Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/23EE2706098C11ED93D20580F1222468.roa
File:                     23EE2706098C11ED93D20580F1222468.roa (raw, json)
Hash identifier:          Z06or8mJoN91ZJK7zq6NFI/rBWRRGuy1kmUhR6qZxTo=
Subject key identifier:   80:9D:09:58:7C:77:8E:39:DD:4C:A8:61:60:12:1E:5E:ED:B6:F5:0D
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       053B
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/23EE2706098C11ED93D20580F1222468.roa
Signing time:             Fri 22 Jul 2022 07:01:42 +0000
ROA not before:           Fri 22 Jul 2022 07:01:38 +0000
ROA not after:            Wed 10 Jul 2030 07:01:38 +0000
asID:                     10753
IP address blocks:        41.180.208.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 May 2023 14:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339 (0x53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 22 07:01:38 2022 GMT
            Not After : Jul 10 07:01:38 2030 GMT
        Subject: CN=62da4b56-9f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:89:33:a2:62:35:e7:ba:32:60:96:4c:f2:
                    ef:44:f6:d4:9b:6c:6f:9e:7e:71:26:6d:d5:a5:42:
                    45:06:ce:9b:cf:9b:f6:af:e6:4d:d6:af:17:33:74:
                    ea:0a:bd:26:f2:6a:46:9b:33:07:2d:6d:df:9a:39:
                    5d:45:63:09:44:2e:2e:79:8d:03:87:04:88:b4:b3:
                    7f:dd:83:0f:4b:d7:bd:f3:6a:55:74:50:3c:ae:ed:
                    1e:85:2b:12:fd:c7:de:27:05:62:59:51:5e:ca:3a:
                    52:fc:d7:65:15:45:91:de:c7:d0:1d:19:dc:b4:03:
                    8b:bf:5b:f8:88:4a:d8:e7:e6:e9:02:90:a1:ae:c3:
                    92:75:f7:d7:62:81:b1:9a:8d:b6:2e:e8:4f:58:cf:
                    a0:60:45:35:60:f1:1f:c9:c8:b1:18:0e:0e:d5:2f:
                    a1:3d:56:c6:6b:87:52:95:26:55:07:34:6e:17:18:
                    1b:47:fd:08:be:f5:9f:e4:d3:1c:86:c2:34:18:72:
                    f2:e8:9e:56:16:1d:56:a0:4c:7b:04:b4:11:b9:41:
                    56:b0:62:fa:70:35:75:83:42:b2:a4:c3:c2:5a:2f:
                    09:67:ae:14:0c:7d:1e:f4:13:2d:b5:87:6a:05:98:
                    83:10:25:19:39:e7:f0:b0:7c:21:a7:f1:06:18:9e:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9D:09:58:7C:77:8E:39:DD:4C:A8:61:60:12:1E:5E:ED:B6:F5:0D
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/23EE2706098C11ED93D20580F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:a5:2a:5c:3e:33:a3:b5:5a:a6:99:a9:9f:fa:a6:ae:9a:d3:
         14:81:02:a1:89:24:a7:fc:0b:42:46:b6:65:ab:63:e8:7e:d2:
         53:71:1f:98:5c:01:87:11:0e:dd:aa:de:5a:50:17:af:26:8f:
         57:b9:dc:99:69:81:6c:b1:72:1e:7e:89:8e:a2:00:02:af:aa:
         f5:b9:52:db:bb:7e:32:e0:0c:6a:22:b6:fb:de:cf:6e:3c:bd:
         0c:2b:c6:8a:74:fe:e2:0e:34:57:37:78:7d:06:54:4c:c8:55:
         d1:48:58:10:31:66:83:df:e2:de:9c:e8:2c:bd:aa:58:89:35:
         40:0f:7d:49:85:61:28:38:46:79:ea:ed:a2:5d:63:84:d2:19:
         c1:ed:16:5f:b1:94:21:b1:26:6a:f5:85:64:87:bb:c6:b5:b9:
         e3:94:e7:6f:f7:43:02:46:00:06:b9:1b:b6:2f:f1:bb:02:d6:
         c0:41:c2:50:65:d3:7a:a1:9a:85:98:da:1d:89:2d:ed:ff:7d:
         c9:d7:4e:bd:00:f5:32:5a:70:be:d1:cf:e2:73:39:ef:a9:37:
         e1:77:0d:a7:f6:cf:0a:3f:b4:e9:a3:ac:fa:8b:c0:09:9e:e6:
         a4:77:71:54:38:3f:f9:a4:89:f0:39:e7:a0:3f:9f:cd:78:0b:
         3b:cc:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org