Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/832498722A4111EFBE5920237DDC24C2.roa
File:                     832498722A4111EFBE5920237DDC24C2.roa (raw, json)
Hash identifier:          CPT7PIdDQbAmDk6ZH97QGnAT951X1gW7/2adANOkpjA=
Subject key identifier:   DA:EB:AE:8A:04:38:13:58:77:11:D7:E2:0B:15:C4:09:AC:0A:64:30
Certificate issuer:       /CN=F36FF74CAF/serialNumber=78F0A3D3BAC49A14884763D937D3CA1920953B15
Certificate serial:       06
Authority key identifier: 78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/832498722A4111EFBE5920237DDC24C2.roa
Signing time:             Fri 14 Jun 2024 11:30:33 +0000
ROA not before:           Fri 14 Jun 2024 11:30:30 +0000
ROA not after:            Sat 01 Jun 2030 11:30:30 +0000
asID:                     327924
IP address blocks:        102.67.32.0/20 maxlen: 24
Validation:               Failed, certificate revoked on Fri 14 Jun 2024 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FF74CAF
        Validity
            Not Before: Jun 14 11:30:30 2024 GMT
            Not After : Jun  1 11:30:30 2030 GMT
        Subject: CN=666c29d9-36d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:21:2e:4e:f4:e6:54:82:78:45:ab:23:3d:
                    2b:b9:b5:91:9c:e3:20:73:db:46:6a:ec:28:7c:a0:
                    7a:39:6a:fa:54:8b:0e:c3:de:31:b6:e3:0c:81:dc:
                    dd:bd:3b:e0:fa:a5:5e:11:06:f5:70:0f:bd:91:be:
                    3d:9e:91:55:21:e4:32:5b:77:2e:17:30:3f:92:5a:
                    78:44:41:69:13:5a:26:5e:2d:25:db:30:f1:47:ab:
                    55:88:ee:d9:07:1f:28:82:ce:7a:43:b5:87:e6:2c:
                    06:3b:80:d4:dc:da:4d:44:25:62:3a:02:4a:eb:52:
                    8a:d9:c9:8c:ed:2a:18:da:a0:cd:2c:96:92:e0:68:
                    cf:a3:54:04:b6:4c:f4:90:61:7a:dd:90:90:4d:d1:
                    6e:2d:65:18:cb:a4:0a:28:6b:e8:25:b9:e8:8b:bc:
                    bf:7b:89:08:93:1f:88:a4:e9:b8:5e:bd:4b:09:93:
                    86:54:36:3e:85:2d:81:a8:ff:8d:93:72:0b:8e:05:
                    cb:86:37:76:87:45:17:25:31:99:45:f4:84:77:62:
                    e7:12:24:9c:85:7f:44:1c:05:a0:0f:c5:e7:2d:6c:
                    05:2a:bd:2d:01:5f:1d:36:eb:4c:be:81:a8:59:99:
                    bf:80:d0:08:b3:c1:73:b4:c2:0f:c1:b7:83:4f:b6:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EB:AE:8A:04:38:13:58:77:11:D7:E2:0B:15:C4:09:AC:0A:64:30
            X509v3 Authority Key Identifier:
                keyid:78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/832498722A4111EFBE5920237DDC24C2.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.67.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:ac:dc:bf:ce:88:c5:c3:23:31:ac:28:82:54:eb:10:47:
