Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FFAB29B0138411F0A1C4CFB8762E951A.roa
File:                     FFAB29B0138411F0A1C4CFB8762E951A.roa (raw, json)
Hash identifier:          NsDGFJkDDQWDruO0uRAMQJlKpcMYqr7HbtFv4rp1g0E=
Subject key identifier:   01:D9:88:36:ED:A2:D6:DE:25:A9:16:6A:C5:02:A1:E3:BF:FE:BC:B5
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       08DA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FFAB29B0138411F0A1C4CFB8762E951A.roa
Signing time:             Mon 07 Apr 2025 07:50:39 +0000
ROA not before:           Mon 07 Apr 2025 07:50:36 +0000
ROA not after:            Tue 01 Dec 2026 07:50:36 +0000
asID:                     329007
IP address blocks:        102.135.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 10 Apr 2025 08:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2266 (0x8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Apr  7 07:50:36 2025 GMT
            Not After : Dec  1 07:50:36 2026 GMT
        Subject: CN=67f383cf-8b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:51:53:60:9e:1a:5d:d0:0d:bb:7d:7b:06:5c:
                    57:21:c8:13:ba:91:39:d0:e0:2b:4d:69:0e:4c:6c:
                    97:d9:90:c1:ad:52:a4:9f:02:94:de:d1:36:cc:e8:
                    79:ad:74:cd:99:58:4b:f5:43:10:3d:c8:1d:dd:24:
                    fa:c9:46:d9:52:13:10:a1:22:cb:8a:14:6a:4f:e7:
                    f6:64:61:0d:ca:19:54:a8:54:42:7d:49:df:70:f6:
                    79:57:c6:5e:9d:69:7a:99:bc:63:20:d1:e6:80:75:
                    7d:41:0a:c7:d3:4b:1c:31:3e:4f:15:f1:6d:e0:5f:
                    9a:e9:9c:ed:77:c3:ec:b2:83:4b:a3:24:6d:aa:48:
                    4e:1b:1f:36:d1:0a:a8:53:8e:d4:24:73:be:fd:1b:
                    49:33:9a:a0:9d:3d:c6:16:3d:a5:c2:0c:d3:4c:35:
                    70:ab:70:4b:71:24:07:6c:0a:58:e1:04:9a:39:37:
                    12:f0:7f:de:63:44:26:e7:33:cd:0b:de:3b:f3:80:
                    7b:14:1a:51:08:12:59:cf:81:8e:33:f4:a3:20:ce:
                    e7:42:22:64:97:3b:26:10:d6:79:02:b5:09:aa:e0:
                    35:e8:2f:b2:f9:a1:f1:fe:68:2e:02:28:ab:32:a5:
                    45:26:f3:73:ab:f3:3b:33:40:24:73:0d:c6:e6:9c:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D9:88:36:ED:A2:D6:DE:25:A9:16:6A:C5:02:A1:E3:BF:FE:BC:B5
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FFAB29B0138411F0A1C4CFB8762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:17:41:bd:9e:d9:da:e1:f5:c6:7a:84:79:9a:75:ef:5d:0d:
         19:77:af:6c:3e:46:7c:42:af:53:80:3c:c0:17:2e:c4:d3:c6:
         3f:b2:e3:e1:73:93:c6:b1:9a:1c:ed:25:3f:83:aa:b3:93:18:
         eb:f4:2b:5c:1c:26:1b:0c:b7:42:ed:d5:1d:03:22:d1:bc:4f:
         8f:64:cf:30:44:fe:24:ab:6f:2c:04:48:f4:4c:16:0c:11:94:
         65:f6:3f:c7:3e:91:57:0f:7e:42:b5:fe:f1:2d:84:34:67:e5:
         19:3c:40:66:a7:b4:2d:8e:22:6c:43:ca:27:84:a3:8e:cd:62:
         f6:97:f3:8d:c9:7f:a8:44:b2:65:3c:c3:fc:de:a1:eb:f3:fc:
         1e:f8:cb:94:31:ff:b1:72:29:7b:02:2f:43:54:dc:2e:6e:91:
         56:e8:56:8c:90:a6:41:8b:eb:ab:8d:38:db:ab:22:39:63:7c:
         08:f3:aa:60:ec:bf:8a:01:87:ad:3a:94:14:b1:b4:a2:0c:12:
         12:fb:35:0a:7a:42:3a:4a:c3:b8:89:6d:15:59:5d:30:95:0b:
         3d:50:e1:25:8a:98:fc:19:77:ff:81:1e:74:8d:01:e3:61:c2:
         71:18:e5:c6:f6:5f:76:50:fd:d5:da:7e:d1:f0:01:08:27:d5:
         63:16:6b:a3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCNowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA0MDcwNzUwMzZaFw0yNjEyMDEwNzUwMzZaMBgxFjAU
BgNVBAMTDTY3ZjM4M2NmLThiNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDuUVNgnhpd0A27fXsGXFchyBO6kTnQ4CtNaQ5MbJfZkMGtUqSfApTe0TbM
6HmtdM2ZWEv1QxA9yB3dJPrJRtlSExChIsuKFGpP5/ZkYQ3KGVSoVEJ9Sd9w9nlX
xl6daXqZvGMg0eaAdX1BCsfTSxwxPk8V8W3gX5rpnO13w+yyg0ujJG2qSE4bHzbR
CqhTjtQkc779G0kzmqCdPcYWPaXCDNNMNXCrcEtxJAdsCljhBJo5NxLwf95jRCbn
M80L3jvzgHsUGlEIElnPgY4z9KMgzudCImSXOyYQ1nkCtQmq4DXoL7L5ofH+aC4C
KKsypUUm83Or8zszQCRzDcbmnH6nAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAdmI
Nu2i1t4lqRZqxQKh47/+vLUwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0ZGQUIyOUIwMTM4NDExRjBBMUM0Q0ZCODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh3IwDQYJKoZIhvcNAQEL
BQADggEBAJcXQb2e2drh9cZ6hHmade9dDRl3r2w+RnxCr1OAPMAXLsTTxj+y4+Fz
k8axmhztJT+DqrOTGOv0K1wcJhsMt0Lt1R0DItG8T49kzzBE/iSrbywESPRMFgwR
lGX2P8c+kVcPfkK1/vEthDRn5Rk8QGantC2OImxDyieEo47NYvaX843Jf6hEsmU8
w/zeoevz/B74y5Qx/7FyKXsCL0NU3C5ukVboVoyQpkGL66uNONurIjljfAjzqmDs
v4oBh606lBSxtKIMEhL7NQp6QjpKw7iJbRVZXTCVCz1Q4SWKmPwZd/+BHnSNAeNh
wnEY5cb2X3ZQ/dXaftHwAQgn1WMWa6M=
-----END CERTIFICATE-----
Generated at Thu Apr 10 12:30:32 2025 by rpki-client on console.sobornost.net