Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0521758222DF11ED988236F9F1222468.roa
File:                     0521758222DF11ED988236F9F1222468.roa (raw, json)
Hash identifier:          cjw47CBV86P5HbGwHZaZCedhVO3+MsOepMtR+C9gepI=
Subject key identifier:   28:9A:9A:06:41:B1:41:35:14:39:8E:2D:20:EC:95:70:7A:B1:B3:B1
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       094B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0521758222DF11ED988236F9F1222468.roa
Signing time:             Tue 23 Aug 2022 12:27:58 +0000
ROA not before:           Tue 23 Aug 2022 12:27:52 +0000
ROA not after:            Fri 23 Aug 2024 12:27:52 +0000
asID:                     204843
IP address blocks:        154.16.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2379 (0x94b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 23 12:27:52 2022 GMT
            Not After : Aug 23 12:27:52 2024 GMT
        Subject: CN=6304c7ce-71b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:09:89:97:6f:40:7b:a5:de:77:71:f2:fd:
                    91:1b:b8:e2:48:e9:eb:16:3a:3b:62:3f:01:12:70:
                    ae:93:23:a6:9a:3a:0a:b2:60:f4:0b:a6:03:2d:a0:
                    4a:58:4c:e0:75:10:75:0c:0e:aa:32:00:cf:25:40:
                    8e:0c:17:38:a0:79:ce:e4:0d:00:9c:bf:b3:78:8e:
                    48:a5:95:89:15:2d:59:36:39:07:df:10:68:ed:15:
                    64:f8:64:11:97:bc:4d:5f:18:e1:45:6e:04:fb:6e:
                    0b:6d:75:93:a9:75:1e:da:48:3c:40:57:99:bc:48:
                    59:9e:d5:85:07:e1:d4:cb:02:57:38:b6:dd:20:39:
                    8f:7a:0e:68:66:18:cf:56:22:cf:df:89:23:ad:f9:
                    7a:62:c4:86:08:1c:c4:6c:80:54:fe:a8:03:49:be:
                    6a:94:d0:24:a6:33:fb:4b:a9:b8:68:cc:91:46:8d:
                    e6:b1:0e:fb:f4:fc:a9:af:12:8c:57:72:56:27:85:
                    5d:84:c2:61:47:50:f5:35:e3:64:d4:dd:30:3a:73:
                    34:05:16:a3:7b:bf:de:04:9d:87:e3:62:22:4a:91:
                    ce:7e:be:ed:ba:ae:5b:66:ea:b8:05:94:fa:ed:7f:
                    60:a2:3d:8b:1b:ac:42:e1:15:52:77:1b:60:4e:22:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9A:9A:06:41:B1:41:35:14:39:8E:2D:20:EC:95:70:7A:B1:B3:B1
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0521758222DF11ED988236F9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:1e:11:2b:cc:8b:68:5b:6a:97:ae:68:84:fd:ce:96:af:05:
         57:3b:03:53:c9:06:71:3d:96:84:72:13:f3:62:1e:b3:33:1b:
         ca:49:bb:dd:82:a3:a2:6e:9b:86:7f:93:03:2e:19:0b:ce:bc:
         76:7b:74:c3:82:1e:a5:d0:44:2f:b1:e3:ce:36:bc:ad:ce:91:
         3f:43:7a:bb:74:20:1f:9c:e8:35:d0:ce:ed:23:62:30:72:5d:
         8d:09:00:8d:9c:5f:15:5c:35:80:60:ab:9e:8d:2c:31:2d:82:
         68:ab:5a:ea:b0:8c:51:3a:e0:64:61:69:07:87:70:f5:a8:ba:
         e1:21:22:28:0d:4b:03:a7:ad:a7:19:f4:9c:b9:7f:f4:9c:d8:
         1c:0c:94:25:22:9a:01:63:2c:a3:8e:2e:60:17:70:08:da:da:
         68:50:70:8f:5d:a9:56:4d:3d:0c:85:80:54:21:3f:56:4f:80:
         42:96:84:7f:78:82:60:80:ed:46:ec:b4:57:f9:c6:af:ed:63:
         fa:d1:8a:ee:02:de:fb:73:09:6d:78:da:93:28:9b:73:f9:f6:
         50:49:0e:9d:a7:71:39:fb:de:a8:8f:c9:1b:c1:54:42:b4:cb:
         d7:b8:9e:b6:1f:df:ce:f5:fe:bc:37:46:59:24:6a:b7:76:04:
         95:37:33:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 11:44:10 2023 by rpki-client on console-fra.rpki-client.org