Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/932B2E9E541411EC94A36840D8A014CE.roa
File:                     932B2E9E541411EC94A36840D8A014CE.roa (raw, json)
Hash identifier:          O2FglVjerKPQ0te80CTQr1wz1o6S2hzuQe8sCIa/lnc=
Subject key identifier:   E3:D2:D3:DA:4B:DF:0A:91:5F:6F:51:DE:74:0C:B2:9E:0D:35:C7:1F
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       F6
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/932B2E9E541411EC94A36840D8A014CE.roa
Signing time:             Fri 03 Dec 2021 08:39:49 +0000
ROA not before:           Fri 03 Dec 2021 08:39:44 +0000
ROA not after:            Wed 03 Dec 2031 08:39:44 +0000
asID:                     210537
IP address blocks:        41.216.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Dec  3 08:39:44 2021 GMT
            Not After : Dec  3 08:39:44 2031 GMT
        Subject: CN=61a9d7d5-11b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:fc:ef:99:de:bc:fe:cb:d9:99:86:85:9a:
                    9a:2b:c0:a6:65:79:eb:15:11:58:c6:e7:31:6d:16:
                    d8:17:79:d3:98:c6:7a:87:f7:49:fc:45:69:df:20:
                    35:82:ef:21:61:d1:3e:b9:9f:e5:7e:f5:a1:d8:1a:
                    5d:b1:d2:85:e6:f5:64:65:e6:9c:cc:33:3d:02:de:
                    9a:e6:a0:c0:7c:94:6a:fe:3c:c7:f9:b1:59:29:1b:
                    06:f4:8f:dd:83:e9:b5:2a:1b:77:aa:ac:92:27:b8:
                    2e:fd:36:23:cf:e5:ef:9f:dc:81:4c:88:c3:ad:dc:
                    ed:dc:28:42:e4:a0:36:91:fb:7b:be:70:c3:71:99:
                    31:85:15:b4:b3:bb:43:fa:b4:4f:78:de:ac:fb:e2:
                    7c:0c:4b:12:9e:04:06:7a:c2:5a:87:cc:6e:c2:7f:
                    1f:60:7b:2c:34:94:bb:6c:04:15:d5:3c:a1:1e:39:
                    99:84:22:d1:29:b6:47:81:ed:ba:9a:12:84:37:f6:
                    f8:9d:07:47:6c:17:b0:58:22:01:47:95:25:ce:cd:
                    b4:11:a1:de:ce:4b:29:0b:a1:88:1d:b9:c7:ae:0f:
                    3c:d0:c6:38:02:45:db:0f:fa:cf:81:a5:22:f0:72:
                    4b:c1:0c:c1:3e:91:25:10:8f:b3:08:9e:95:94:29:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D2:D3:DA:4B:DF:0A:91:5F:6F:51:DE:74:0C:B2:9E:0D:35:C7:1F
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/932B2E9E541411EC94A36840D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2e:dd:89:cf:71:de:d4:03:f2:79:8f:95:40:85:7a:90:26:
         b3:30:99:8d:94:c2:36:8d:f5:0c:92:11:79:30:f5:21:83:ce:
         3b:13:b4:1d:3c:fa:1c:99:8e:96:8f:17:2b:36:45:aa:85:b5:
         a0:fe:16:69:4e:f3:a8:a7:de:7d:2d:39:f7:62:2d:38:f3:2a:
         76:ad:d1:cc:e2:71:2e:42:f1:0f:9a:49:c8:97:a4:69:2f:21:
         f2:c9:d3:44:02:bd:a5:fa:99:84:d6:2e:bd:6d:c1:bc:5c:4b:
         53:4b:2d:eb:ac:d5:8d:e2:35:04:17:c4:d2:37:46:32:e5:09:
         6f:47:a1:3c:32:6d:34:82:12:91:ba:d7:4a:c3:89:ba:9b:e8:
         25:f2:cc:ea:f5:96:77:c8:fa:8e:f2:54:d0:76:e4:ed:e8:0d:
         f3:ef:9c:a1:a7:66:4b:09:00:77:5f:49:05:4a:91:4e:9d:c2:
         58:a2:16:ba:bf:11:a7:1e:6f:b2:3e:63:13:cf:05:60:88:0c:
         27:eb:8a:d0:2a:ca:dc:2e:7b:65:12:b0:d4:3e:aa:bf:91:a4:
         f6:f3:ee:a8:ea:35:7a:25:c6:7b:f7:6b:93:26:c6:47:34:4a:
         94:8c:7c:34:f5:e4:8c:69:bd:92:ae:12:69:94:e2:50:0b:4d:
         10:3a:ef:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org