Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/6076E1720C9611EF96EBFA69017001B1.roa
File:                     6076E1720C9611EF96EBFA69017001B1.roa (raw, json)
Hash identifier:          5glwlgHkaBiYALzWVqzeb766bLh2ebSj5gpo29WXJ6E=
Subject key identifier:   BB:BD:14:C6:06:4D:D3:4B:DA:4F:EE:00:4C:12:0B:90:94:34:4A:3B
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       0187
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/6076E1720C9611EF96EBFA69017001B1.roa
Signing time:             Tue 07 May 2024 17:22:27 +0000
ROA not before:           Tue 07 May 2024 17:22:24 +0000
ROA not after:            Tue 07 May 2030 17:22:24 +0000
asID:                     29802
IP address blocks:        102.211.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jun 2024 09:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: May  7 17:22:24 2024 GMT
            Not After : May  7 17:22:24 2030 GMT
        Subject: CN=663a6353-784a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:ce:c9:2f:65:b2:71:05:82:75:30:8f:14:
                    14:67:6b:c8:41:88:70:e4:e8:66:16:78:29:88:c0:
                    84:9a:d3:fb:96:ac:17:73:db:7c:45:df:28:5f:13:
                    d9:c5:fc:c1:b4:54:47:f6:76:38:9a:f2:7e:31:4d:
                    4c:a2:eb:93:32:4d:54:af:9e:47:80:bb:65:95:58:
                    40:dd:a4:f7:fe:d3:31:9a:49:a9:5c:3e:e8:5b:85:
                    83:f7:8e:6f:ba:c9:d8:81:51:81:58:0b:33:b6:0c:
                    af:17:91:f6:d8:bb:d3:90:2e:1e:d6:96:ae:37:24:
                    47:8c:33:cb:53:06:1e:c9:cb:67:16:79:09:a9:44:
                    f9:3d:e4:3f:2d:af:b6:fa:88:42:ea:2f:6a:87:9b:
                    41:a2:75:43:dc:da:b9:d7:f4:21:e9:7a:c5:9f:ee:
                    56:49:9b:a9:67:23:23:ce:50:5c:78:8e:a2:65:69:
                    32:0a:e7:ae:80:d5:06:ef:ea:c0:5b:6f:f3:54:7c:
                    54:c5:ef:d8:35:2d:37:85:25:ac:b9:96:8a:da:cf:
                    10:7c:bb:87:38:77:18:22:ce:2b:a9:45:8f:f0:4b:
                    0a:9d:b3:54:f8:e7:99:2b:e2:43:65:81:9c:5f:0e:
                    18:e9:ad:77:d7:2c:c7:80:00:1b:53:36:56:e5:7a:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BD:14:C6:06:4D:D3:4B:DA:4F:EE:00:4C:12:0B:90:94:34:4A:3B
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/6076E1720C9611EF96EBFA69017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:89:2b:ad:ce:b8:17:3e:10:33:c9:b8:c3:59:e8:e8:50:48:
         77:f0:b7:90:2e:46:d4:f1:8a:04:8c:b4:e0:70:93:61:cd:e9:
         7a:d6:93:b6:03:b9:b7:dd:53:1b:a1:2d:1e:b3:9b:bd:e8:73:
         63:36:2d:27:64:02:eb:be:97:a7:45:2b:36:f6:a1:a9:37:71:
         6a:42:3f:29:2a:12:17:22:b1:de:df:7d:49:47:2a:c1:9e:02:
         83:55:b0:74:ed:0c:62:78:0b:8b:3c:c8:e8:65:40:6e:32:6f:
         7f:f4:92:67:3a:0e:0b:f6:5c:31:82:c3:c7:5c:1f:21:25:2b:
         51:30:53:54:d4:6d:0f:12:4c:81:a1:10:40:8c:4a:c5:5e:19:
         06:78:a1:25:36:fe:76:62:9f:67:ba:b3:25:27:44:a8:d7:bc:
         bf:42:ca:f6:52:eb:14:31:dc:23:40:e1:c3:8f:6f:f7:fc:bd:
         75:c7:6b:a2:ea:5a:f7:85:8d:9b:ee:40:2f:2c:a2:f7:36:e5:
         70:fb:93:2d:53:1b:4b:b9:49:6a:a3:62:96:49:48:52:7f:3e:
         c4:22:6c:a8:ff:19:ea:40:42:d2:fa:c0:66:4e:46:d8:f4:d0:
         f4:f2:96:a4:8d:45:e1:a5:c8:b7:32:58:97:84:f2:07:be:8f:
         9c:74:30:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:32:28 2024 by rpki-client on console-fra.rpki-client.org