Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8E10F13A881411EC9844B1825A40D577.roa
File:                     8E10F13A881411EC9844B1825A40D577.roa (raw, json)
Hash identifier:          2KBPr/DxeBvTmnWxrNXAfWgqdU1TwP7lQrDmshljBUQ=
Subject key identifier:   CE:89:09:0D:A4:6C:18:70:A2:A5:6D:30:A4:22:11:FE:BB:6D:77:B7
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       0179
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8E10F13A881411EC9844B1825A40D577.roa
Signing time:             Mon 07 Feb 2022 12:50:41 +0000
ROA not before:           Mon 07 Feb 2022 12:50:37 +0000
ROA not after:            Sat 07 Feb 2032 12:50:37 +0000
asID:                     400377
IP address blocks:        41.216.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Apr 2022 11:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Feb  7 12:50:37 2022 GMT
            Not After : Feb  7 12:50:37 2032 GMT
        Subject: CN=620115a1-9439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:e5:23:ac:60:be:85:3c:06:6a:18:ae:b6:
                    42:27:2f:b4:7c:db:70:a4:3b:a4:ac:d6:33:57:ba:
                    05:1f:1d:46:9a:1a:0f:6e:5b:e2:e7:6c:67:04:86:
                    e9:1e:9d:d7:1f:50:9b:d4:f8:b8:39:71:ab:01:5f:
                    5a:cd:2c:4b:4c:08:b7:57:cc:88:48:bc:fb:87:12:
                    2d:14:ff:83:a1:de:a3:bb:95:ad:d2:95:85:5c:cf:
                    85:93:5b:7d:dc:2d:95:8b:e3:38:7f:5b:62:38:ae:
                    a0:b8:0d:1c:c8:d9:da:d3:80:c7:47:b1:a4:f9:d6:
                    66:0a:28:d1:08:f3:03:39:cf:35:ba:4a:1f:0a:f3:
                    eb:e9:61:0f:db:a8:ea:cb:51:47:47:9e:a7:87:24:
                    db:bd:ed:b4:16:df:2b:33:0a:f6:17:5f:3a:64:c2:
                    42:49:51:22:9d:37:3f:a5:e9:49:16:c2:17:98:3c:
                    68:ff:41:76:67:dd:1e:78:bf:71:aa:c4:20:e4:93:
                    5e:2a:1d:71:21:c6:5a:87:85:31:0d:3f:d5:46:a7:
                    8f:24:00:90:92:06:ab:bb:4c:40:48:a8:cd:8a:55:
                    56:8c:b1:fc:a8:bb:47:42:04:5b:83:28:39:b0:89:
                    b1:44:d4:b2:7b:af:3c:d7:d1:85:79:ed:1e:c4:9b:
                    23:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:89:09:0D:A4:6C:18:70:A2:A5:6D:30:A4:22:11:FE:BB:6D:77:B7
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8E10F13A881411EC9844B1825A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:1e:a7:4b:cf:82:bb:61:c0:ca:d8:27:59:20:7b:c1:53:7b:
         9d:d6:22:86:76:a6:69:a2:32:cf:0b:8d:23:2a:13:6e:21:35:
         be:11:86:49:92:48:fb:07:5f:97:11:82:c9:11:6b:d7:4b:5b:
         35:b6:77:55:90:9e:b1:8b:da:5a:57:93:5a:9e:c4:f4:4c:e0:
         9a:b0:e3:42:f6:88:12:88:ea:ca:74:f7:b8:bb:1e:5a:31:99:
         c1:d8:09:e5:2d:2e:28:9d:8f:2c:c8:c9:6c:9a:fc:2d:67:06:
         e3:bf:7d:f9:ac:33:0f:20:7e:d1:f9:68:63:f4:6a:a4:65:42:
         df:3f:56:36:cd:ac:12:fb:ca:fc:9e:38:50:97:f0:1e:4e:b6:
         7b:e6:c9:f0:65:d4:87:48:b1:37:39:7d:3c:80:d6:8b:e0:cd:
         3c:ba:50:0a:68:fd:04:0c:73:5e:3e:9f:64:c2:85:ce:e4:72:
         d9:2d:dc:66:87:f9:5c:56:a0:c2:34:ea:c0:01:17:7e:cb:fd:
         2b:5a:fd:57:f5:6d:b1:70:d2:d2:92:04:55:a2:69:b6:43:d6:
         bd:6e:10:92:31:08:fb:d4:85:0c:d6:90:37:c2:50:6d:92:c3:
         e9:6c:06:83:67:e3:89:99:ec:da:28:aa:5a:d9:cc:ea:16:e3:
         cd:30:9c:a5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yMjAyMDcxMjUwMzdaFw0zMjAyMDcxMjUwMzdaMBgxFjAU
BgNVBAMMDTYyMDExNWExLTk0MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLUOUjrGC+hTwGahiutkInL7R823CkO6Ss1jNXugUfHUaaGg9uW+LnbGcE
hukendcfUJvU+Lg5casBX1rNLEtMCLdXzIhIvPuHEi0U/4Oh3qO7la3SlYVcz4WT
W33cLZWL4zh/W2I4rqC4DRzI2drTgMdHsaT51mYKKNEI8wM5zzW6Sh8K8+vpYQ/b
qOrLUUdHnqeHJNu97bQW3yszCvYXXzpkwkJJUSKdNz+l6UkWwheYPGj/QXZn3R54
v3GqxCDkk14qHXEhxlqHhTENP9VGp48kAJCSBqu7TEBIqM2KVVaMsfyou0dCBFuD
KDmwibFE1LJ7rzzX0YV57R7EmyMjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUzokJ
DaRsGHCipW0wpCIR/rttd7cwHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4
QUVBMjI4LzhFMTBGMTNBODgxNDExRUM5ODQ0QjE4MjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2LYwDQYJKoZIhvcNAQEL
BQADggEBAE0ep0vPgrthwMrYJ1kge8FTe53WIoZ2pmmiMs8LjSMqE24hNb4RhkmS
SPsHX5cRgskRa9dLWzW2d1WQnrGL2lpXk1qexPRM4Jqw40L2iBKI6sp097i7Hlox
mcHYCeUtLiidjyzIyWya/C1nBuO/ffmsMw8gftH5aGP0aqRlQt8/VjbNrBL7yvye
OFCX8B5OtnvmyfBl1IdIsTc5fTyA1ovgzTy6UApo/QQMc14+n2TChc7kctkt3GaH
+VxWoMI06sABF37L/Sta/Vf1bbFw0tKSBFWiabZD1r1uEJIxCPvUhQzWkDfCUG2S
w+lsBoNn44mZ7NooqlrZzOoW480wnKU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org