Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9511275222A611ED9C6BDCCAF1222468.roa
File:                     9511275222A611ED9C6BDCCAF1222468.roa (raw, json)
Hash identifier:          uJZSB3lCNDV3oLCJroYNGh26DpQ79Vf34e0eC0+y1hc=
Subject key identifier:   EE:42:68:37:B1:35:04:A1:C1:E2:60:8A:F6:9C:BF:48:BD:93:9A:EF
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       05B2
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9511275222A611ED9C6BDCCAF1222468.roa
Signing time:             Tue 23 Aug 2022 05:43:58 +0000
ROA not before:           Tue 23 Aug 2022 05:43:53 +0000
ROA not after:            Wed 11 Aug 2032 05:43:53 +0000
asID:                     996
IP address blocks:        41.180.176.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Aug 23 05:43:53 2022 GMT
            Not After : Aug 11 05:43:53 2032 GMT
        Subject: CN=6304691e-d17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:68:b8:df:9b:19:cb:e8:48:c9:7c:43:90:6d:
                    1e:54:0d:d8:ab:1c:be:32:34:ce:e6:ef:8c:aa:0c:
                    e5:e5:ea:1b:f0:d1:7e:37:d9:3f:f7:10:12:9e:d5:
                    51:ea:13:76:c4:ed:89:28:49:89:bf:e7:26:ff:9b:
                    d6:2b:64:b1:65:87:c4:fd:5e:29:83:5d:e8:6b:85:
                    af:1e:a7:59:00:92:28:a6:a8:af:55:65:86:3a:fc:
                    9a:1f:d2:60:4a:fa:a6:0e:c0:cc:a7:ab:5f:32:a5:
                    01:d9:c2:c8:ec:0a:81:65:3f:3e:5a:fb:2e:bb:6c:
                    49:6d:8f:61:7d:13:1a:8d:a0:41:b8:f6:93:4c:ab:
                    4f:ce:b8:2d:61:09:ef:4f:98:66:86:77:27:e9:14:
                    72:af:23:15:66:9f:cc:6e:e3:73:92:c0:2b:55:bd:
                    ee:13:d5:6e:83:d8:19:7f:71:65:ba:c0:ed:4b:17:
                    b2:c6:28:a7:df:ed:b8:36:30:d7:bb:a8:82:df:45:
                    10:48:4a:10:77:41:3c:67:f8:0f:3f:88:29:de:50:
                    6a:54:ac:5e:42:ac:49:c0:6c:24:5f:41:1d:ec:1c:
                    a3:19:52:29:1b:1c:d4:5e:e6:41:30:52:a7:af:8c:
                    6a:14:fd:ba:84:94:3a:fa:8b:63:0e:b5:5c:aa:de:
                    e5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:42:68:37:B1:35:04:A1:C1:E2:60:8A:F6:9C:BF:48:BD:93:9A:EF
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9511275222A611ED9C6BDCCAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:ea:a4:63:51:cb:f0:90:1b:6f:bb:63:1a:59:5b:b7:04:3c:
         be:b0:70:89:e3:c0:88:81:dc:a3:e5:f6:ae:68:92:16:38:1a:
         a6:f5:d7:4d:0d:91:ea:29:a5:18:56:56:8a:e7:1e:e4:62:0c:
         79:d7:b2:73:05:3b:f3:b8:0c:12:fd:e2:5e:9f:24:d2:63:8a:
         1a:85:69:cb:7b:ea:f3:92:a5:4a:a5:98:6a:0b:a8:d0:29:0c:
         c9:99:8a:54:34:6e:a9:b7:42:05:1c:c6:21:74:8c:1c:19:b8:
         69:15:c4:67:99:32:dc:19:29:b2:89:58:8c:ce:03:25:fd:30:
         90:dc:9f:08:77:5e:b6:19:3f:12:99:0f:eb:44:7c:b6:6a:71:
         70:cc:d7:5b:b8:d1:79:23:97:54:72:dc:6f:92:0b:14:84:14:
         e2:9b:ba:f6:84:a4:04:4e:29:70:de:01:c0:4a:5b:22:07:f0:
         5b:90:1d:ff:8b:5a:cf:4e:03:82:6b:17:11:b0:ff:fe:43:7e:
         58:59:c9:69:5a:e7:f6:6b:a6:28:40:9d:b4:23:25:00:73:99:
         e9:e6:b8:1f:4d:42:c3:7e:9a:c3:aa:f0:81:4c:80:01:d8:b7:
         bd:6f:59:ed:be:e9:27:b3:5a:a6:a8:85:ed:5d:6f:07:7d:13:
         94:0a:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org