Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/4CDE3CEA92B611EFA290F6B7762E951A.roa
File:                     4CDE3CEA92B611EFA290F6B7762E951A.roa (raw, json)
Hash identifier:          RV7/eEaI5VqUiGBaCe47Y3JwimVJ2aaBKucdHaZAkeA=
Subject key identifier:   7E:A6:A7:1C:67:70:3C:87:DB:7A:56:6D:64:6D:1B:4F:E3:B0:EC:8E
Certificate issuer:       /CN=F364AE1CAF/serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
Certificate serial:       023B
Authority key identifier: BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/4CDE3CEA92B611EFA290F6B7762E951A.roa
Signing time:             Fri 25 Oct 2024 09:48:34 +0000
ROA not before:           Fri 25 Oct 2024 09:48:31 +0000
ROA not after:            Sat 31 Oct 2026 09:48:31 +0000
asID:                     37415
IP address blocks:        41.222.216.0/22 maxlen: 22
                          2c0f:eca0::/32 maxlen: 32
Validation:               Failed, certificate revoked on Fri 25 Oct 2024 10:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE1CAF, serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
        Validity
            Not Before: Oct 25 09:48:31 2024 GMT
            Not After : Oct 31 09:48:31 2026 GMT
        Subject: CN=671b6972-3dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ee:06:dc:97:5d:d4:a1:ca:cf:6f:46:a3:7d:
                    55:b2:b8:52:f3:da:93:9d:2e:21:d7:33:0f:6e:ef:
                    21:88:2c:59:8b:36:2b:c2:6b:4f:c5:cb:bc:79:72:
                    3d:af:fb:13:8b:01:ec:9a:cd:da:6e:00:6c:ba:d8:
                    b4:0f:a4:2f:e6:89:9d:9b:06:13:7b:3e:1c:a8:f3:
                    f2:67:21:39:ba:4c:63:39:6a:25:cb:c2:f1:ff:ed:
                    61:7f:ad:0c:e3:1c:bd:e7:a5:47:a0:dc:18:9e:44:
                    aa:1a:05:a2:ce:5c:a5:8f:29:f5:f3:d8:2b:dd:8b:
                    fa:d4:a4:d8:cd:22:cd:18:67:f6:c5:f8:8f:a5:fa:
                    fb:69:2a:70:c7:aa:db:c5:91:49:fd:44:4b:fd:53:
                    4b:c0:93:1f:b4:3c:76:b8:22:6f:b5:30:73:73:1e:
                    36:46:1c:40:3a:e1:48:e4:4f:2c:e6:d6:b3:8f:6d:
                    d7:59:b1:06:c3:e9:cd:ea:a5:cf:aa:24:f6:ab:63:
                    8c:d9:63:5a:b5:56:57:20:8c:6e:7c:2e:05:e4:bb:
                    d2:c4:b6:e5:52:30:9f:81:cd:ee:bd:b0:73:a8:7a:
                    ef:50:13:d6:aa:35:47:6c:bc:4b:a8:f3:b7:f0:bf:
                    7b:de:02:cb:c9:5b:3b:e9:4b:f7:e0:a4:ca:94:8b:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:A7:1C:67:70:3C:87:DB:7A:56:6D:64:6D:1B:4F:E3:B0:EC:8E
            X509v3 Authority Key Identifier:
                keyid:BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/4CDE3CEA92B611EFA290F6B7762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.222.216.0/22
                IPv6:
                  2c0f:eca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:47:45:a0:8f:17:23:b7:7d:79:63:e1:21:74:48:12:79:b1:
         8c:ba:15:58:c7:92:ae:3b:8f:d6:aa:f3:a0:7c:fc:a3:4b:f2:
         04:e0:11:c1:b2:58:8b:84:54:2b:22:26:ea:3f:ba:31:6f:cd:
         49:dd:39:f1:a1:7b:ae:7d:1b:51:48:2c:7d:69:94:d3:a9:97:
         73:9e:e7:5f:23:8f:3d:dd:9a:bf:ec:0d:0a:7c:f9:3c:1f:5c:
         23:26:69:7a:4b:91:e6:c7:a5:a5:89:66:02:d5:25:e5:cb:4c:
         c7:99:87:3d:7d:29:32:cf:91:65:36:69:de:2d:9d:b8:57:08:
         a3:62:0d:d1:b7:25:45:28:ce:d7:a7:fc:81:d5:2c:c9:79:fa:
         15:27:d1:9b:00:10:07:01:dc:44:45:6b:03:d2:04:25:2e:dd:
         69:e5:23:37:ba:2e:2b:70:29:b1:bf:73:bf:d7:ec:1c:28:c9:
         a9:ff:40:f9:46:a9:32:8a:53:de:43:32:dd:b6:05:3e:2c:dd:
         51:42:5f:95:0b:c3:3a:1c:92:03:c9:7b:40:9c:bb:8f:96:c6:
         e8:fb:40:24:88:64:a6:e8:c4:8d:f0:8a:4b:36:8b:8c:47:39:
         0b:f4:83:bc:db:6b:86:48:4c:15:e7:24:4b:ac:87:45:81:86:
         d4:4a:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----