Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/418B872C63E611EDB9BDA8A1F1222468.roa
File:                     418B872C63E611EDB9BDA8A1F1222468.roa (raw, json)
Hash identifier:          pJhHgYe1vkvJnxdwK8IC8Vda49n8hzKfE29Ywi9pY+g=
Subject key identifier:   93:5B:93:14:C8:67:E4:26:2B:F2:B8:9E:FA:61:11:73:60:5E:82:FF
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       02A5
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/418B872C63E611EDB9BDA8A1F1222468.roa
Signing time:             Mon 14 Nov 2022 06:33:31 +0000
ROA not before:           Mon 14 Nov 2022 06:33:27 +0000
ROA not after:            Sun 14 Nov 2032 06:33:27 +0000
asID:                     211252
IP address blocks:        41.216.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 Nov 2023 11:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Nov 14 06:33:27 2022 GMT
            Not After : Nov 14 06:33:27 2032 GMT
        Subject: CN=6371e13b-d37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:0a:e1:a9:49:e0:25:4f:dd:fb:0f:e2:97:
                    9c:f8:d0:01:31:66:f0:be:9f:2e:0e:dc:c6:0c:87:
                    80:c2:c5:95:4c:9e:00:14:6e:b7:ad:7d:7d:73:5a:
                    28:3a:19:79:13:1f:27:00:14:a3:66:e4:07:14:49:
                    14:7c:04:57:75:b2:68:a3:6f:bc:1a:52:90:26:90:
                    5e:6a:71:68:a7:00:6b:63:54:89:18:a4:4b:a2:a1:
                    0f:4b:d5:ee:38:19:fe:54:54:15:3c:fb:e7:80:48:
                    c8:32:12:a1:a8:af:22:d0:ae:61:1a:a0:fc:f5:e4:
                    36:dd:00:1b:50:f7:f6:00:e2:2f:12:02:6a:e3:43:
                    3a:3e:a0:a8:aa:62:74:c5:43:bb:a0:a2:bb:6a:6e:
                    af:6f:e5:61:ab:09:aa:bd:8f:d1:f6:ab:af:cd:be:
                    47:be:76:e8:7f:b6:57:00:15:b6:a1:09:a4:63:ef:
                    cb:ec:13:26:82:af:35:ca:0a:63:8f:b0:4e:9a:8d:
                    65:49:86:0a:10:9d:ab:3a:90:fb:32:89:12:15:11:
                    36:f3:82:3a:be:98:9a:65:74:99:c0:84:d0:be:95:
                    80:1a:d7:06:3f:f1:bd:8a:b7:be:0b:39:4c:49:6d:
                    6f:2c:a9:c7:36:e0:fa:7c:ae:eb:62:4b:5a:85:0f:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5B:93:14:C8:67:E4:26:2B:F2:B8:9E:FA:61:11:73:60:5E:82:FF
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/418B872C63E611EDB9BDA8A1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:84:9e:76:1c:75:d0:e8:59:87:e8:8a:13:10:47:f1:29:7e:
         8e:b7:7e:bf:31:4b:53:9e:9e:0c:75:b1:ab:84:2c:ce:23:cd:
         d5:c5:8d:ab:73:c9:a7:3c:45:4f:e4:c7:0d:8a:f0:3c:4c:bf:
         7e:0d:75:ba:41:08:06:56:df:ad:12:8d:c0:27:48:2e:08:f1:
         23:23:ff:45:5e:f5:a4:db:a6:be:3a:5d:a4:02:fd:5a:64:a0:
         c6:bf:0b:ec:48:85:4e:ef:00:4a:a6:4a:22:a7:72:b1:39:44:
         60:a0:15:44:8d:0e:8b:a1:ff:4f:17:6e:69:1e:f1:f3:7d:ab:
         53:cf:e9:83:79:eb:c0:67:6b:4d:8d:75:82:d4:aa:cd:27:89:
         db:38:0d:f0:39:ac:a8:ff:5a:f3:a7:14:0e:9f:7d:b4:e0:b4:
         e1:49:65:21:d8:0f:2a:a9:a6:30:6b:33:c3:01:d8:bf:7c:26:
         0f:b7:b8:c2:0f:e0:3d:ed:e8:ee:0f:12:1c:82:28:68:94:1b:
         55:f4:de:2c:8c:64:47:ea:3b:2b:ec:6c:07:a4:e7:24:85:3a:
         a4:f3:7f:fe:11:84:a4:c3:a9:e8:d5:b6:64:77:45:7b:68:4d:
         3b:a8:42:44:c5:0f:6a:31:e1:8c:40:cd:ea:71:cc:cb:1f:25:
         44:1a:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org