Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C9F8B0AA005111EEBAF61A884AD9E6FC.roa
File:                     C9F8B0AA005111EEBAF61A884AD9E6FC.roa (raw, json)
Hash identifier:          gjEUbEt6T1mNEaNDkuo3cZlz2zMEJf57v0mB7T87DDs=
Subject key identifier:   D5:CD:F4:65:E2:4F:AA:FA:77:F5:0C:71:0A:89:1C:20:3F:BE:B7:04
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0E86
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C9F8B0AA005111EEBAF61A884AD9E6FC.roa
Signing time:             Thu 01 Jun 2023 07:56:18 +0000
ROA not before:           Thu 01 Jun 2023 07:56:14 +0000
ROA not after:            Sun 01 Jun 2025 07:56:14 +0000
asID:                     834
IP address blocks:        154.16.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3718 (0xe86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun  1 07:56:14 2023 GMT
            Not After : Jun  1 07:56:14 2025 GMT
        Subject: CN=64784f21-67ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:76:fc:75:d8:f2:9b:e8:e7:c7:21:68:2f:
                    db:2e:9a:d3:87:1d:fb:43:94:c6:21:3b:66:a7:54:
                    48:40:f5:44:ec:91:8b:c2:4d:2d:34:17:15:db:84:
                    9e:79:d5:d9:80:f3:7b:9c:05:f6:54:94:78:7a:5d:
                    50:66:96:ce:a7:97:86:56:ab:57:5e:8c:3d:ab:fa:
                    d6:9a:30:62:99:9c:2a:e6:5d:04:74:06:a9:e4:cd:
                    a9:df:03:aa:12:01:b9:0a:c7:95:7a:87:ee:a1:f4:
                    8e:dd:61:a4:88:4d:42:31:f2:18:0e:c5:08:de:46:
                    e7:7a:89:5d:08:00:6c:c1:6d:78:d1:3b:3e:be:dd:
                    81:27:f2:c6:ab:f6:92:45:8d:88:6d:59:7e:df:fc:
                    79:6d:08:aa:f3:35:5d:6f:d8:85:62:26:ba:c0:a1:
                    28:5a:38:e8:4c:03:51:85:80:de:82:aa:3a:39:97:
                    d2:fb:f4:f8:0c:5f:15:c2:a8:0e:2a:d2:b0:ca:5c:
                    e4:3b:44:72:0e:6f:f2:eb:20:f4:50:d8:48:21:43:
                    9f:30:84:ab:74:10:f5:73:9c:cf:a4:ac:36:29:e3:
                    9d:f9:a5:95:ed:1f:f9:b7:67:47:b6:27:c7:21:31:
                    6b:c3:13:23:29:4e:38:d9:87:81:14:52:4f:37:ae:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CD:F4:65:E2:4F:AA:FA:77:F5:0C:71:0A:89:1C:20:3F:BE:B7:04
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C9F8B0AA005111EEBAF61A884AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:3c:1a:89:ee:df:a7:2b:9b:8c:a2:06:0e:9f:83:da:e2:
         ef:5c:0a:bc:57:2f:a5:ba:e1:06:95:ed:e3:10:3c:00:60:c5:
         fc:eb:66:be:12:f8:c4:06:7d:5c:22:38:7e:97:4e:78:b8:90:
         16:4e:34:35:7d:b1:9d:25:c3:0e:a9:c3:61:e3:5d:23:bd:e8:
         64:a9:5e:d4:a9:03:1e:ac:b9:a4:af:69:7b:b1:9d:fb:d1:95:
         6b:b4:97:6e:f1:13:1e:de:c1:8b:c5:5a:d9:c1:2a:eb:61:54:
         ce:4d:f4:f2:29:d1:7c:e9:a8:8a:cf:96:d1:ef:3b:8e:28:23:
         c3:a0:c3:eb:3f:f1:1e:83:7b:92:6c:4a:86:4d:1e:a3:90:f7:
         28:1d:3d:60:36:7d:c2:6f:77:2f:5b:9f:29:92:d4:f3:8d:d4:
         43:97:11:f5:6d:6d:cf:3a:f6:70:b7:cf:29:82:02:20:d2:d1:
         79:00:fb:ec:7a:86:74:e6:e6:ef:8f:cc:c1:02:48:9f:11:ca:
         94:13:c3:6c:4e:fd:d2:ab:b5:c5:ed:b7:4a:8e:df:7d:3a:aa:
         7b:24:48:ef:35:59:1a:a0:c1:30:c9:03:db:59:b8:c1:08:1d:
         7f:39:57:61:ee:df:fe:64:7c:6e:03:9e:c1:65:50:cd:0c:14:
         2e:5d:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org