Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/F6C7AC24025811EC9B44F95CD8A014CE.roa
File:                     F6C7AC24025811EC9B44F95CD8A014CE.roa (raw, json)
Hash identifier:          NdPQFG0Ae5gj2RKbYIIxhT7B7dwFYVEm+bhbMLxHQYQ=
Subject key identifier:   D9:21:9D:3D:C0:55:37:CD:EA:5C:8E:06:95:01:93:8A:38:6F:CA:A4
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       5F
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/F6C7AC24025811EC9B44F95CD8A014CE.roa
Signing time:             Sat 21 Aug 2021 08:23:42 +0000
ROA not before:           Sat 21 Aug 2021 08:23:36 +0000
ROA not after:            Thu 21 Aug 2031 08:23:36 +0000
asID:                     201814
IP address blocks:        41.216.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 31 Jan 2022 12:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Aug 21 08:23:36 2021 GMT
            Not After : Aug 21 08:23:36 2031 GMT
        Subject: CN=6120b80e-650c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:8f:9d:fb:90:41:3a:d6:9e:a7:ee:57:60:
                    0d:c1:01:d1:8c:0a:65:64:9f:6b:47:0f:a5:27:28:
                    0a:64:e8:d5:e0:3d:08:3d:53:5e:be:39:a5:ed:07:
                    96:7e:94:df:ea:b5:0f:db:8a:33:af:1e:88:8b:53:
                    02:4d:e0:34:7d:ec:5a:a5:df:94:f3:24:7f:ef:fe:
                    1f:55:8a:23:20:63:25:eb:67:35:a3:87:14:31:1a:
                    1b:0c:d5:c5:2d:9c:94:e7:d2:83:18:fd:59:87:03:
                    64:c1:45:df:bc:31:f8:0e:b2:a5:3a:cf:69:5c:79:
                    38:08:e8:39:34:c1:49:a1:46:65:4c:c4:be:15:09:
                    a0:b3:c8:d1:82:2a:d6:1d:1e:33:28:7a:97:5a:fe:
                    60:43:17:35:be:fb:ac:ef:bf:30:57:fc:4b:fd:38:
                    80:8f:c6:0a:b2:8f:33:1f:db:ff:a6:65:01:0b:4d:
                    44:3a:ad:24:ed:c2:4d:bf:5a:77:de:e8:45:63:c3:
                    0f:82:d1:ec:33:a4:2e:56:a9:61:59:79:c4:cb:64:
                    0e:b9:34:8b:2e:95:48:bd:be:17:f8:5b:a8:f8:86:
                    1c:9b:9a:03:2b:ad:6b:a1:82:66:cb:49:5c:a3:6d:
                    e5:ed:16:73:e7:5a:85:92:83:c4:d6:f5:91:2b:50:
                    2b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:21:9D:3D:C0:55:37:CD:EA:5C:8E:06:95:01:93:8A:38:6F:CA:A4
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/F6C7AC24025811EC9B44F95CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:51:2f:9b:71:99:07:fb:4a:18:eb:b9:0a:6e:8e:98:ac:
         b7:12:24:b4:ff:a7:46:1f:90:28:bd:ba:da:b9:e1:9d:73:77:
         fc:af:57:7e:9d:e6:af:0c:a6:6e:c1:53:62:c5:e5:1f:67:42:
         1e:7b:74:27:52:a2:a6:18:3a:05:aa:4f:e6:ef:db:5e:22:6f:
         0c:6c:e6:ab:ab:dc:ea:67:b8:ca:7a:3b:ac:f4:e0:76:0e:d4:
         8b:c9:d7:c8:2f:01:39:3e:97:12:ff:15:0a:15:b0:a8:c7:4d:
         4e:cc:8d:60:40:1c:f2:67:0b:f0:fa:19:03:09:73:b1:c2:3f:
         8d:25:89:29:81:fe:01:0c:3c:09:a4:72:18:72:51:db:da:77:
         2f:86:72:8c:5d:23:a3:f4:9b:33:df:37:13:10:c9:54:15:bf:
         d0:d9:4b:3b:ff:7c:b4:ce:a5:d0:bc:d5:38:cd:aa:5b:2c:46:
         fb:79:a6:fb:27:87:ba:94:58:5c:96:18:04:c2:0d:69:bf:11:
         03:cc:4d:7f:e7:db:7a:b6:5e:9c:80:1d:f5:8b:21:97:ee:59:
         17:42:42:1a:15:9c:cf:7e:01:8c:0c:dc:07:1b:cc:37:47:87:
         b0:fd:8c:00:66:1d:d1:3f:fa:9d:79:9f:53:c8:92:a8:d2:a5:
         1a:bc:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org