Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/04A579E4B43B11ED893E62A3F1222468.roa
File:                     04A579E4B43B11ED893E62A3F1222468.roa (raw, json)
Hash identifier:          dbOLbmuDlmoebyZ+8UueluBuJ6jBGSJYCo08Qbb5X2A=
Subject key identifier:   E9:60:11:02:F7:CD:BA:A7:85:84:D8:E4:E3:32:37:E3:2F:EC:45:76
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0BFD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/04A579E4B43B11ED893E62A3F1222468.roa
Signing time:             Fri 24 Feb 2023 12:01:49 +0000
ROA not before:           Fri 24 Feb 2023 12:01:46 +0000
ROA not after:            Sat 22 Feb 2025 12:01:46 +0000
asID:                     61317
IP address blocks:        154.16.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3069 (0xbfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 24 12:01:46 2023 GMT
            Not After : Feb 22 12:01:46 2025 GMT
        Subject: CN=63f8a72d-a143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:7d:ca:bf:29:fe:d3:be:3c:03:d1:55:c1:
                    93:42:c2:91:27:3d:e7:98:3d:74:2f:5b:f4:e4:7a:
                    35:04:18:02:91:14:18:82:bb:2c:57:8c:0b:17:76:
                    c3:bf:ff:20:5b:16:fc:63:90:9c:6a:6c:3c:40:ad:
                    7e:ff:8a:37:25:98:2d:4b:6a:87:16:ef:ee:a3:2b:
                    76:c3:84:01:ca:f1:fc:97:31:86:49:43:54:df:4f:
                    32:9f:e4:d4:35:e8:f6:1a:2e:27:93:c6:73:a0:c3:
                    d6:f5:7d:e9:0a:f2:7b:41:fc:3a:d8:9a:2f:ec:84:
                    49:50:fd:b0:0d:16:61:c5:80:e0:50:a5:b2:84:c6:
                    f7:61:8f:ce:91:b2:38:67:79:6f:3f:8c:c2:bf:ea:
                    ba:94:76:45:0d:4d:ba:ae:8b:fb:1f:2c:47:9d:a0:
                    ec:06:cf:b6:2c:3b:6f:ca:ca:95:a1:6d:b2:40:26:
                    3d:ed:ba:e7:1c:f7:59:c6:d8:fc:36:93:09:aa:2a:
                    eb:0c:7f:4d:c4:c1:25:71:d9:d4:e1:f0:dc:91:4f:
                    cf:6a:e5:0b:d2:15:76:f6:16:bb:1e:86:f7:9c:51:
                    c4:fd:03:a5:b1:b4:46:8d:86:5a:38:cc:2c:03:ea:
                    f2:2e:6f:03:58:ba:fa:31:0f:6d:9a:e7:89:16:a5:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:60:11:02:F7:CD:BA:A7:85:84:D8:E4:E3:32:37:E3:2F:EC:45:76
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/04A579E4B43B11ED893E62A3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:bc:1b:92:a9:89:a5:0f:6a:fa:4f:3a:f4:cd:87:ed:7f:01:
         a2:ef:c6:35:03:7f:14:d5:50:41:6e:56:58:c0:81:1b:5f:eb:
         d6:f2:5c:1b:2b:d2:ce:14:35:9f:1e:6e:c4:18:a9:2b:00:4b:
         db:72:ec:ab:04:32:e2:9d:bb:1f:c8:18:7e:35:fd:b4:be:0f:
         db:20:41:72:84:f9:ce:53:1c:71:c6:23:3b:fa:96:4c:16:da:
         0a:6b:ff:07:d1:8c:7f:b2:07:8c:de:72:26:67:af:57:38:27:
         5b:57:38:7c:00:81:fb:52:c1:51:c8:da:2b:b9:e5:f8:00:b7:
         f7:3f:30:6a:34:b4:4a:ef:83:f5:51:d5:2c:7e:40:ff:9f:04:
         3d:26:71:6f:5e:f7:ab:39:9e:a8:82:21:c8:6c:8a:8b:97:3d:
         9e:db:17:4f:ce:6a:42:35:03:b7:94:b7:01:44:18:06:ce:c4:
         dc:38:51:62:e0:73:c1:e4:8b:c2:36:97:c7:d7:31:59:9f:70:
         42:f9:51:96:f5:6a:20:8d:bc:0d:d2:60:a8:69:d8:43:72:e5:
         da:a6:b9:6c:27:a9:54:5e:43:37:51:44:62:bb:72:1c:f7:c3:
         e5:41:03:b1:2d:a3:a7:52:cc:59:f2:2f:95:38:dc:fb:4d:02:
         9c:6a:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org