Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/4E85C19A09B011ECBFEFE267D8A014CE.roa
File:                     4E85C19A09B011ECBFEFE267D8A014CE.roa (raw, json)
Hash identifier:          V4FhcQTEH4bi9ZTHNMMgcDowvoHC3RaralIggE/tfNg=
Subject key identifier:   A2:5A:BB:71:80:A6:93:70:A0:AC:50:65:D0:C2:65:88:89:37:61:9F
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       6D
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/4E85C19A09B011ECBFEFE267D8A014CE.roa
Signing time:             Mon 30 Aug 2021 16:35:38 +0000
ROA not before:           Mon 30 Aug 2021 16:35:32 +0000
ROA not after:            Thu 30 Oct 2031 16:35:32 +0000
asID:                     395092
IP address blocks:        41.216.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 31 Jan 2022 12:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Aug 30 16:35:32 2021 GMT
            Not After : Oct 30 16:35:32 2031 GMT
        Subject: CN=612d08da-66e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1f:98:1e:f0:9a:74:a5:5a:39:bb:2e:5d:4f:
                    ef:89:26:10:20:45:85:fa:ba:e7:2d:ac:bc:36:ae:
                    24:2a:e1:94:13:0b:58:13:ab:85:c4:9e:0e:35:61:
                    81:83:2e:ca:2a:73:6a:52:9c:20:ff:49:03:63:db:
                    9c:a5:eb:f1:ec:2d:b3:bb:a8:4f:8d:c6:49:9d:dc:
                    17:39:fd:24:3e:e6:1b:f7:13:93:e1:bc:69:36:a4:
                    70:92:ed:8a:0d:e7:e8:be:8c:f6:a0:2f:cd:7d:6a:
                    fd:df:96:4d:32:55:fb:f2:7e:d1:fc:67:13:db:aa:
                    c4:3e:4f:c4:d2:4a:e6:f7:57:23:b0:13:29:f2:55:
                    31:f5:d4:fa:db:df:a0:e6:d3:e1:33:15:8f:5d:f3:
                    e6:a5:49:4f:73:73:78:21:22:ac:7d:32:0a:8e:85:
                    20:f6:1d:ae:0c:71:76:3d:ee:b8:c0:e6:a8:55:00:
                    40:3a:59:4d:4d:0b:85:9f:bb:c9:84:7a:49:eb:b9:
                    7d:4b:11:3b:59:e6:fd:80:5b:0e:13:8b:9d:a7:08:
                    da:e7:e7:f5:65:62:75:84:fe:fb:f5:93:04:2f:75:
                    2e:09:bd:f7:e5:2b:e8:52:86:4c:cf:6d:c5:86:a7:
                    ef:f1:ad:b7:91:8c:85:49:c9:9b:f9:e1:2a:3d:ba:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5A:BB:71:80:A6:93:70:A0:AC:50:65:D0:C2:65:88:89:37:61:9F
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/4E85C19A09B011ECBFEFE267D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:c3:0e:06:67:34:92:e3:85:f0:21:8e:32:75:6b:03:fe:6a:
         07:51:47:95:10:ae:14:39:a1:c6:b3:bf:8d:27:a7:fe:14:c4:
         c5:11:b5:f5:96:e0:b0:1f:fd:a1:ca:7d:71:5b:1f:84:1b:79:
         55:71:d9:7e:a4:bf:34:fd:ed:5f:66:d1:4a:55:e6:40:a2:22:
         11:ef:a8:05:b4:27:a9:69:3a:bd:ca:be:3e:b5:90:ca:cf:c5:
         e1:af:0f:89:6d:c4:8b:80:54:ca:e4:cb:b0:99:56:a9:33:f4:
         d9:d8:46:a1:da:d8:68:fa:d4:8e:5d:56:95:7d:fc:3e:cb:b6:
         65:d3:b7:52:e5:41:68:fe:ae:43:21:70:f6:86:fa:c7:a6:eb:
         a5:08:91:60:3f:a9:40:ce:7a:c0:ee:2c:cd:f4:4a:2f:38:8b:
         53:80:ab:4c:a9:13:bb:84:4e:74:fd:a2:ea:9c:2a:c9:d4:64:
         f2:76:56:7b:e9:c5:0f:b6:92:85:27:87:30:64:41:89:cb:c8:
         76:89:33:13:63:f8:82:26:16:13:95:a4:42:09:a5:a8:1b:51:
         da:21:c8:b7:17:2d:37:0e:ee:92:78:f7:bc:fd:fc:3c:9a:b7:
         57:80:f0:5b:69:fe:bd:43:c5:1a:6a:53:cc:be:7c:e5:f3:62:
         e8:b2:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org