Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/5D91265E74B811EFB9C56243762E951A.roa
File:                     5D91265E74B811EFB9C56243762E951A.roa (raw, json)
Hash identifier:          lYzZ94yAeLNe3JOodGAornhShcty8Hr64LD0saNsrFo=
Subject key identifier:   85:33:52:E4:47:70:04:20:ED:E8:C9:7B:0A:F1:F1:C3:DD:87:9E:83
Certificate issuer:       /CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
Certificate serial:       04
Authority key identifier: 3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/5D91265E74B811EFB9C56243762E951A.roa
Signing time:             Tue 17 Sep 2024 05:47:46 +0000
ROA not before:           Tue 17 Sep 2024 05:47:43 +0000
ROA not after:            Sat 30 Sep 2034 05:47:43 +0000
asID:                     30844
IP address blocks:        196.43.199.0/24 maxlen: 32
                          2001:43f8:9e0::/48 maxlen: 128

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
        Validity
            Not Before: Sep 17 05:47:43 2024 GMT
            Not After : Sep 30 05:47:43 2034 GMT
        Subject: CN=66e91802-7276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:46:0e:e7:68:0c:52:36:5b:f6:01:c9:07:
                    0b:9b:16:15:ca:79:12:c1:a4:cd:af:dc:9c:32:68:
                    6f:7c:86:b7:09:0b:6a:54:d8:d9:20:0d:71:36:af:
                    3b:6d:1b:ee:d8:fd:99:b3:5a:71:1b:09:c7:7e:7d:
                    64:d4:4d:5a:50:5c:97:db:be:75:f8:e8:29:0b:4f:
                    cc:2a:9c:8c:62:28:f0:13:b3:31:c6:c8:62:7f:e4:
                    43:55:ee:02:b8:b0:36:ca:37:15:bd:fd:96:62:c2:
                    9e:d1:a7:33:40:86:9d:2a:7d:31:ef:65:01:32:b4:
                    33:cf:04:f6:24:00:b7:7a:9a:3d:22:4f:f2:64:80:
                    9c:4c:e7:8c:44:a4:a8:f1:de:0d:ab:5d:1d:31:31:
                    59:8d:14:18:93:db:a9:1e:87:a5:63:7c:d7:a3:87:
                    fe:0e:33:21:9e:fa:af:86:51:e5:b2:56:39:c9:9c:
                    c4:6b:5f:a5:ed:13:fd:80:43:de:45:2b:cf:99:72:
                    95:17:c5:be:6f:9c:47:8b:c7:2c:15:2c:c2:7c:16:
                    93:c6:65:94:f2:ea:49:42:77:06:4e:3c:a2:44:a1:
                    0a:00:ad:55:e4:a9:33:45:46:eb:0c:b1:d9:6d:86:
                    e8:ee:73:0e:f5:0c:6b:ef:f2:2b:64:e7:e1:3e:44:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:33:52:E4:47:70:04:20:ED:E8:C9:7B:0A:F1:F1:C3:DD:87:9E:83
            X509v3 Authority Key Identifier:
                keyid:3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/5D91265E74B811EFB9C56243762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.199.0/24
                IPv6:
                  2001:43f8:9e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:af:30:98:b0:b7:c4:b7:1d:a1:b2:45:4b:b7:f1:db:29:12:
         97:2b:2b:b8:5a:12:e1:93:15:93:88:57:11:60:73:a8:4a:8f:
         9f:cb:ce:3a:21:05:d2:11:1f:0a:5f:f4:99:9b:2c:06:ae:a2:
         1c:ca:73:98:a5:17:05:66:88:f8:55:4e:3d:a6:28:2f:b7:d9:
         e8:35:9c:6d:43:4b:3d:96:e9:03:b1:1b:35:93:68:e5:d5:24:
         87:e5:87:9c:68:c9:e4:2d:cf:29:8d:19:cc:c6:a3:b5:4d:08:
         89:8b:2c:c5:dd:65:67:fb:26:f1:26:8f:ad:dc:dc:4e:a7:9f:
         22:2d:ab:f6:01:7e:15:c3:92:f4:c2:f3:a1:98:17:03:68:dd:
         7b:ad:42:9f:b6:24:9b:d9:78:15:03:4a:f0:dd:b6:fb:0a:cf:
         bc:c3:31:80:ee:d6:de:46:c8:d0:5e:23:02:93:25:9c:56:aa:
         9d:d1:af:af:a4:e6:65:d8:3b:75:40:7d:08:fb:3a:47:33:66:
         be:cd:12:f2:ec:2d:d7:78:7f:a0:2d:69:2e:87:16:81:4f:3e:
         18:d3:c7:76:44:ea:56:89:ff:f2:f0:64:4b:c5:e3:df:fd:4a:
         a8:d1:4d:29:b2:1c:79:b9:ef:b2:b7:bb:25:f9:5c:e0:69:32:
         7c:10:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----