Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/12637198EF0911EF80361449762E951A.roa
File:                     12637198EF0911EF80361449762E951A.roa (raw, json)
Hash identifier:          j1dx//wuiZLDTpgnNr623i+YETTDUROQ2hYRcKOYCCk=
Subject key identifier:   B0:6E:F8:B5:E7:E1:C0:36:5A:72:CE:59:CB:4D:59:04:35:42:B4:60
Certificate issuer:       /CN=F36FA116AF/serialNumber=BC44CE85A5EC97BDBB21D3348800310153A01CCA
Certificate serial:       39
Authority key identifier: BC:44:CE:85:A5:EC:97:BD:BB:21:D3:34:88:00:31:01:53:A0:1C:CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vETOhaXsl727IdM0iAAxAVOgHMo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/12637198EF0911EF80361449762E951A.roa
Signing time:             Wed 19 Feb 2025 21:32:51 +0000
ROA not before:           Wed 19 Feb 2025 21:32:47 +0000
ROA not after:            Mon 19 Feb 2035 21:32:47 +0000
asID:                     401218
IP address blocks:        196.223.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Mar 2025 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA116AF
        Validity
            Not Before: Feb 19 21:32:47 2025 GMT
            Not After : Feb 19 21:32:47 2035 GMT
        Subject: CN=67b64e03-0456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:16:82:ba:b3:32:8c:eb:9f:7e:86:88:e9:d4:
                    e1:4f:2f:98:b5:62:0d:62:14:92:d2:3d:bf:68:dd:
                    83:6b:71:84:8c:bc:32:03:27:e8:5b:a1:29:2c:18:
                    38:bf:0a:84:5d:fb:53:6f:a5:74:9a:cd:20:07:80:
                    18:5d:88:9b:81:a1:95:3b:8c:30:dd:85:31:22:02:
                    23:52:ce:d3:f8:7c:57:eb:8a:ed:4b:46:ee:e0:f0:
                    d4:c1:1f:20:92:57:88:6f:e2:27:e2:68:8f:22:0a:
                    91:ca:7d:6b:86:37:b2:e1:7c:80:c0:51:c0:e5:88:
                    4a:0d:31:72:00:b5:5a:e5:e2:1d:2c:f7:65:0c:86:
                    3d:70:bf:a4:24:67:2d:77:5a:2e:85:37:ae:9d:24:
                    f6:09:7c:e1:f4:e8:4f:7b:3a:47:dd:e4:f5:8c:07:
                    5b:98:dd:0a:c0:ff:66:30:00:81:c0:11:aa:6f:b8:
                    9d:a1:4a:ca:14:aa:d4:8e:7f:1a:de:18:6c:b0:e8:
                    b5:e6:58:1e:04:8b:fc:9e:01:41:09:ad:b2:ad:c8:
                    a5:9f:a0:bc:d8:c8:03:da:61:ce:8b:0d:a8:aa:fb:
                    76:d3:c7:f3:d3:1a:2a:88:bb:52:52:6f:f4:e3:d7:
                    b9:74:89:63:1f:13:11:ff:ee:83:5d:b2:62:d0:2e:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6E:F8:B5:E7:E1:C0:36:5A:72:CE:59:CB:4D:59:04:35:42:B4:60
            X509v3 Authority Key Identifier:
                keyid:BC:44:CE:85:A5:EC:97:BD:BB:21:D3:34:88:00:31:01:53:A0:1C:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/vETOhaXsl727IdM0iAAxAVOgHMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vETOhaXsl727IdM0iAAxAVOgHMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA116/8DC44E0EC62B11EF98DEC0B5762E951A/12637198EF0911EF80361449762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.223.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:5b:25:46:0d:f7:7e:01:b7:8e:82:93:06:a5:b3:f4:03:20:
         df:93:2e:dc:b6:f4:7a:1d:41:8f:00:8e:e4:9c:2e:c9:22:cb:
         56:34:d0:b0:22:48:48:39:d9:6e:0e:2c:c0:f5:e9:d9:a3:a7:
         6f:8e:88:a4:5a:19:8f:01:7e:e0:ac:b9:34:82:f4:ed:d0:0f:
         0a:04:03:84:dc:4b:64:a0:79:2c:54:4f:39:0d:fc:8b:aa:25:
         04:4f:89:d1:b5:32:59:08:23:03:53:79:24:b7:63:88:7d:ea:
         c8:99:c8:05:0f:e4:76:08:89:39:0b:af:3d:50:f4:0c:9a:fd:
         ea:95:3e:59:13:52:73:47:2f:14:1e:73:2d:bd:7b:0d:ab:94:
         d3:39:16:60:24:f7:40:b9:95:2a:5c:6c:8f:54:f9:c6:cc:1f:
         90:54:5c:f9:85:14:de:a4:99:77:ba:bd:e1:ec:34:51:7b:91:
         cb:27:25:17:70:f2:25:23:3a:5e:4a:c5:4c:99:4c:b6:32:a6:
         61:65:3e:ef:f0:e2:8a:4e:77:7b:e5:41:f4:99:0b:a2:9e:9c:
         d2:4d:3d:57:60:1e:d2:a3:70:f9:78:ef:b0:46:09:66:1f:9e:
         1a:5a:78:5a:87:30:e4:b2:3d:c4:7a:74:06:f8:41:d4:fb:20:
         61:eb:4b:5d
-----BEGIN CERTIFICATE-----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Generated at Tue Mar 11 20:12:35 2025 by rpki-client on console.sobornost.net