Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCC640CEFC9411EA92B23A70F8AEA228.roa
File:                     FCC640CEFC9411EA92B23A70F8AEA228.roa (raw, json)
Hash identifier:          jJrhyszN8W15qAbds6pHe9KLiI8hivL8QB+Yg6/a3Zg=
Subject key identifier:   65:0E:47:B2:84:D5:AC:22:66:80:7E:DC:BC:39:AC:61:37:4B:83:60
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       03AF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCC640CEFC9411EA92B23A70F8AEA228.roa
Signing time:             Tue 22 Sep 2020 05:32:22 +0000
ROA not before:           Tue 22 Sep 2020 05:32:16 +0000
ROA not after:            Fri 01 Aug 2025 05:32:16 +0000
asID:                     3356
IP address blocks:        154.16.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 22 05:32:16 2020 GMT
            Not After : Aug  1 05:32:16 2025 GMT
        Subject: CN=5f698c65-9b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:f7:b4:4c:2b:2a:1a:89:49:55:4e:15:f3:
                    31:9f:cd:80:cf:ca:41:31:16:02:c3:98:3d:90:1c:
                    cc:15:c7:99:50:de:1c:ba:a1:cc:ea:c8:5b:a4:68:
                    47:25:0c:b8:31:e7:b4:83:30:6f:c9:04:55:d6:f3:
                    79:11:9c:17:25:a5:4e:15:a4:50:56:19:bd:ef:b8:
                    99:25:d0:6e:4b:3a:2f:f6:d5:62:19:dd:46:37:7b:
                    54:1b:58:c1:42:82:00:6c:20:42:90:44:c5:4d:1a:
                    5c:59:12:7f:9b:55:dd:a1:a9:ac:bd:81:97:89:3c:
                    c2:45:67:ee:f6:df:62:81:52:2c:ce:82:c0:97:7e:
                    32:43:f6:00:2c:6a:6e:d4:f7:c0:66:1f:57:82:36:
                    42:39:32:fb:0e:92:12:71:69:14:2e:24:1d:f9:12:
                    1f:01:b6:2a:3a:b0:56:d6:8b:7c:56:95:7c:55:c7:
                    f1:07:8e:30:a8:59:75:97:27:c8:f2:24:d6:a6:2f:
                    f2:c0:fc:93:fd:2c:6b:01:80:8b:9f:3d:34:ae:10:
                    d2:d2:dc:c0:ac:f7:a2:2d:ea:33:cf:18:46:84:77:
                    f8:3f:5c:4b:36:80:39:83:f0:47:b9:74:d5:c0:d1:
                    7f:58:a4:6e:b7:1d:31:4d:1a:25:81:73:32:62:ad:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0E:47:B2:84:D5:AC:22:66:80:7E:DC:BC:39:AC:61:37:4B:83:60
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCC640CEFC9411EA92B23A70F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:6d:69:10:b8:60:75:a0:5b:8d:27:cb:d4:a5:f1:44:41:70:
         b0:4a:39:9f:8f:de:bf:45:57:4e:f8:f7:31:94:c7:d8:a2:f5:
         5f:65:36:1f:0e:45:88:aa:a6:2d:c6:06:8c:36:13:40:b2:42:
         9a:08:12:ea:ee:e0:ff:29:1e:99:1a:8c:ed:ee:8e:ee:aa:25:
         d2:6b:c5:f0:31:29:e8:8f:ea:6b:b0:1d:e7:b6:db:a7:39:fb:
         8f:b1:42:99:7c:de:a1:e7:45:8a:c7:97:71:50:4c:11:2e:46:
         ce:79:11:e0:2b:a4:14:c1:c9:91:32:d3:60:ae:a0:fc:9c:b8:
         d4:78:ca:2a:b3:31:41:27:77:65:d6:04:31:09:77:de:e9:13:
         2d:bd:4f:30:d4:bf:ff:e6:33:de:67:67:c8:ad:ea:7f:c0:4c:
         26:0c:d1:b0:c1:ec:b6:a9:96:2b:39:08:41:08:b2:ce:ba:41:
         ee:b3:47:0d:ed:68:09:4f:35:16:4f:27:ca:bd:d3:32:46:98:
         76:ff:66:a7:59:cb:41:33:e9:a3:f7:bc:2a:4f:c9:15:f4:8e:
         42:2a:dd:9a:57:ad:f9:72:83:ba:c3:ac:7a:13:44:2b:8d:6e:
         3d:ae:21:00:38:44:fa:f8:71:ae:a3:7b:7c:65:e0:4a:80:88:
         00:d2:6f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-ams.rpki-client.org