Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/03899D60098C11EDB3BA877FF1222468.roa
File:                     03899D60098C11EDB3BA877FF1222468.roa (raw, json)
Hash identifier:          KPurexHVrGEOcxF0rDLSSoeT/UnHwn/hHlmZu2FshCk=
Subject key identifier:   F2:1E:BC:8D:15:B5:BE:3F:7B:EA:6A:F3:87:EE:C7:07:64:11:F9:6C
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0539
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/03899D60098C11EDB3BA877FF1222468.roa
Signing time:             Fri 22 Jul 2022 07:00:48 +0000
ROA not before:           Fri 22 Jul 2022 07:00:44 +0000
ROA not after:            Wed 10 Jul 2030 07:00:44 +0000
asID:                     10753
IP address blocks:        41.180.192.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1337 (0x539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 22 07:00:44 2022 GMT
            Not After : Jul 10 07:00:44 2030 GMT
        Subject: CN=62da4b20-1db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:23:dd:d8:e8:bb:74:66:6f:0e:60:f9:13:
                    97:66:c7:0e:04:38:8e:cc:de:46:99:a5:fd:4c:f9:
                    bf:e1:5b:e4:33:f3:87:07:0e:e6:42:65:cb:2f:1d:
                    55:23:aa:56:11:89:0a:82:d2:39:36:4f:44:0c:65:
                    34:47:be:dc:e6:88:be:b2:85:01:78:9b:4c:39:84:
                    4d:02:cb:3f:12:bd:c4:33:a7:0c:0c:16:41:5d:8d:
                    5a:0b:d0:89:b4:83:7e:81:19:a1:cb:84:7e:4b:86:
                    ba:f7:e7:e5:ef:58:aa:31:5f:9b:59:75:32:a4:2b:
                    a1:2d:d0:20:1f:47:1e:f3:1e:0e:b9:08:c1:8f:67:
                    06:0d:6f:28:aa:a4:ec:58:18:44:24:ea:56:02:4f:
                    76:31:35:0a:4b:1e:7b:a1:a2:9b:96:12:54:8b:01:
                    7f:cd:dc:31:50:83:7f:61:99:03:17:76:a9:90:5e:
                    a0:eb:4d:cf:8e:af:51:32:69:6e:55:b2:d3:3c:1c:
                    d8:f1:e5:fe:31:7b:5c:9b:b3:79:a3:21:fa:90:e1:
                    3a:e5:c6:ac:0a:d3:f9:7b:07:d0:e2:37:12:aa:9e:
                    92:f0:5d:06:db:64:1c:9c:81:fd:c2:b6:43:1a:97:
                    55:c2:e4:73:c1:20:0a:b0:c6:5f:4a:49:4b:6f:a3:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1E:BC:8D:15:B5:BE:3F:7B:EA:6A:F3:87:EE:C7:07:64:11:F9:6C
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/03899D60098C11EDB3BA877FF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:2a:7b:e7:4a:4e:be:31:7b:4b:6c:ed:d6:b2:eb:d0:94:
         81:e1:fc:aa:88:e6:c2:88:e4:1a:7b:b0:bd:a3:de:cd:e3:cf:
         47:05:f6:1e:5a:18:56:96:84:15:df:e9:55:9d:50:e5:c2:bd:
         8c:eb:36:e4:b6:6b:10:c9:a1:7b:c6:5c:2b:91:48:4e:c9:d9:
         e9:72:1c:96:36:fa:ac:e0:f7:bb:1f:a6:bf:cd:13:ab:ce:f8:
         a2:d5:b4:e6:bc:cc:9a:6b:0b:b3:ea:4c:ee:9a:79:84:dc:2e:
         d2:12:8c:70:0d:b4:4f:93:2b:03:42:2e:5a:ba:0e:11:73:c2:
         ae:e0:de:37:3a:14:c2:f2:be:de:0b:52:ee:e6:fb:dc:38:43:
         c0:20:02:fb:c2:93:3d:47:93:f5:5f:34:93:ce:d7:ee:de:e6:
         58:71:09:87:4a:74:56:a5:e9:8b:ea:fd:b4:3a:9d:9b:f5:5f:
         e5:4a:e6:8f:36:62:30:58:aa:2c:aa:3e:7a:12:61:cf:f5:1e:
         e5:97:9d:8f:8d:35:eb:65:8a:60:bb:7c:55:86:3c:c5:be:3b:
         ba:0b:06:42:1f:49:39:86:fa:1a:b1:1e:35:b8:8b:70:7f:8b:
         b2:7c:7d:61:5d:63:8f:e7:8c:46:ce:30:5d:f7:dc:7f:cf:d1:
         82:a5:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org