Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/09D28CAE7E8611EC876DCA735A40D577.roa
File:                     09D28CAE7E8611EC876DCA735A40D577.roa (raw, json)
Hash identifier:          XNpq5CqmeAYdSaeLKkVbQlua3LhjkEHKY5RG3G/XuQk=
Subject key identifier:   98:A3:15:7E:90:C9:13:32:DF:DB:89:CD:38:14:B5:C5:10:F3:72:E8
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       014D
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/09D28CAE7E8611EC876DCA735A40D577.roa
Signing time:             Wed 26 Jan 2022 08:57:50 +0000
ROA not before:           Wed 26 Jan 2022 08:57:46 +0000
ROA not after:            Mon 26 Jan 2032 08:57:46 +0000
asID:                     327980
IP address blocks:        41.216.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 04 Sep 2022 07:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Jan 26 08:57:46 2022 GMT
            Not After : Jan 26 08:57:46 2032 GMT
        Subject: CN=61f10d0e-8177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:de:2f:ba:77:a6:f8:8b:da:12:8d:d7:8c:
                    6c:39:c7:99:ae:bc:e1:c1:2d:03:10:79:f6:46:02:
                    0d:9c:c1:28:90:06:5a:b8:58:cc:c9:58:12:79:9a:
                    25:0b:5e:d1:d1:d0:d1:e5:3b:77:bc:0d:b2:07:40:
                    d3:28:35:12:35:e7:4d:f3:91:37:83:0a:03:89:32:
                    27:79:73:ce:a6:a0:81:f3:bb:40:2f:24:4f:23:9b:
                    30:b0:4a:33:5e:e0:c1:31:60:3d:6a:44:91:06:d0:
                    af:53:9b:75:d0:93:27:24:34:d7:7e:89:c6:c1:6b:
                    a3:f6:3c:88:77:f3:d6:97:60:eb:e8:be:6c:7a:92:
                    98:9d:c5:af:3a:04:b0:6a:f5:e3:12:ac:34:3c:1b:
                    b3:85:39:0a:92:01:3a:59:47:ef:0a:d5:6b:85:47:
                    67:66:b7:cf:6c:82:3f:ee:54:f5:09:e5:5f:93:07:
                    07:03:8c:1c:85:29:fc:68:f8:da:5e:f2:5d:d6:27:
                    5e:09:0e:d6:80:15:dd:f7:31:50:d1:d6:68:5e:f8:
                    f7:15:3a:dd:c5:31:4a:af:84:23:19:42:b7:9d:be:
                    25:74:51:ba:c8:5e:78:c9:db:2b:ba:36:e3:cf:7a:
                    0c:1a:ca:27:c0:2a:59:f6:d2:af:81:cd:e3:93:23:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A3:15:7E:90:C9:13:32:DF:DB:89:CD:38:14:B5:C5:10:F3:72:E8
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/09D28CAE7E8611EC876DCA735A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:7a:89:64:79:21:1d:eb:64:1e:f5:c6:70:da:3e:50:a5:61:
         17:e4:3d:be:b7:a0:08:e0:9e:8b:01:85:01:60:6b:7e:b6:91:
         b5:9e:f7:36:ba:ce:c5:08:8f:dc:f5:c8:69:01:14:0a:de:63:
         6c:ce:d9:e8:5f:47:ff:fc:d5:fd:bf:1b:d0:5d:8a:59:b0:c3:
         b0:8e:fb:5a:87:00:6b:38:c7:ed:b1:d5:eb:a1:0c:e3:94:f2:
         d9:00:1b:e8:cc:2b:49:26:00:51:68:94:ae:40:50:d7:f9:80:
         21:ee:fb:e0:60:31:8e:3c:ec:93:22:1a:4d:bf:8f:45:ab:ff:
         e4:d7:b2:e3:79:57:f0:c7:fc:ea:96:0e:7d:87:f2:7a:0e:77:
         7b:47:5e:e5:01:c8:c6:8c:70:2a:ae:f8:f5:23:4d:a1:e7:3f:
         af:5c:b9:4c:99:f5:8f:35:06:bf:73:71:38:0d:ee:e9:42:5f:
         e6:5f:92:dc:61:a6:30:e7:22:51:39:97:ff:31:e9:19:52:64:
         f5:c3:a9:a8:0f:b3:6a:b0:7a:88:fd:38:02:f8:20:04:fe:e4:
         8c:9e:76:41:ee:3e:1a:c3:52:fa:be:4a:e5:15:5f:f1:27:ce:
         61:b6:62:a6:b3:b9:71:5b:6c:bf:74:e7:0a:a4:98:d5:95:97:
         38:73:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org