Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/9C43F042836711ECB53DDFC55A40D577.roa
File:                     9C43F042836711ECB53DDFC55A40D577.roa (raw, json)
Hash identifier:          +JN9X3kmhhYnPAeqYTEx0ba2K0BsiEw0TXXAN2oeTU4=
Subject key identifier:   90:FD:77:78:57:54:BB:29:0F:A4:B2:61:B8:85:D6:9C:A8:6E:0E:FD
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       016D
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/9C43F042836711ECB53DDFC55A40D577.roa
Signing time:             Tue 01 Feb 2022 14:02:37 +0000
ROA not before:           Tue 01 Feb 2022 14:02:32 +0000
ROA not after:            Sun 01 Feb 2032 14:02:32 +0000
asID:                     24961
IP address blocks:        41.216.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Jul 2022 07:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Feb  1 14:02:32 2022 GMT
            Not After : Feb  1 14:02:32 2032 GMT
        Subject: CN=61f93d7d-5a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e2:f4:d7:90:0d:f7:d5:3e:c2:54:1b:8d:d8:
                    64:f1:f3:a0:a9:14:b9:8f:b8:d4:eb:a2:21:ab:b3:
                    e7:fa:9e:4f:4e:a7:59:d3:97:c2:af:87:78:05:2b:
                    f9:99:a7:ab:71:d3:89:59:70:7c:52:12:0d:af:5e:
                    60:12:cb:88:b6:1d:4e:57:d6:c1:bd:b0:da:95:06:
                    df:b4:dd:66:4b:aa:de:73:52:66:24:9b:a2:51:b7:
                    39:32:cb:f6:03:db:2a:24:77:16:ed:4b:5e:21:7d:
                    59:6c:b8:33:c8:7e:bd:d2:2e:23:16:14:9e:45:9f:
                    61:1e:74:56:fc:0a:83:ab:a2:52:31:58:c2:a3:72:
                    3b:f0:fb:9d:49:49:18:71:70:58:9b:6f:8e:0c:3a:
                    72:cf:8b:5f:4a:87:64:73:cf:d0:60:91:1a:36:9d:
                    b6:07:77:d0:81:45:69:3b:93:64:c5:13:c9:d5:d9:
                    ef:53:64:41:c1:42:29:a5:74:2e:b0:45:6e:1b:97:
                    1c:4c:cb:a6:f6:59:3e:3a:3c:d5:99:d0:4d:25:db:
                    61:30:c7:55:30:a3:f6:4f:12:30:4b:d1:9e:cf:c3:
                    ee:76:fc:37:68:3c:44:19:d7:6b:1c:91:52:86:7d:
                    5a:a7:4e:f4:5f:3b:03:6b:14:5c:ca:a8:5e:f9:49:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FD:77:78:57:54:BB:29:0F:A4:B2:61:B8:85:D6:9C:A8:6E:0E:FD
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/9C43F042836711ECB53DDFC55A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:bb:82:27:50:e3:18:9d:b8:c1:59:cc:b0:06:29:b6:53:5b:
         5c:4c:d0:4c:57:69:40:dc:8b:9f:a3:c4:b4:0f:87:fe:fd:96:
         5a:45:b4:6b:66:e4:94:bf:3b:d4:07:1a:a9:a5:6a:1e:5c:ea:
         10:2d:4b:5a:f5:21:d7:ae:f9:6c:b4:3a:6d:e7:6b:7e:62:4b:
         ce:07:9a:06:3e:95:d7:50:03:06:50:84:1f:b0:c7:c1:75:79:
         f7:6a:09:59:81:7f:3e:ae:72:db:75:7a:b6:6a:a0:96:23:3c:
         ab:d8:ef:d2:8a:5b:9d:ce:65:99:5d:be:20:13:07:23:97:89:
         ed:34:29:6a:56:f8:c1:63:c2:5d:d2:94:72:8e:71:a0:c0:26:
         5b:b6:9b:6f:08:6a:b7:26:51:e3:08:07:6b:6c:d4:45:d4:0a:
         c7:eb:05:5b:6a:cf:9b:be:f1:65:de:86:c4:55:af:d4:d9:89:
         39:b3:ad:ce:99:04:8e:f5:6e:86:e6:04:ee:1c:2f:6b:9f:96:
         3f:bd:d6:21:21:8a:21:50:d7:ba:82:8d:86:04:5b:16:ec:8c:
         db:46:74:77:5a:67:84:de:bd:69:75:f4:8b:14:2b:91:d9:75:
         fc:28:98:d2:c4:2d:c7:9a:b6:1f:f5:3f:fa:3e:5e:21:7f:e9:
         1e:35:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org