         bb:cb:76:6d:2a:b6:db:8b:c4:d3:00:ef:41:a5:94:51:be:07:
         d0:3e:3f:ae:d5:69:ce:83:78:74:7f:90:93:e0:03:2c:2b:02:
         6a:d4:3f:e7:9d:08:29:ec:ee:3b:9d:77:70:48:46:b4:96:b1:
         ef:99:35:16:11:c6:89:28:96:d4:5c:2d:8f:1d:fc:ad:6d:4a:
         b1:64:e3:1b:32:07:3d:44:bc:58:93:f4:e1:f9:4d:db:f9:5f:
         ea:cb:c5:3d:24:f2:14:ff:5e:43:77:f8:f4:39:f0:a1:88:6d:
         89:48:e1:97:66:49:17:77:4a:41:b6:3e:94:90:39:94:a5:e8:
         ef:e6:da:62:e3:dc:23:13:53:5a:ae:a0:81:5c:4f:5e:4f:9d:
         fa:c7:22:b5:07:da:f6:15:0c:99:82:af:71:76:6e:8c:d2:44:
         d8:33:8b:89:dd:09:cd:2c:e2:56:05:e8:38:56:65:d9:48:67:
         a0:e5:ab:18:7e:ca:38:0e:b8:5a:67:24:01:6a:d8:e3:10:44:
         82:4c:04:94:d5:09:d9:a7:bb:4b:2c:ec:25:c2:0d:ee:f3:ac:
         34:db:fc:ee:5a:f9:69:41:23:8e:55:c9:60:10:e9:9b:e2:53:
         bd:ae:cc:a1
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
Rjc0Q0FGMTEwLwYDVQQFEyg3OEYwQTNEM0JBQzQ5QTE0ODg0NzYzRDkzN0QzQ0Ex
OTIwOTUzQjE1MB4XDTI0MDYxNDExMzAzMFoXDTMwMDYwMTExMzAzMFowGDEWMBQG
A1UEAxMNNjY2YzI5ZDktMzZkNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANzwIS5O9OZUgnhFqyM9K7m1kZzjIHPbRmrsKHygejlq+lSLDsPeMbbjDIHc
3b074PqlXhEG9XAPvZG+PZ6RVSHkMlt3LhcwP5JaeERBaRNaJl4tJdsw8UerVYju
2QcfKILOekO1h+YsBjuA1NzaTUQlYjoCSutSitnJjO0qGNqgzSyWkuBoz6NUBLZM
9JBhet2QkE3Rbi1lGMukCihr6CW56Iu8v3uJCJMfiKTpuF69SwmThlQ2PoUtgaj/
jZNyC44Fy4Y3dodFFyUxmUX0hHdi5xIknIV/RBwFoA/F5y1sBSq9LQFfHTbrTL6B
qFmZv4DQCLPBc7TCD8G3g0+2NJ8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTa666K
BDgTWHcR1+ILFcQJrApkMDAfBgNVHSMEGDAWgBR48KPTusSaFIhHY9k308oZIJU7
FTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkY3NEMvNzA5RTgwMjIyODlFMTFFRjg4Nzk5QTA2N0REQzI0QzIvZVBDajA3
ckVtaFNJUjJQWk45UEtHU0NWT3hVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZVBDajA3ckVtaFNJUjJQWk45UEtHU0NWT3hVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkY3NEMvNzA5RTgwMjIyODlFMTFFRjg4Nzk5QTA2N0RE
QzI0QzIvODMyNDk4NzIyQTQxMTFFRkJFNTkyMDIzN0REQzI0QzIucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGZDIDANBgkqhkiG9w0BAQsF
AAOCAQEAYtas3L/OiMXDIzGsKIJU6xBHu8t2bSq224vE0wDvQaWUUb4H0D4/rtVp
zoN4dH+Qk+ADLCsCatQ/550IKezuO513cEhGtJax75k1FhHGiSiW1Fwtjx38rW1K
sWTjGzIHPUS8WJP04flN2/lf6svFPSTyFP9eQ3f49DnwoYhtiUjhl2ZJF3dKQbY+
lJA5lKXo7+baYuPcIxNTWq6ggVxPXk+d+scitQfa9hUMmYKvcXZujNJE2DOLid0J
zSziVgXoOFZl2UhnoOWrGH7KOA64WmckAWrY4xBEgkwElNUJ2ae7SyzsJcIN7vOs
NNv87lr5aUEjjlXJYBDpm+JTva7MoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:08 2025 by rpki-client