Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F1F1896421CE11EC8D8BA946D8A014CE.roa
File:                     F1F1896421CE11EC8D8BA946D8A014CE.roa (raw, json)
Hash identifier:          K+AngGzMYkRLeGHBeUO34cv/dAmRP1F3Qv+CB5aWQ/k=
Subject key identifier:   6F:3A:3F:6D:B2:76:27:9F:C6:E3:C4:F7:31:DB:F9:62:CD:24:02:3B
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       1F
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F1F1896421CE11EC8D8BA946D8A014CE.roa
Signing time:             Thu 30 Sep 2021 09:15:25 +0000
ROA not before:           Thu 30 Sep 2021 09:15:21 +0000
ROA not after:            Sat 30 Sep 2023 09:15:21 +0000
asID:                     328327
IP address blocks:        102.140.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Sep 30 09:15:21 2021 GMT
            Not After : Sep 30 09:15:21 2023 GMT
        Subject: CN=6155802d-40f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:3a:f7:1d:36:f2:55:0b:ee:f5:d1:c9:91:
                    de:4e:89:1f:fd:7f:57:b3:e7:73:d5:44:bb:2f:cd:
                    b7:8b:d8:88:05:11:96:0c:79:4b:5a:fc:09:ac:51:
                    bf:b3:c5:f3:16:0d:8d:68:f8:40:0f:99:75:5a:e0:
                    67:5d:29:56:f9:5f:1a:5c:1f:34:22:c5:67:83:54:
                    4e:d5:c2:1b:d8:ed:ed:4e:1d:9b:b0:64:89:ae:0c:
                    6a:9c:3a:86:58:47:e7:58:49:37:2c:f0:01:2f:16:
                    97:2b:b4:b8:3b:19:24:cc:4a:61:81:a8:ff:54:c1:
                    f6:b8:fe:27:a9:2b:d1:6e:d7:fd:ba:e1:ad:83:f3:
                    f8:fd:1b:00:66:66:65:35:b5:5d:4b:a0:d3:7c:9b:
                    31:f3:4a:15:30:5a:58:f8:88:b8:57:23:dc:8a:33:
                    8e:84:55:36:2b:bf:7a:14:4a:fc:c2:97:bf:17:94:
                    88:ae:f4:96:6a:a0:4f:c7:92:96:f7:05:98:ca:39:
                    e6:e2:51:fa:e5:65:b0:5c:8d:8b:21:09:74:5f:53:
                    b0:95:f7:33:29:56:39:3e:79:04:e2:57:a5:f2:e5:
                    c3:aa:7f:66:d9:88:47:b5:17:85:b5:37:8c:ea:1a:
                    2d:6a:a7:31:ef:4d:e2:b7:2c:6c:7a:a5:8a:7a:89:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3A:3F:6D:B2:76:27:9F:C6:E3:C4:F7:31:DB:F9:62:CD:24:02:3B
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F1F1896421CE11EC8D8BA946D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.140.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e8:e7:03:28:96:e2:1c:09:e8:92:e5:d9:ff:f8:8a:05:af:
         ab:e1:3e:88:49:32:f4:cb:f4:7a:99:bc:ad:b8:db:b7:46:3e:
         6f:b0:d4:0b:01:91:eb:69:dd:99:34:3d:da:fe:b9:51:2e:30:
         33:36:6f:b4:7d:2d:b1:3a:5c:4b:c5:4c:d4:ca:47:d8:70:be:
         25:bb:c2:f4:c3:2a:ad:67:da:cc:3e:4c:8a:c7:db:09:48:01:
         c5:db:ca:de:9b:ac:51:c7:e1:78:8c:65:4a:c9:08:67:69:10:
         90:06:3a:41:f4:a7:6b:60:96:61:d7:b0:53:30:52:aa:80:dd:
         80:e0:a7:ad:68:c5:5c:3c:e2:a9:b4:62:03:01:8f:17:31:8c:
         23:8f:e5:dc:1a:9f:1d:77:6d:f7:e3:3b:9e:b4:30:07:80:e1:
         4a:40:34:11:48:fe:f3:f4:f4:ba:45:f5:fd:51:25:cc:ab:82:
         35:4e:14:66:73:41:97:09:61:a4:c2:4f:49:d4:bf:5f:b6:b0:
         dd:91:93:a1:48:bb:3d:61:68:e5:46:52:e5:8d:26:a3:ed:98:
         a2:44:4d:93:60:5a:0d:26:45:c0:e2:96:a9:e3:40:f8:e5:ad:
         8d:f3:0a:85:7a:8d:e7:f7:66:1e:7c:dd:e7:89:d3:09:98:c5:
         63:4a:0a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 07:22:59 2023 by rpki-client on console-fra.rpki-client.org