Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/2AB3E1684B8A11EC82068802D8A014CE.roa
File:                     2AB3E1684B8A11EC82068802D8A014CE.roa (raw, json)
Hash identifier:          fnL1omWeT+0d/3oeISey3no5UeM15HivXIVpG2e9MIM=
Subject key identifier:   F6:59:7C:C7:1B:C8:5C:35:FB:31:3B:87:1F:B8:0F:9E:94:FC:93:12
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       E8
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/2AB3E1684B8A11EC82068802D8A014CE.roa
Signing time:             Mon 22 Nov 2021 11:48:54 +0000
ROA not before:           Mon 22 Nov 2021 11:48:49 +0000
ROA not after:            Sat 22 Nov 2031 11:48:49 +0000
asID:                     211138
IP address blocks:        41.216.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Nov 22 11:48:49 2021 GMT
            Not After : Nov 22 11:48:49 2031 GMT
        Subject: CN=619b83a6-2d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a6:d1:c9:fe:c5:a2:6d:e7:00:1c:8f:94:ee:
                    e0:a5:65:06:87:e9:4f:3b:b3:fc:66:8c:84:f0:1a:
                    d9:51:01:c4:0a:db:48:21:ff:62:0d:1a:a4:95:aa:
                    8b:86:be:39:e4:fb:64:d7:43:8c:e8:6d:de:00:e3:
                    38:a7:e8:29:1c:09:89:e5:57:48:29:d0:9e:6e:02:
                    3e:2d:9c:15:0f:00:51:9d:38:b6:17:cc:93:40:3f:
                    83:62:6f:cd:32:01:e9:1f:cf:ba:f5:28:0b:bd:1e:
                    7f:b0:7c:65:c0:d6:97:25:40:5a:4d:a6:9e:c8:2c:
                    b6:37:b8:2a:34:21:ad:e8:0c:b6:09:2a:cf:9c:b7:
                    45:f2:97:b2:c5:e2:65:c2:df:73:88:37:54:32:ad:
                    cf:c4:b7:f8:10:0f:6d:1d:84:d9:70:02:a4:ad:cd:
                    e2:ca:da:84:70:07:2b:cb:1f:67:82:84:23:9f:8c:
                    91:ca:e0:ab:43:e1:aa:a2:9e:2d:f2:28:88:11:9c:
                    e0:d6:4f:6c:b2:d8:f7:1e:d1:c1:ed:6c:51:30:19:
                    c8:9b:a7:d6:45:21:2e:55:1f:d1:0e:c1:7e:db:20:
                    c6:f1:b5:da:09:66:4d:a9:28:95:07:47:fd:34:af:
                    c6:27:b7:4d:28:6f:f7:66:d9:76:c7:4c:aa:26:a2:
                    00:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:59:7C:C7:1B:C8:5C:35:FB:31:3B:87:1F:B8:0F:9E:94:FC:93:12
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/2AB3E1684B8A11EC82068802D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:79:b0:dc:09:bd:7d:0e:57:2b:c3:60:bd:1f:af:4b:ee:7c:
         37:ef:ea:aa:f8:ec:04:49:b1:61:d5:bf:96:0a:53:9a:80:e1:
         7a:94:4b:11:86:a4:f5:d5:64:56:30:a3:c2:02:89:ec:e3:d0:
         96:eb:38:ba:34:29:6e:90:19:ae:dd:3d:43:f5:cd:10:f7:28:
         fa:11:3e:38:07:d6:a5:8b:0b:7d:5d:4b:11:cb:23:eb:55:38:
         09:ad:49:19:75:fb:b0:07:cf:17:fd:35:f3:eb:70:a2:39:47:
         8e:71:b8:fb:c9:79:16:5d:48:78:8d:c7:15:5d:31:44:b3:53:
         09:1e:79:9a:13:60:d6:48:8f:50:25:58:d9:36:e2:1f:b9:00:
         35:c6:fd:3e:32:2b:ae:29:79:f1:16:1c:ef:d1:4d:13:a0:47:
         d9:af:a2:13:f6:cc:59:29:df:15:42:5b:37:3f:f5:1e:2d:7e:
         c2:ed:58:2a:6f:a8:8e:70:52:e2:e2:df:06:da:2c:d7:d4:b4:
         33:42:32:7f:e2:b6:e8:2b:8d:ac:17:10:25:a3:82:3f:7e:97:
         e4:06:e7:87:08:8d:71:17:54:fc:2c:aa:aa:d1:b8:5e:01:26:
         f0:8e:3c:4d:09:67:66:a2:77:8c:ec:36:98:7f:17:14:fb:07:
         d1:1d:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org