Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/00678574551D11E99FA0F91AF8AEA228.roa
File:                     00678574551D11E99FA0F91AF8AEA228.roa (raw, json)
Hash identifier:          amadv2AQSJk3YJVC4F9ztERadvLjlGY2ZYCqMnOxpOw=
Subject key identifier:   22:1C:2C:47:91:0B:58:82:7A:23:FD:38:17:24:C6:56:89:27:A5:3B
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       A6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/00678574551D11E99FA0F91AF8AEA228.roa
Signing time:             Tue 02 Apr 2019 07:57:47 +0000
ROA not before:           Tue 02 Apr 2019 07:57:41 +0000
ROA not after:            Tue 02 Apr 2024 07:57:41 +0000
asID:                     61317
IP address blocks:        154.16.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Apr  2 07:57:41 2019 GMT
            Not After : Apr  2 07:57:41 2024 GMT
        Subject: CN=5ca315fa-ba4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:bb:70:6c:63:25:99:29:fe:64:fd:ac:ea:
                    27:cf:cd:d2:3b:31:ec:4b:94:8d:ab:0e:be:50:be:
                    fc:03:a7:99:6c:49:64:b5:3e:df:c8:af:d9:67:a7:
                    a0:56:50:f6:9c:34:45:15:f4:2b:f8:17:3d:1e:a3:
                    9e:7c:d5:05:5a:7d:cd:98:d2:d5:82:58:00:4c:18:
                    67:58:a8:f5:bb:83:7d:c1:dd:7f:d3:34:fd:33:54:
                    0c:38:87:5b:87:b4:42:65:9e:85:ae:73:dd:79:5d:
                    9f:f2:28:ef:ec:39:98:0d:35:1b:7e:45:b2:b1:f4:
                    2b:6a:68:c7:f8:88:de:91:79:d8:29:86:9c:62:01:
                    68:c9:26:db:8b:95:b9:67:d3:99:55:9b:bb:47:61:
                    f2:c3:fe:74:2b:6e:49:96:09:be:18:e6:33:1d:09:
                    cd:71:34:95:14:04:81:14:2c:d1:6f:6b:74:a6:67:
                    ef:d3:4a:cc:12:fc:01:d8:b7:e0:32:99:24:9e:99:
                    a1:e1:41:41:9e:84:81:09:e3:c1:69:3b:e9:43:9b:
                    42:7b:09:91:99:73:a5:0b:f9:1d:fd:1d:86:cc:66:
                    5d:a6:1c:de:d2:bf:f8:b9:89:bb:ee:08:12:6b:0d:
                    13:92:fa:d1:fd:60:fb:24:d5:08:53:5b:37:2d:a2:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1C:2C:47:91:0B:58:82:7A:23:FD:38:17:24:C6:56:89:27:A5:3B
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/00678574551D11E99FA0F91AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:57:dd:20:72:10:4f:62:4c:55:e2:d0:a4:ef:13:5f:5d:1c:
         a9:3d:e2:90:bf:0b:9e:e8:fb:82:6b:fe:f4:04:63:35:3f:89:
         86:61:44:a2:b1:0f:25:d7:f5:61:5a:73:d8:1b:70:f2:b3:28:
         33:b7:d5:84:1b:5d:0e:8a:ad:97:ee:5b:d3:6a:de:52:64:e7:
         b2:f5:7f:f1:72:44:ea:05:74:88:c5:5a:7f:ae:41:4a:4e:5b:
         0d:ec:17:7c:4e:78:f0:e6:88:8c:c5:70:f3:2a:93:19:71:7e:
         11:7a:62:71:8f:9a:e1:39:c9:d3:0c:60:12:86:82:ba:58:89:
         d5:04:32:6c:4b:03:81:aa:46:53:27:4c:cd:8d:39:76:f9:a6:
         a0:b9:f9:71:b6:f9:9c:05:10:1b:6d:a7:d7:7b:6f:75:f1:fc:
         19:fa:a9:19:4f:a8:ee:c1:17:6a:49:ed:b9:f4:37:82:20:ff:
         53:62:f5:80:a0:ee:dd:ac:fc:36:53:a5:4b:c2:0a:15:38:d5:
         f5:a1:e8:fe:f5:4a:a7:4d:05:42:53:2a:85:ef:d5:ef:4d:d7:
         f9:4c:ca:6e:39:53:96:fe:88:85:28:85:1d:72:74:f0:7c:7f:
         d7:00:21:b3:53:08:e9:86:87:88:94:bb:be:1d:b9:64:de:d4:
         5f:ce:d5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org