Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/12CA13241BE511EE840F371D4AD9E6FC.roa
File:                     12CA13241BE511EE840F371D4AD9E6FC.roa (raw, json)
Hash identifier:          RV1qtOKRwm2HaxUx8KP5oDO2UQBLfdOkpDzz+6cnfuI=
Subject key identifier:   41:5A:F1:74:42:2C:5A:00:B8:5E:89:32:40:1B:96:34:66:0A:4F:EB
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       2F
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/12CA13241BE511EE840F371D4AD9E6FC.roa
Signing time:             Thu 06 Jul 2023 10:08:37 +0000
ROA not before:           Thu 06 Jul 2023 10:08:34 +0000
ROA not after:            Wed 06 Jul 2033 10:08:34 +0000
asID:                     37105
IP address blocks:        41.242.192.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Jul  6 10:08:34 2023 GMT
            Not After : Jul  6 10:08:34 2033 GMT
        Subject: CN=64a692a5-eb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:95:e4:70:67:ad:7a:fc:75:95:0f:37:11:be:
                    9c:d9:d9:e8:eb:3f:41:06:52:08:c3:a9:06:30:a1:
                    95:b7:6e:bc:9f:35:49:e9:0a:ce:5e:14:3b:47:4e:
                    91:d1:ac:c3:fc:be:4d:a2:16:b5:48:1b:ec:a3:3a:
                    ea:af:c0:a7:66:68:31:31:1c:41:0a:bd:24:65:47:
                    68:e4:04:f0:fd:a8:3b:60:3c:17:79:e5:91:0b:da:
                    bb:19:91:4a:e1:11:97:06:31:d2:86:bc:93:6d:1d:
                    5b:42:d7:d9:11:6e:0a:eb:c5:a4:d9:85:01:6c:b4:
                    0b:2f:dd:92:a3:16:e9:82:e1:65:e2:7c:30:3e:21:
                    48:a8:4c:43:20:f5:17:58:4a:5a:02:23:27:48:38:
                    e8:2e:f9:1b:7d:46:ed:60:59:f6:f9:e8:d1:5d:96:
                    50:59:fa:3f:92:29:54:36:12:0f:3c:5d:3c:e6:e5:
                    22:66:99:cb:87:e4:02:a4:27:52:82:e0:06:1d:5d:
                    9c:fa:af:15:85:f4:66:b0:6a:31:7e:81:0e:43:89:
                    f2:89:65:96:a5:a5:6b:09:aa:32:27:ef:0b:87:7e:
                    03:90:de:ca:af:87:5a:87:e5:7c:0e:23:2c:e4:70:
                    6f:eb:ca:f0:f1:06:fc:fa:1d:f9:3a:e0:78:6a:65:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5A:F1:74:42:2C:5A:00:B8:5E:89:32:40:1B:96:34:66:0A:4F:EB
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/12CA13241BE511EE840F371D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.242.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:55:df:57:d2:dc:98:4e:73:ae:b3:2d:c4:37:c4:01:d8:d2:
         c5:23:b0:c9:0e:d6:b1:ae:c2:13:06:62:36:cc:19:69:7d:6b:
         21:69:2f:6d:22:1f:c0:d8:bf:d8:a3:01:bb:02:de:71:7a:44:
         0a:a4:17:eb:0d:cc:21:c2:8d:4b:83:be:2e:2b:e6:d2:89:52:
         de:ef:5f:3f:f3:d5:01:47:58:24:76:f2:df:d4:7a:e8:43:cb:
         b1:3d:09:54:01:03:75:87:4d:42:ba:2a:2b:c2:1e:bc:97:08:
         48:f7:51:09:ee:51:be:54:ce:46:b7:5d:bd:88:88:b2:7b:37:
         58:73:7c:1d:32:ea:54:08:ee:a3:59:86:40:b5:b5:96:9a:05:
         5b:66:45:36:40:7c:f2:c1:32:db:26:35:80:f5:dd:b7:1d:d4:
         ea:a4:04:dd:22:97:c4:c8:24:d8:05:10:48:c1:f9:aa:c6:99:
         6d:98:c8:98:5d:bb:44:fd:a0:af:b9:88:1c:eb:94:90:dc:38:
         15:6e:02:d9:e7:3d:35:79:54:3b:98:e8:15:7c:a0:ae:d4:af:
         95:55:13:19:9d:ea:dd:a0:aa:59:1b:0a:eb:f3:4f:a0:4e:7b:
         f7:ec:be:35:e2:8e:0c:3d:58:40:a3:16:5e:5a:d2:dd:f9:e3:
         d0:31:16:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:25 2023 by rpki-client on console.sobornost.net