:0c:7a:45:f4:d1:87:3d:f4:55:6e:f1:ac:
         bb:57:29:4b:66:b9:4d:c0:97:65:95:31:e4:43:54:a7:6f:2a:
         b0:9e:2b:2b:5a:1a:07:5b:69:01:2e:52:47:6a:de:f3:12:8c:
         6e:cb:9e:61:79:a1:93:19:54:46:c5:44:e4:55:4b:13:c1:76:
         12:a7:d4:c1:12:5c:64:29:d7:f8:25:31:ed:43:e1:86:ba:e2:
         af:d7:1d:64:c4:9c:71:82:da:4d:70:d4:98:4a:ec:46:5e:a8:
         54:36:69:0b:1c:ed:ea:92:81:d0:5b:a7:22:8c:e5:77:b1:8a:
         d5:11:40:74:2c:14:19:6e:d7:6d:e2:be:ba:8f:6a:8a:70:01:
         8b:1c:1c:f8:68:f0:d0:97:a0:07:b2:d7:d2:9d:4c:b8:8d:ad:
         a9:8c:b0:1f:62:ad:f1:d2:1f:4b:fe:f2:ea:b0:2b:15:c9:fa:
         70:e0:06:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----