Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/1592CE38398E11EC8C213020D8A014CE.roa
File:                     1592CE38398E11EC8C213020D8A014CE.roa (raw, json)
Hash identifier:          fy+lVbA8Piz+QSKwcLCFkhOJA/Yix31ZVroTWyxTaQ4=
Subject key identifier:   12:56:B8:FD:A4:64:8B:2A:4A:A8:77:8F:A2:09:3A:3D:49:51:0E:75
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       CC
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/1592CE38398E11EC8C213020D8A014CE.roa
Signing time:             Sat 30 Oct 2021 14:31:35 +0000
ROA not before:           Sat 30 Oct 2021 14:31:31 +0000
ROA not after:            Thu 30 Oct 2031 14:31:31 +0000
asID:                     142382
IP address blocks:        41.216.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Apr 2022 11:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Oct 30 14:31:31 2021 GMT
            Not After : Oct 30 14:31:31 2031 GMT
        Subject: CN=617d5747-fb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:cd:e4:9c:21:81:c4:a5:7c:6a:7a:9a:14:
                    08:35:b9:1c:62:52:30:72:9b:46:09:62:c1:eb:11:
                    11:d5:34:b7:55:c4:19:23:06:59:02:4f:34:75:7d:
                    aa:15:03:c4:01:a3:a5:ff:3f:36:0a:2f:0a:92:2c:
                    f4:2e:a0:0c:5c:d2:e9:99:2e:e8:79:3c:55:76:d4:
                    c4:18:49:a4:44:20:0c:7b:91:28:f7:c9:7f:73:4c:
                    f3:9d:3b:99:05:f3:34:db:cc:a3:9f:d5:ba:8d:18:
                    cc:bc:06:73:ea:77:4d:95:ee:07:65:70:bc:85:63:
                    67:68:6e:1a:0d:8e:a1:aa:52:b0:74:bc:80:74:ae:
                    22:fc:c5:56:01:59:f8:5d:06:67:23:54:a2:6e:04:
                    6e:32:bd:8c:43:86:35:09:e9:e1:77:34:40:24:78:
                    11:7a:08:5b:e8:51:9b:47:e0:b7:f8:16:2d:9c:bd:
                    b1:9e:8b:e9:a7:38:05:ab:96:fc:3d:0e:a6:5f:6d:
                    fe:23:1a:0c:65:c0:27:9d:80:32:80:3d:e9:83:1a:
                    6f:2f:85:5f:54:fa:aa:2e:8e:6e:2e:99:ef:9e:21:
                    d1:7d:2a:c6:39:a4:9a:b6:11:28:f3:33:22:d9:92:
                    15:81:20:7a:d4:15:aa:63:b5:9e:bb:b8:86:b7:4b:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:56:B8:FD:A4:64:8B:2A:4A:A8:77:8F:A2:09:3A:3D:49:51:0E:75
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/1592CE38398E11EC8C213020D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:db:42:39:f4:0a:c2:d6:73:06:cd:7d:ee:b3:e7:ab:55:0f:
         09:be:41:8e:4e:2b:49:1a:6d:ef:dc:bb:81:fd:43:83:7c:fc:
         4e:5b:d1:a6:22:40:4c:09:ec:3b:d9:41:dc:98:53:d8:dc:65:
         03:8b:1c:26:12:a6:d9:61:4e:4c:59:88:62:83:a4:79:b5:8d:
         cf:51:25:3f:a5:01:22:45:84:f1:35:58:ef:fa:66:09:49:ab:
         b7:8f:18:33:08:ae:1e:1f:52:86:18:0d:c9:bb:26:b4:69:56:
         dd:80:01:4d:d2:e3:7f:b6:9b:06:43:26:ba:19:07:81:ab:b0:
         17:d8:70:28:74:16:30:14:69:37:1a:9c:fc:48:97:e2:4d:9c:
         d8:f1:f2:36:f4:89:fc:d8:9f:78:ce:15:7f:46:4d:4b:e2:f6:
         fd:88:55:d1:9c:21:db:81:6a:06:6a:1e:9a:51:4e:5a:85:37:
         bc:c3:79:60:09:fe:4e:b5:b1:44:fa:19:97:ad:eb:b5:6d:9e:
         2a:e9:39:2d:fe:47:44:c8:ca:47:65:fe:0c:bb:55:2d:fe:73:
         5e:78:25:7f:ec:34:c0:2c:9f:45:68:3d:5a:9f:62:9b:8c:4d:
         5a:0e:58:06:d0:cb:89:09:10:00:46:54:55:a0:1b:e0:38:e3:
         0e:72:67:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org