Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/2C7696CC864611EFBEB299B9762E951A.roa
File:                     2C7696CC864611EFBEB299B9762E951A.roa (raw, json)
Hash identifier:          ++O9RGJCvH1gf6CD3YcdC9wYI6i6kC+bbA0cPZMc9S0=
Subject key identifier:   D6:2C:9F:C5:0E:A5:D1:19:16:0E:DD:26:7E:E5:6E:3C:73:92:99:9B
Certificate issuer:       /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial:       07FB
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/2C7696CC864611EFBEB299B9762E951A.roa
Signing time:             Wed 09 Oct 2024 13:55:42 +0000
ROA not before:           Wed 09 Oct 2024 13:55:39 +0000
ROA not after:            Mon 30 Oct 2034 13:55:39 +0000
asID:                     8346
IP address blocks:        196.207.192.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 14:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
        Validity
            Not Before: Oct  9 13:55:39 2024 GMT
            Not After : Oct 30 13:55:39 2034 GMT
        Subject: CN=67068b5e-0c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:44:35:75:59:e9:1a:e7:a5:d9:68:61:9b:
                    10:ee:bb:54:3e:5c:22:5c:7e:48:eb:e7:81:17:72:
                    e2:8e:0a:11:2b:11:4a:25:85:34:88:c8:73:79:8d:
                    8e:5c:6f:3d:be:c6:51:74:ef:db:a9:bd:c9:27:ab:
                    c8:5c:37:c3:7c:15:5a:ba:6d:76:0a:92:8d:b4:5a:
                    d2:0e:a3:31:fc:5c:d2:43:a8:ac:ec:73:00:f5:42:
                    14:c9:d5:57:66:ec:08:b5:93:43:da:8a:99:a4:90:
                    bb:67:99:6e:ea:9d:2a:a0:0b:2a:a6:80:60:0f:3b:
                    23:2c:2e:5c:c8:ab:f6:d7:ff:e9:c2:eb:bc:4d:a4:
                    a9:f6:f9:c3:f2:18:42:ca:e1:73:52:8c:7f:b3:ac:
                    07:2d:7f:21:66:7d:56:96:f5:48:71:e1:3e:44:8b:
                    a6:14:fd:81:a4:65:47:d9:a0:69:d8:9f:5f:d1:2b:
                    2c:e9:fc:2c:0c:7f:f3:4d:10:f1:6d:40:7b:1a:82:
                    41:a6:5d:b2:15:0b:eb:2e:29:e3:6a:f2:5f:e6:c7:
                    50:92:b3:fe:94:d9:2c:8b:c6:99:a3:41:25:5b:ee:
                    90:90:29:b8:c8:e8:5a:06:49:15:80:05:6f:db:09:
                    6b:2e:6d:7b:79:bb:50:b0:74:69:11:6a:34:94:2a:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2C:9F:C5:0E:A5:D1:19:16:0E:DD:26:7E:E5:6E:3C:73:92:99:9B
            X509v3 Authority Key Identifier:
                keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/2C7696CC864611EFBEB299B9762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.207.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:96:16:6c:aa:93:a8:23:c7:ee:62:92:86:5e:19:17:a1:ae:
         43:db:3f:44:35:d3:54:61:88:d0:ac:1f:46:3b:e8:72:83:65:
         ea:4c:8d:aa:5b:1c:4e:82:c3:7a:54:ef:b9:c5:01:a3:21:9b:
         6a:ff:d6:72:b7:f6:70:b8:f3:8b:f1:fb:01:06:6e:0e:b7:0a:
         2c:94:45:4d:07:6d:e6:ec:b1:e3:b8:df:97:1f:f7:ae:c2:9b:
         e7:db:79:35:a7:b9:14:e3:d7:00:01:ad:93:f8:7f:02:3e:ca:
         16:4a:9f:d8:ac:3d:31:18:27:1c:c0:ad:de:fa:05:fc:30:92:
         30:d0:ad:44:9d:91:9a:aa:37:0f:92:aa:b1:02:29:19:8a:c3:
         0a:c8:2f:74:17:c2:04:8a:16:16:57:bf:e4:3c:9c:22:1c:46:
         81:b8:40:7e:28:70:40:83:0d:be:0e:95:ae:af:3f:b9:82:b4:
         4a:4e:67:00:89:ef:3d:6a:08:a2:45:48:2d:9c:78:fc:e0:77:
         c5:6a:7f:40:15:ad:d1:11:ca:88:79:a1:6f:89:47:5d:e2:be:
         98:db:d6:53:d1:9c:6d:a1:32:47:b6:3e:26:1b:3b:3c:db:ea:
         5e:89:5b:80:f4:18:f1:f1:72:15:d2:88:54:81:01:67:55:99:
         69:b9:93:20
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB/swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjUyQTZBRjExMC8GA1UEBRMoMTlBREFDQzhGRkEzOTMxMzE4QTZDNzUzQTBBQzFC
MkFFOTI5NUUwMzAeFw0yNDEwMDkxMzU1MzlaFw0zNDEwMzAxMzU1MzlaMBgxFjAU
BgNVBAMTDTY3MDY4YjVlLTBjMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDK80Q1dVnpGuel2WhhmxDuu1Q+XCJcfkjr54EXcuKOChErEUolhTSIyHN5
jY5cbz2+xlF079upvcknq8hcN8N8FVq6bXYKko20WtIOozH8XNJDqKzscwD1QhTJ
1Vdm7Ai1k0PaipmkkLtnmW7qnSqgCyqmgGAPOyMsLlzIq/bX/+nC67xNpKn2+cPy
GELK4XNSjH+zrActfyFmfVaW9Uhx4T5Ei6YU/YGkZUfZoGnYn1/RKyzp/CwMf/NN
EPFtQHsagkGmXbIVC+suKeNq8l/mx1CSs/6U2SyLxpmjQSVb7pCQKbjI6FoGSRWA
BW/bCWsubXt5u1CwdGkRajSUKkmtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU1iyf
xQ6l0RkWDt0mfuVuPHOSmZswHwYDVR0jBBgwFoAUGa2syP+jkxMYpsdToKwbKukp
XgMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1MkE2LzZBRTMwN0I2NkZGRDExRTlBNjlDQzEzNEY4QUVBMjI4L0dhMnN5
UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dhMnN5UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkI1MkE2LzZBRTMwN0I2NkZGRDExRTlBNjlDQzEzNEY4
QUVBMjI4LzJDNzY5NkNDODY0NjExRUZCRUIyOTlCOTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbEz8AwDQYJKoZIhvcNAQEL
BQADggEBAJWWFmyqk6gjx+5ikoZeGRehrkPbP0Q101RhiNCsH0Y76HKDZepMjapb
HE6Cw3pU77nFAaMhm2r/1nK39nC484vx+wEGbg63CiyURU0HbebsseO435cf967C
m+fbeTWnuRTj1wABrZP4fwI+yhZKn9isPTEYJxzArd76BfwwkjDQrUSdkZqqNw+S
qrECKRmKwwrIL3QXwgSKFhZXv+Q8nCIcRoG4QH4ocECDDb4Ola6vP7mCtEpOZwCJ
7z1qCKJFSC2cePzgd8Vqf0AVrdERyoh5oW+JR13ivpjb1lPRnG2hMke2PiYbOzzb
6l6JW4D0GPHxchXSiFSBAWdVmWm5kyA=
-----END CERTIFICATE-----
Generated at Wed Oct 9 17:26:15 2024 by rpki-client on console.sobornost.net