Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F21148340D1811EF9C229F1C017001B1.roa
File:                     F21148340D1811EF9C229F1C017001B1.roa (raw, json)
Hash identifier:          roamLurmh2kU5AqIZviQZVrYYGAbJuxehOxqAWKDt/U=
Subject key identifier:   5C:45:9F:C3:E2:B9:47:CB:EF:C6:9B:08:EE:11:6E:6B:41:8B:CC:B9
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       018A
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F21148340D1811EF9C229F1C017001B1.roa
Signing time:             Wed 08 May 2024 08:57:06 +0000
ROA not before:           Wed 08 May 2024 08:57:03 +0000
ROA not after:            Wed 08 May 2030 08:57:03 +0000
asID:                     56683
IP address blocks:        102.211.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 14:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: May  8 08:57:03 2024 GMT
            Not After : May  8 08:57:03 2030 GMT
        Subject: CN=663b3e62-c7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:ef:5e:f9:61:f2:d3:e6:ec:71:85:31:db:
                    88:e0:1c:46:3b:6d:b1:8c:23:6a:f9:eb:45:d4:71:
                    67:c0:34:6d:3a:9f:0a:a8:30:c5:e1:54:8e:a5:ee:
                    66:9e:6c:86:ae:6f:7a:4d:68:79:14:81:5b:b0:c9:
                    c7:04:a4:d1:cd:f6:a1:79:ed:69:3b:75:07:26:b3:
                    b2:cb:44:f1:0d:02:e1:62:ff:67:63:78:74:ed:2a:
                    4b:a0:f8:62:3e:b9:40:a6:ac:b4:92:f4:f0:d7:c9:
                    54:44:0b:15:63:56:be:e6:4b:31:c8:d1:d8:0d:55:
                    9e:eb:33:dc:18:00:52:58:ba:24:cd:7e:87:10:5e:
                    e6:df:2f:f6:76:31:ca:36:30:4a:68:8c:1e:b7:6a:
                    a1:69:4e:92:9c:7a:62:76:e8:e8:c0:55:4f:3e:77:
                    36:dc:8a:63:6c:4e:8d:90:cf:5d:f9:2a:14:59:50:
                    5f:b3:0b:a6:60:fb:3b:74:da:51:fa:b1:1b:7d:7a:
                    6e:94:b1:70:59:e3:cc:cf:7e:c2:0b:51:b5:43:80:
                    fa:fb:33:44:ce:46:61:dd:c5:cd:06:08:61:60:ef:
                    50:b1:96:30:13:9e:b4:69:6f:d4:8f:cc:20:9d:aa:
                    b2:fb:25:3f:3a:e5:44:9a:13:75:33:66:66:ec:dc:
                    6d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:45:9F:C3:E2:B9:47:CB:EF:C6:9B:08:EE:11:6E:6B:41:8B:CC:B9
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F21148340D1811EF9C229F1C017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:b5:15:d5:be:30:3c:c0:4d:99:a9:c7:bb:fc:65:7e:43:c5:
         33:02:5b:2a:4a:50:a5:60:d2:81:d6:42:b9:34:e4:ea:53:2f:
         b6:ae:98:18:62:61:3e:77:5e:be:bc:e6:a4:e3:0d:fd:37:ac:
         18:4e:ac:a9:d9:e6:db:d2:f9:6f:ab:06:c1:ca:61:6c:67:ca:
         e3:b0:3b:4b:d8:4d:e0:42:16:1b:f7:1e:f3:31:fe:23:00:ed:
         22:b9:0d:2d:2b:8b:a9:ed:45:46:52:ad:3f:ef:e1:28:c5:d0:
         2e:5e:d5:75:91:7c:32:49:16:ce:56:7a:bc:5b:de:f0:a5:5f:
         3c:35:05:1a:f9:08:a8:fe:fa:c5:d1:67:00:d4:1a:89:53:5c:
         48:43:13:6d:33:a5:31:e1:b8:07:c7:25:e6:d8:e7:33:0b:4b:
         a4:5b:48:9a:0e:63:c0:d4:87:f3:a9:f0:a2:8f:f0:f3:78:ab:
         13:08:8e:9e:46:aa:0f:63:b1:82:84:c7:7d:3a:9d:11:76:cb:
         70:e6:cf:6a:88:41:c6:a6:bd:5d:59:94:4b:86:d2:cc:44:cd:
         c9:35:06:3f:82:63:78:d7:7a:d1:4d:79:55:df:60:7d:cc:b8:
         74:d4:7c:0b:ee:0f:6e:36:35:5a:82:e3:c1:90:d3:21:37:d8:
         b8:39:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org