Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/1A3990F8BEBF11EEBD762B64775412E6.roa
File:                     1A3990F8BEBF11EEBD762B64775412E6.roa (raw, json)
Hash identifier:          ccU9mdy2rdZFdjo5GkmS5RHSz0Znjstflx5+85EYt7A=
Subject key identifier:   09:9E:48:01:D1:8A:A5:95:F3:1F:6A:5C:EE:24:4D:D5:23:E0:AC:44
Certificate issuer:       /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial:       65
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/1A3990F8BEBF11EEBD762B64775412E6.roa
Signing time:             Mon 29 Jan 2024 15:57:28 +0000
ROA not before:           Mon 29 Jan 2024 15:57:25 +0000
ROA not after:            Thu 29 Jan 2026 15:57:25 +0000
asID:                     37073
IP address blocks:        41.216.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 17:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
        Validity
            Not Before: Jan 29 15:57:25 2024 GMT
            Not After : Jan 29 15:57:25 2026 GMT
        Subject: CN=65b7cae8-6370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:3d:96:57:1f:f8:59:44:f3:64:4c:30:cf:
                    f0:8e:ec:12:da:2c:66:eb:ef:6d:75:34:b7:a6:a7:
                    54:31:50:0e:3c:f8:15:29:98:00:46:4c:42:d6:d6:
                    c7:5e:46:72:04:e2:58:22:15:b9:7a:88:5c:be:84:
                    e0:01:2f:98:c5:c9:61:93:ba:ce:d9:10:a0:83:e4:
                    dc:93:e4:a2:74:da:b8:fb:0b:ff:84:8b:a8:8e:0a:
                    7f:c5:fe:c6:05:1f:83:c0:ba:16:1b:dd:d9:c3:0a:
                    e8:35:61:3e:87:95:11:b7:79:31:96:8a:97:09:2f:
                    21:47:36:5c:ee:08:28:55:6a:40:90:ec:d8:22:b3:
                    5e:c7:4c:fd:8d:24:fe:86:8f:52:7c:09:59:10:25:
                    36:2f:8d:f2:fe:d2:24:6b:a6:c4:e5:a9:28:da:93:
                    82:d7:1e:36:0a:d4:1d:af:e4:de:5a:0f:46:9e:0e:
                    ab:ab:c0:81:67:ee:3a:58:61:55:95:1a:18:e3:1b:
                    be:83:dc:09:8b:f4:86:f2:32:9f:b5:49:85:6b:91:
                    2a:36:29:eb:bf:bd:00:2c:63:a1:f2:95:30:91:83:
                    40:b8:ae:c3:f2:59:63:29:fa:43:2b:b1:a9:6d:56:
                    2e:39:03:6e:ee:ac:7a:26:47:29:61:75:a6:63:44:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9E:48:01:D1:8A:A5:95:F3:1F:6A:5C:EE:24:4D:D5:23:E0:AC:44
            X509v3 Authority Key Identifier:
                keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/1A3990F8BEBF11EEBD762B64775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:b2:86:2d:50:ce:a0:6b:fb:d5:8f:12:c2:42:65:90:fb:
         47:03:ef:d6:12:e5:b4:bb:5f:22:b0:e4:11:03:38:1e:e4:c4:
         4e:11:64:d1:e4:32:dd:e9:d6:ba:32:0c:15:da:3c:cc:5b:e2:
         7c:4d:3a:75:56:e0:27:af:f4:47:2a:06:9a:85:80:d1:bb:75:
         d1:8b:56:be:4b:ac:64:da:30:82:bf:cb:be:00:5d:56:23:e4:
         b9:0a:f7:0f:9c:bd:dc:66:35:7d:01:a7:4a:3b:85:83:1c:9b:
         9b:b7:aa:a7:7c:90:44:59:0c:ea:df:c3:f6:1c:8d:b6:3c:ab:
         c4:ce:1a:79:68:f0:82:c7:84:47:db:ed:38:70:90:d8:71:43:
         0c:c6:ea:eb:ab:59:a3:f7:dd:f9:cf:11:d5:b5:94:f8:e7:35:
         65:da:24:00:ce:df:e7:87:6f:78:b4:a3:bd:b4:8a:75:f3:eb:
         62:30:31:25:90:c1:e3:72:67:10:45:6e:38:bf:cb:d1:b6:9f:
         11:e2:a8:b5:de:16:3e:a1:96:9d:6e:76:9d:45:1d:37:31:37:
         b0:aa:5a:23:4e:e1:95:43:70:d6:ac:61:a5:00:e4:56:a4:1f:
         cc:a7:b6:ba:42:40:92:d9:77:e8:eb:29:db:05:4a:25:c2:29:
         13:3a:0c:3d
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBZTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
MDU2N0FGMTEwLwYDVQQFEyg1RkMzN0RFQ0VCNzAwOEJCQTc0MTM0Nzg0NUI3NkI0
NzY3N0FFQTY5MB4XDTI0MDEyOTE1NTcyNVoXDTI2MDEyOTE1NTcyNVowGDEWMBQG
A1UEAxMNNjViN2NhZTgtNjM3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL5dPZZXH/hZRPNkTDDP8I7sEtosZuvvbXU0t6anVDFQDjz4FSmYAEZMQtbW
x15GcgTiWCIVuXqIXL6E4AEvmMXJYZO6ztkQoIPk3JPkonTauPsL/4SLqI4Kf8X+
xgUfg8C6Fhvd2cMK6DVhPoeVEbd5MZaKlwkvIUc2XO4IKFVqQJDs2CKzXsdM/Y0k
/oaPUnwJWRAlNi+N8v7SJGumxOWpKNqTgtceNgrUHa/k3loPRp4Oq6vAgWfuOlhh
VZUaGOMbvoPcCYv0hvIyn7VJhWuRKjYp67+9ACxjofKVMJGDQLiuw/JZYyn6Qyux
qW1WLjkDbu6seiZHKWF1pmNEIoECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQJnkgB
0YqllfMfalzuJE3VI+CsRDAfBgNVHSMEGDAWgBRfw33s63AIu6dBNHhFt2tHZ3rq
aTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTA1NjcvMzNFMzMwMjY3NEJBMTFFRUFBOTRDMTczNEFEOUU2RkMvWDhOOTdP
dHdDTHVuUVRSNFJiZHJSMmQ2Nm1rLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWDhOOTdPdHdDTHVuUVRSNFJiZHJSMmQ2Nm1rLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTA1NjcvMzNFMzMwMjY3NEJBMTFFRUFBOTRDMTczNEFE
OUU2RkMvMUEzOTkwRjhCRUJGMTFFRUJENzYyQjY0Nzc1NDEyRTYucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCnYkDANBgkqhkiG9w0BAQsF
AAOCAQEAmnayhi1QzqBr+9WPEsJCZZD7RwPv1hLltLtfIrDkEQM4HuTEThFk0eQy
3enWujIMFdo8zFvifE06dVbgJ6/0RyoGmoWA0bt10YtWvkusZNowgr/LvgBdViPk
uQr3D5y93GY1fQGnSjuFgxybm7eqp3yQRFkM6t/D9hyNtjyrxM4aeWjwgseER9vt
OHCQ2HFDDMbq66tZo/fd+c8R1bWU+Oc1ZdokAM7f54dveLSjvbSKdfPrYjAxJZDB
43JnEEVuOL/L0bafEeKotd4WPqGWnW52nUUdNzE3sKpaI07hlUNw1qxhpQDkVqQf
zKe2ukJAktl36Osp2wVKJcIpEzoMPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org