Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/060D8182FF0E11ED82781E2C4AD9E6FC.roa
File:                     060D8182FF0E11ED82781E2C4AD9E6FC.roa (raw, json)
Hash identifier:          uZwqQjgei2Z5IWDKY6d6F8skYMX8ZCTP5iK1UDyocxY=
Subject key identifier:   04:73:44:70:84:65:2D:54:D2:56:CB:91:80:24:29:3A:24:87:76:EB
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0DFE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/060D8182FF0E11ED82781E2C4AD9E6FC.roa
Signing time:             Tue 30 May 2023 17:18:41 +0000
ROA not before:           Tue 30 May 2023 17:18:38 +0000
ROA not after:            Fri 30 May 2025 17:18:38 +0000
asID:                     61317
IP address blocks:        154.16.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3582 (0xdfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 30 17:18:38 2023 GMT
            Not After : May 30 17:18:38 2025 GMT
        Subject: CN=64762ff1-ed59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:90:81:2d:3e:3c:13:06:a1:cb:fc:b4:69:e8:
                    91:eb:97:ef:7f:fa:55:72:bf:45:3a:fb:6b:8c:15:
                    f7:c0:4c:65:16:30:d4:98:41:20:ea:1a:26:75:0b:
                    49:3f:04:70:fa:06:5d:18:03:83:b7:ee:91:d6:28:
                    f0:ff:89:5a:5e:2b:29:a9:65:61:3f:44:89:44:30:
                    3d:57:ed:81:92:f0:52:bb:ac:70:2a:b2:7d:2d:b1:
                    75:ec:b3:b2:8a:bc:69:7b:02:75:c3:60:5f:d1:3f:
                    fd:53:3b:95:1c:b3:79:14:21:45:ff:b9:73:d5:d2:
                    94:ea:54:db:55:25:73:1c:89:1e:df:6b:5c:a5:77:
                    94:e2:48:6c:d3:db:42:f1:cc:e9:83:0f:b1:d1:e4:
                    e1:bd:07:11:15:00:cd:6d:3c:16:b0:9d:ea:8d:4c:
                    c3:f2:21:32:4b:df:34:2a:bc:64:52:4b:63:59:b7:
                    65:fe:0e:1a:cd:05:67:f7:af:a7:aa:b4:32:47:c9:
                    1a:11:e3:17:b0:2d:38:cb:ad:ce:88:20:20:35:e4:
                    b8:4c:12:55:84:43:62:83:55:73:49:9b:97:c3:6d:
                    ef:71:59:1b:b3:b3:06:8d:97:06:d7:1a:f5:e1:fe:
                    f8:b9:e4:31:5e:9f:83:0d:66:ee:2c:a1:f0:f9:ec:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:73:44:70:84:65:2D:54:D2:56:CB:91:80:24:29:3A:24:87:76:EB
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/060D8182FF0E11ED82781E2C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:3a:7f:6b:07:b7:b0:35:84:5b:74:1b:3b:9a:9e:60:bb:
         3c:df:2e:da:45:f3:ef:ae:d2:75:98:d1:23:0e:ac:d8:bb:52:
         f7:1f:d6:3d:f8:ff:d7:c6:00:83:98:ee:78:c1:e8:71:e3:f8:
         4c:e3:8d:9f:bf:75:aa:45:db:eb:6d:83:85:8f:ea:ee:a0:8d:
         46:e5:06:7f:b4:8b:2a:22:c9:55:6e:57:71:7e:3c:cc:12:c8:
         2c:64:74:1d:72:e4:d3:93:5f:4b:50:98:3c:09:bf:d1:63:bc:
         4c:f7:dd:5a:dc:6f:52:c5:6e:29:91:3a:cc:18:66:a2:d7:d3:
         3b:cc:8d:41:b2:c7:1d:a0:bc:bc:d5:df:b2:72:70:6f:62:f1:
         fa:ee:b9:f2:42:23:16:25:c0:f3:71:65:0c:ca:ec:10:c4:8c:
         8c:9c:ce:7e:71:82:3e:ba:75:52:ea:e3:58:7b:43:16:8f:9b:
         cc:62:ab:aa:7e:e6:83:dd:1d:0e:f2:f5:15:25:80:59:51:39:
         89:d2:c5:c5:ff:d6:bd:6b:1a:72:a6:df:0c:57:f8:de:21:88:
         a9:80:52:65:3b:c7:ca:61:df:7c:3f:91:85:0e:5a:32:37:da:
         d1:fb:fd:24:b8:12:2f:48:65:b6:6b:12:fb:4c:89:b4:c8:48:
         6c:31:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org