Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/13D3933E127711EEBF8E75824AD9E6FC.roa
File:                     13D3933E127711EEBF8E75824AD9E6FC.roa (raw, json)
Hash identifier:          wF3sNXfil+1scqTPPxsBjeRh6Gay8KlDXdlMv3Ys8T8=
Subject key identifier:   39:16:13:B1:2F:CC:9B:92:D0:9B:13:45:83:E7:18:F3:86:7A:DC:82
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0C21
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/13D3933E127711EEBF8E75824AD9E6FC.roa
Signing time:             Sat 24 Jun 2023 10:08:34 +0000
ROA not before:           Sat 24 Jun 2023 10:08:28 +0000
ROA not after:            Mon 23 Jun 2025 10:08:28 +0000
asID:                     834
IP address blocks:        196.251.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3105 (0xc21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun 24 10:08:28 2023 GMT
            Not After : Jun 23 10:08:28 2025 GMT
        Subject: CN=6496c0a2-c1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5f:bb:6c:a9:db:06:c8:16:25:90:3d:96:45:
                    4c:1a:d3:47:d0:3f:a7:bb:ee:07:d0:7f:f9:62:01:
                    da:ec:2c:37:27:a7:9f:40:c7:bc:d0:8b:61:cf:bd:
                    50:f9:b1:d1:44:4e:1e:92:18:36:51:61:42:cc:38:
                    65:6e:9c:23:0d:14:09:d3:91:14:05:a9:69:5a:99:
                    b2:e8:66:9f:4f:1e:49:b7:48:cc:fe:51:0b:cb:ed:
                    58:d9:92:27:18:49:df:1d:18:48:ee:d8:8e:a3:8e:
                    58:41:50:40:b5:43:ce:d3:3f:13:44:b9:92:26:a6:
                    73:10:61:89:b1:ba:52:79:bc:92:82:93:76:6a:24:
                    1d:a2:d0:35:b7:2e:cf:1d:eb:56:0c:38:b7:f9:89:
                    a5:dd:19:0e:6f:b0:db:8b:cf:3d:f7:b7:66:35:78:
                    dc:a1:cf:f8:3a:fc:53:37:87:ef:c4:b1:91:f1:8b:
                    fe:2e:6a:75:1b:36:af:83:18:0c:a0:68:7c:88:33:
                    59:1e:ae:d0:21:94:6e:69:81:ad:ca:bf:07:c4:83:
                    dd:52:5e:e2:0f:f3:6c:56:bf:9f:63:44:49:9e:a8:
                    9d:0b:27:ff:3a:43:0d:41:d9:4b:6a:d1:d7:1c:31:
                    9f:b0:53:0b:01:9a:b1:14:a5:af:1b:0f:34:35:6c:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:16:13:B1:2F:CC:9B:92:D0:9B:13:45:83:E7:18:F3:86:7A:DC:82
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/13D3933E127711EEBF8E75824AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:ae:fa:84:39:7d:5e:2e:25:33:25:96:32:2a:ed:af:21:e0:
         9f:2b:23:55:7b:9e:a9:13:6a:24:76:96:7f:c5:92:4d:43:e4:
         58:62:b6:c5:bc:14:ec:df:2e:d9:26:0a:c9:43:fa:2d:a6:eb:
         a3:70:ba:ad:ca:7d:c6:a3:88:93:52:70:1a:74:40:e5:fa:0a:
         e8:ca:06:9e:8a:d3:39:4a:27:e7:d7:7a:5e:84:b4:8a:0c:8b:
         c6:60:88:b8:f5:ea:6c:d9:3e:9f:85:ad:59:a5:0f:df:d6:4b:
         7f:c1:20:ab:86:39:b0:54:a2:6a:4e:92:76:ef:71:2b:4f:a9:
         e3:ca:e8:9b:72:64:dc:54:50:1e:20:61:89:d0:ba:1e:ef:a2:
         b2:97:4f:03:43:bd:1e:57:91:59:ab:d9:6a:f9:d4:7e:9f:86:
         78:2c:14:ba:a7:05:2b:22:1c:d5:07:8b:ff:f7:b3:f6:04:28:
         20:95:4c:bd:5e:cd:10:4f:68:b1:08:b1:7a:71:25:52:74:f5:
         c0:9c:3d:de:7e:9e:a9:22:b7:5b:60:1d:3b:2a:73:7b:0f:d1:
         f3:50:03:9b:55:80:0f:f3:aa:af:61:e1:b4:21:5e:d6:19:fe:
         e8:fa:86:3e:dc:dd:5d:ac:95:d6:cd:2e:03:a8:4e:7c:f1:fe:
         82:bd:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:25 2023 by rpki-client on console.sobornost.net