Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F683E4EE21CA11EC81749140D8A014CE.roa
File:                     F683E4EE21CA11EC81749140D8A014CE.roa (raw, json)
Hash identifier:          vn74HwZH1EcQ9d/1yapLzAFgvGGrYgnG+HN4QgzIoLc=
Subject key identifier:   1E:4D:82:9C:77:07:93:BF:61:A0:5A:F2:C9:CA:73:A5:2F:B6:80:C0
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       13
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F683E4EE21CA11EC81749140D8A014CE.roa
Signing time:             Thu 30 Sep 2021 08:46:55 +0000
ROA not before:           Thu 30 Sep 2021 08:46:51 +0000
ROA not after:            Sat 30 Sep 2023 08:46:51 +0000
asID:                     328327
IP address blocks:        102.140.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Sep 30 08:46:51 2021 GMT
            Not After : Sep 30 08:46:51 2023 GMT
        Subject: CN=6155797e-d9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c4:76:e7:01:30:a2:b8:06:bc:7b:af:f1:be:
                    9f:35:54:d6:5d:51:6a:38:78:de:26:ca:24:f4:83:
                    ab:04:0f:c5:5c:4a:1b:c2:a2:2f:00:56:75:4c:dd:
                    a0:9e:38:04:35:0f:5f:12:0d:c6:1f:b6:da:7d:4c:
                    cc:8d:26:14:99:28:ce:1f:cf:5a:c9:bd:47:b7:76:
                    b5:7b:ac:d2:5d:8c:be:bd:a1:f3:28:eb:f7:5d:84:
                    b0:ac:91:14:43:a5:31:37:ec:3a:51:55:fb:67:29:
                    31:74:fb:26:e1:38:ac:b8:7d:0c:46:af:51:eb:f6:
                    f2:5a:5f:d3:ab:f0:0b:11:15:46:2a:58:5f:d6:a9:
                    2e:00:e2:40:3b:f1:b7:e6:4a:f2:73:5e:85:ac:43:
                    91:0e:8d:21:4b:0f:92:e7:8a:95:94:9c:87:0e:24:
                    ac:5f:50:5b:ab:52:47:4b:a5:a8:56:b0:e6:36:05:
                    93:f2:60:62:4d:47:0e:90:a5:2e:70:72:89:8f:b4:
                    9b:03:63:88:4e:db:26:bb:d9:f1:69:36:1d:e2:6e:
                    e7:82:ed:24:c5:1a:eb:54:f7:3f:40:d7:63:4e:89:
                    6d:f8:dd:71:41:21:d9:59:32:3c:da:b8:1b:4d:37:
                    b3:6d:34:97:f9:de:dc:81:67:89:23:2f:5b:6f:54:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4D:82:9C:77:07:93:BF:61:A0:5A:F2:C9:CA:73:A5:2F:B6:80:C0
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F683E4EE21CA11EC81749140D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.140.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:4b:21:36:cb:c6:b7:e3:db:da:9b:a4:3a:ae:4c:e3:dc:83:
         fd:3d:ea:e6:a2:b6:66:5f:cb:cf:a6:c9:32:2c:58:c6:4d:e7:
         06:87:90:17:95:6f:46:0f:b6:76:72:52:cb:69:60:a1:c4:28:
         22:84:2f:7f:d2:06:34:e3:70:9b:65:11:a2:f3:99:73:4e:63:
         9d:88:e2:5e:df:0a:93:87:db:cd:15:a5:6a:ca:6c:13:e9:a6:
         94:75:51:92:15:3a:15:81:ea:7e:94:f4:4f:60:4e:82:ed:18:
         5b:b8:24:2c:47:40:11:f5:d7:e5:bb:84:88:d5:47:8f:7d:ea:
         c1:99:d4:b6:8b:f6:7d:2c:09:92:3a:45:1c:86:af:e5:c8:a9:
         35:42:9f:e9:e9:0c:0e:03:fb:da:99:cf:1d:bd:fc:a9:d4:fb:
         f4:18:6b:7d:52:fb:ee:14:7c:b2:8d:3c:29:f4:27:3c:85:68:
         54:41:79:c6:da:b0:4b:24:5b:31:eb:46:4a:47:11:40:55:94:
         35:bb:15:ac:8f:f2:93:cc:87:14:1f:20:6c:63:3f:d2:33:d4:
         4c:a7:67:9d:eb:e9:7c:ef:2f:83:a6:7d:a5:cd:c3:66:29:8c:
         ea:99:85:c5:2a:c1:cd:a2:83:be:a1:88:7b:54:b4:80:d8:b8:
         2b:cc:08:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 07:27:23 2023 by rpki-client on console-ams.rpki-client.org