Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/E88750FC08D711ED93E05EC0F1222468.roa
File:                     E88750FC08D711ED93E05EC0F1222468.roa (raw, json)
Hash identifier:          3kkfTfzy4cSvUA7nU5Ij1/GW1tCaLCA8blVtDJnyQeo=
Subject key identifier:   67:BD:DD:63:07:28:2E:68:72:8F:D7:29:9A:8F:ED:75:C8:69:AC:06
Certificate issuer:       /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial:       59
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/E88750FC08D711ED93E05EC0F1222468.roa
Signing time:             Thu 21 Jul 2022 09:31:33 +0000
ROA not before:           Fri 22 Jul 2022 09:31:29 +0000
ROA not after:            Wed 22 Jul 2026 09:31:29 +0000
asID:                     29286
IP address blocks:        80.250.33.0/24 maxlen: 24
                          80.250.34.0/24 maxlen: 24
                          80.250.35.0/24 maxlen: 24
                          80.250.36.0/24 maxlen: 24
                          80.250.37.0/24 maxlen: 24
                          80.250.38.0/24 maxlen: 24
                          80.250.39.0/24 maxlen: 24
                          80.250.40.0/24 maxlen: 24
                          80.250.41.0/24 maxlen: 24
                          80.250.42.0/24 maxlen: 24
                          80.250.43.0/24 maxlen: 24
                          80.250.44.0/24 maxlen: 24
                          80.250.45.0/24 maxlen: 24
                          80.250.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Jun 2023 06:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
        Validity
            Not Before: Jul 22 09:31:29 2022 GMT
            Not After : Jul 22 09:31:29 2026 GMT
        Subject: CN=62d91cf5-f76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:38:66:08:2f:35:27:89:3f:8e:b9:fa:ce:
                    44:6f:b2:2c:dd:8e:4b:94:ba:f4:84:e5:51:2c:02:
                    1e:c3:5a:2a:39:32:5c:b6:36:88:eb:5a:b0:b9:31:
                    c6:63:92:02:8d:b0:81:e7:0b:ef:7e:06:fe:9a:0d:
                    ab:da:b7:9a:3a:67:22:92:7c:88:0a:0a:71:ed:5f:
                    30:65:fd:35:33:ef:62:4e:69:cd:dd:b8:87:54:c7:
                    e4:8e:8e:25:1c:88:72:46:75:ad:a9:14:ae:94:25:
                    00:08:2f:6d:d0:9a:fa:f5:8b:d1:f7:c1:32:26:41:
                    79:e0:ae:7c:ea:1b:e5:53:ef:a5:67:a7:ed:bf:46:
                    e2:1e:bd:92:fc:38:3d:42:7f:81:5a:95:29:81:3f:
                    54:0b:c1:a7:a8:a8:70:18:85:4a:04:7e:f2:e6:a5:
                    3f:26:62:58:36:28:fd:ed:04:d7:80:c4:60:34:26:
                    67:8c:4b:cd:b8:ec:72:35:7c:44:0c:cc:19:21:30:
                    14:03:42:9d:cb:4b:56:26:cd:d1:ad:3d:fc:90:eb:
                    74:e2:03:42:8a:4e:94:cd:df:2a:22:96:51:3a:06:
                    3b:53:28:db:52:ee:01:0f:3f:ef:a8:c7:b9:17:81:
                    72:57:83:92:16:b2:89:f3:2b:d2:9b:24:56:c1:e7:
                    c0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BD:DD:63:07:28:2E:68:72:8F:D7:29:9A:8F:ED:75:C8:69:AC:06
            X509v3 Authority Key Identifier:
                keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/E88750FC08D711ED93E05EC0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.250.33.0-80.250.46.255

    Signature Algorithm: sha256WithRSAEncryption
         95:84:85:47:10:a2:81:c7:bf:7c:f0:80:04:76:5a:60:d7:f2:
         20:d8:61:f7:b7:91:ea:4c:e1:00:dd:c8:eb:fc:b4:11:89:0f:
         c7:7a:84:84:2e:ec:c1:b0:be:88:5b:cc:48:05:88:7a:df:6c:
         16:d9:17:01:9e:96:93:73:1a:da:8a:c4:de:d7:27:58:82:73:
         19:38:4a:da:e3:f5:e7:a7:c1:71:da:1d:c4:76:a4:8b:e5:01:
         aa:8d:b0:0b:22:9a:35:70:60:c0:ab:11:82:0f:61:c4:c6:de:
         0d:84:7f:5e:c1:df:69:ca:44:2a:87:b1:63:ce:ea:31:ef:ea:
         c2:47:64:a5:f1:76:89:24:37:08:43:4e:fa:a6:62:14:86:90:
         40:d5:df:61:82:25:fa:c1:c6:45:9d:09:07:af:f2:0d:f3:04:
         45:bd:35:46:4a:1e:71:6d:d6:1f:a6:ff:7d:74:4f:b7:e4:ba:
         7c:cf:8a:21:f1:75:5e:d7:6f:14:86:97:6d:97:ee:d7:07:6c:
         66:96:88:2b:24:17:f1:f5:55:7e:8c:de:7a:66:51:90:a1:24:
         93:e2:01:56:5d:6b:85:ef:07:01:1e:1d:b4:fc:a9:2f:12:2d:
         ea:ad:cc:85:f7:2c:c9:e6:37:79:74:57:63:53:ca:be:80:f4:
         19:e6:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org