Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/E10EA506EB6411EFB7BD5EA7762E951A.roa
File:                     E10EA506EB6411EFB7BD5EA7762E951A.roa (raw, json)
Hash identifier:          TXMAZGuQgBMEJ+JhN6RRWEvi7k9GvwMpZeZ+pxXZj/g=
Subject key identifier:   3E:51:CB:0B:FE:F3:5A:BA:63:78:AD:54:2F:08:55:20:F4:7E:03:E7
Certificate issuer:       /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial:       017F
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/E10EA506EB6411EFB7BD5EA7762E951A.roa
Signing time:             Sat 15 Feb 2025 06:19:58 +0000
ROA not before:           Sat 15 Feb 2025 06:19:54 +0000
ROA not after:            Thu 15 Feb 2035 06:19:54 +0000
asID:                     328866
IP address blocks:        41.92.251.0/24 maxlen: 30
Validation:               Failed, certificate revoked on Mon 17 Feb 2025 12:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367BA6AAF
        Validity
            Not Before: Feb 15 06:19:54 2025 GMT
            Not After : Feb 15 06:19:54 2035 GMT
        Subject: CN=67b0320e-68c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:3d:ca:fa:f3:12:92:6c:6a:35:4e:bb:69:
                    f9:40:ab:82:df:ed:2e:4d:87:eb:14:70:da:13:a3:
                    1f:a0:42:a4:00:ec:60:9f:0e:df:91:da:c0:f4:9f:
                    68:34:39:58:49:16:54:4b:a9:8c:e1:42:87:00:c3:
                    2b:38:01:ec:b7:23:5f:c5:19:3d:60:cf:25:fe:b6:
                    0b:84:c5:f3:6f:12:33:a3:10:75:62:a0:86:27:b9:
                    75:13:5a:b1:d6:06:96:ab:34:51:23:33:5a:56:ce:
                    09:98:92:81:7e:44:0b:c4:93:f3:c4:5a:6c:1c:32:
                    4b:fc:1c:7d:18:dd:b0:c3:be:e7:c6:e8:84:e2:8a:
                    9c:09:63:86:8a:3b:30:1f:cf:8c:20:9d:33:30:94:
                    7e:06:9f:8b:1a:b8:db:24:5f:ed:05:a4:bd:1e:a1:
                    e5:31:b2:c2:76:0f:26:48:fe:ae:08:22:e7:07:09:
                    4a:e0:db:50:e7:5e:c8:36:ce:43:18:d9:bd:b4:7e:
                    81:17:11:9b:b8:91:d4:03:c1:26:08:cb:1f:91:07:
                    1d:41:2c:8c:7b:80:dd:52:78:74:de:33:f4:0a:44:
                    44:b9:ef:83:b4:7f:1e:5b:9a:a4:f6:96:9c:26:15:
                    14:66:00:b8:1f:fb:a5:80:0e:a9:8f:d5:45:37:75:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:CB:0B:FE:F3:5A:BA:63:78:AD:54:2F:08:55:20:F4:7E:03:E7
            X509v3 Authority Key Identifier:
                keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/E10EA506EB6411EFB7BD5EA7762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.92.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e2:a3:28:a8:1b:a8:05:48:14:67:be:b6:65:4f:af:2e:b5:
         3a:db:b7:25:17:9c:c5:39:7a:dd:e1:5f:85:fa:b0:18:4c:d9:
         ba:c6:66:b5:af:6e:a3:35:72:7d:96:b2:1a:33:eb:f7:fb:43:
         f0:b1:01:17:cf:f1:15:db:a4:d9:04:4b:28:18:a2:97:b5:21:
         b6:7b:10:18:e8:97:91:c7:75:64:2c:8a:e7:98:c6:68:bb:75:
         b2:84:cc:bb:36:d2:7a:3c:a2:2c:39:98:76:27:3c:5c:05:d3:
         06:d8:82:2e:21:d3:1c:0b:33:df:aa:a9:92:b7:a1:38:ef:96:
         2c:46:af:36:5a:1a:29:21:e9:c5:16:36:74:d2:39:f2:b0:5f:
         86:e3:06:71:0b:70:76:d6:5c:94:f9:87:08:d2:f7:64:56:b3:
         05:d3:8a:9c:72:c4:9b:58:7c:cc:fa:34:ad:90:dd:9d:ba:1f:
         24:87:74:70:05:c1:33:70:8c:0f:a5:6f:02:16:b1:c5:eb:32:
         3e:4a:de:dc:c9:8c:32:14:a0:4f:46:c5:22:73:1b:c3:63:3a:
         31:cd:e2:01:63:88:75:c4:76:bf:3c:82:88:b4:20:63:d2:d3:
         23:1d:0f:b7:42:13:c3:88:ca:3c:ec:39:23:bb:d6:d0:81:4c:
         bd:19:bc:c4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0JBNkFBRjExMC8GA1UEBRMoNEY0OEU3RUEzMEM5ODlCMTVEMzYzOTM3NzYzNTUz
QTA3RTE2Q0Q4RTAeFw0yNTAyMTUwNjE5NTRaFw0zNTAyMTUwNjE5NTRaMBgxFjAU
BgNVBAMTDTY3YjAzMjBlLTY4YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgnT3K+vMSkmxqNU67aflAq4Lf7S5Nh+sUcNoTox+gQqQA7GCfDt+R2sD0
n2g0OVhJFlRLqYzhQocAwys4Aey3I1/FGT1gzyX+tguExfNvEjOjEHVioIYnuXUT
WrHWBparNFEjM1pWzgmYkoF+RAvEk/PEWmwcMkv8HH0Y3bDDvufG6ITiipwJY4aK
OzAfz4wgnTMwlH4Gn4sauNskX+0FpL0eoeUxssJ2DyZI/q4IIucHCUrg21DnXsg2
zkMY2b20foEXEZu4kdQDwSYIyx+RBx1BLIx7gN1SeHTeM/QKRES574O0fx5bmqT2
lpwmFRRmALgf+6WADqmP1UU3dSaHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPlHL
C/7zWrpjeK1ULwhVIPR+A+cwHwYDVR0jBBgwFoAUT0jn6jDJibFdNjk3djVToH4W
zY4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCQTZBLzBGNEEzN0Y0RUNEOTExRUU5RjczMkM2Nzc3NTQxMkU2L1Qwam42
akRKaWJGZE5qazNkalZUb0g0V3pZNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Qwam42akRKaWJGZE5qazNkalZUb0g0V3pZNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCQTZBLzBGNEEzN0Y0RUNEOTExRUU5RjczMkM2Nzc3
NTQxMkU2L0UxMEVBNTA2RUI2NDExRUZCN0JENUVBNzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApXPswDQYJKoZIhvcNAQEL
BQADggEBAAjioyioG6gFSBRnvrZlT68utTrbtyUXnMU5et3hX4X6sBhM2brGZrWv
bqM1cn2Wshoz6/f7Q/CxARfP8RXbpNkESygYope1IbZ7EBjol5HHdWQsiueYxmi7
dbKEzLs20no8oiw5mHYnPFwF0wbYgi4h0xwLM9+qqZK3oTjvlixGrzZaGikh6cUW
NnTSOfKwX4bjBnELcHbWXJT5hwjS92RWswXTipxyxJtYfMz6NK2Q3Z26HySHdHAF
wTNwjA+lbwIWscXrMj5K3tzJjDIUoE9GxSJzG8NjOjHN4gFjiHXEdr88goi0IGPS
0yMdD7dCE8OIyjzsOSO71tCBTL0ZvMQ=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:21 2025 by rpki-client