Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/0E26FDB8FFDE11EEA7E5C94B017001B1.roa
File:                     0E26FDB8FFDE11EEA7E5C94B017001B1.roa (raw, json)
Hash identifier:          HzfnW5ybVMJkT6Ra0qOu6u5dr+MjwB2xQYWeDHkZSug=
Subject key identifier:   FB:8D:65:F7:95:6F:5F:2A:AF:F1:28:07:53:A3:40:89:AE:2C:51:65
Certificate issuer:       /CN=F366C302AF/serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
Certificate serial:       07
Authority key identifier: A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/0E26FDB8FFDE11EEA7E5C94B017001B1.roa
Signing time:             Sun 21 Apr 2024 12:52:48 +0000
ROA not before:           Sun 21 Apr 2024 12:52:45 +0000
ROA not after:            Wed 23 Apr 2025 12:52:45 +0000
asID:                     37628
IP address blocks:        154.65.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 21 Apr 2024 15:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C302AF/serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
        Validity
            Not Before: Apr 21 12:52:45 2024 GMT
            Not After : Apr 23 12:52:45 2025 GMT
        Subject: CN=66250c20-fae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:04:ed:3c:41:df:a3:a2:bd:0b:2d:9b:85:
                    9b:90:dd:92:91:82:6a:45:55:d7:1f:40:8e:4b:52:
                    1f:25:03:3a:87:82:dc:ff:1f:a7:23:a0:ce:c2:19:
                    80:23:e7:5c:f8:be:23:7a:58:ac:8f:e3:e8:c6:3b:
                    6b:c8:dd:31:e7:07:f5:fa:ca:55:71:0a:1c:43:ba:
                    17:a6:20:4e:f0:29:a7:89:6f:e1:34:e9:e1:23:fa:
                    89:0b:65:7f:a6:6d:47:92:68:31:2d:e5:a2:a8:0e:
                    aa:e5:72:a0:05:c6:c6:e6:29:8f:8b:13:7f:96:95:
                    d1:0f:32:e0:be:84:d0:6e:a5:0a:d1:f7:d9:31:26:
                    9d:9f:9e:39:ab:f1:09:6e:64:ef:8d:2f:0c:b2:d8:
                    49:b3:84:a0:59:6a:63:98:b0:24:0b:53:3f:d3:7d:
                    be:c9:f8:cc:11:16:c0:42:b5:8b:38:0c:1c:45:fe:
                    28:30:13:16:54:dc:31:62:57:db:fa:35:02:77:78:
                    92:3c:6f:29:de:f5:fc:41:a9:fc:e0:a2:29:0f:c8:
                    3c:4c:a6:44:53:e6:a8:b8:9b:eb:f2:64:42:38:57:
                    25:68:30:1a:29:85:9a:b6:6e:db:e4:22:61:2a:e3:
                    d5:47:87:05:2c:ff:08:3b:8c:69:96:76:ff:0f:3f:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8D:65:F7:95:6F:5F:2A:AF:F1:28:07:53:A3:40:89:AE:2C:51:65
            X509v3 Authority Key Identifier:
                keyid:A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/0E26FDB8FFDE11EEA7E5C94B017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.65.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:16:8d:08:53:cf:7e:8a:0e:bc:ea:0e:49:a0:9b:35:0f:fa:
         eb:18:49:8b:f6:fa:7c:65:06:3f:fb:33:1e:bd:ad:55:90:30:
         cc:a9:b4:06:73:5e:12:0f:c0:5d:56:f7:f5:ed:45:89:f2:97:
         4c:46:0c:ac:93:ec:a4:48:45:da:82:4f:54:4b:a4:78:04:e1:
         5e:16:d9:39:cf:2e:a1:ac:f8:2e:70:8d:98:9f:7f:21:ac:ff:
         d9:15:e5:33:51:70:4e:f3:25:9b:6e:bf:5c:37:2b:0c:32:1a:
         af:37:b4:40:06:f5:8d:67:0f:21:5e:46:98:fd:be:79:9a:ed:
         7e:d1:69:05:2a:06:d5:be:fb:a2:a8:33:76:ea:bf:0a:85:ca:
         45:8a:50:46:a1:e1:20:46:d4:76:4f:ed:21:1f:3a:81:9f:bd:
         05:8b:27:cb:72:1b:05:e4:b2:51:27:64:a0:bb:82:5a:32:8f:
         ee:e8:51:06:f1:eb:88:14:7c:6d:86:52:25:e3:eb:15:d0:03:
         33:0b:ec:1f:c4:35:7f:7d:23:6d:c8:95:60:02:3e:57:57:75:
         72:93:80:86:94:2d:c8:50:04:f3:56:46:e6:59:b8:e0:02:0d:
         d1:cc:77:83:1a:a2:1a:17:32:5a:3d:c6:a5:3b:79:19:1b:67:
         04:96:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 19:48:16 2024 by rpki-client on console.sobornost.net