Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/059F4C5C2A0311ED922280C5F1222468.roa
File:                     059F4C5C2A0311ED922280C5F1222468.roa (raw, json)
Hash identifier:          5OZq9mU3Nd3hHwkFcGtopJeyRDhAEDBtB+8KhJQ1W8E=
Subject key identifier:   48:47:8A:C6:E0:22:8A:B9:0C:F9:2F:5F:91:98:98:93:92:C3:2D:BC
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0978
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/059F4C5C2A0311ED922280C5F1222468.roa
Signing time:             Thu 01 Sep 2022 14:33:19 +0000
ROA not before:           Thu 01 Sep 2022 14:33:15 +0000
ROA not after:            Thu 05 Sep 2024 14:33:15 +0000
asID:                     22773
IP address blocks:        154.16.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2424 (0x978)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  1 14:33:15 2022 GMT
            Not After : Sep  5 14:33:15 2024 GMT
        Subject: CN=6310c2af-8633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:6e:e8:be:e1:e3:66:18:e8:13:0f:9b:e7:
                    66:7a:bd:99:93:64:8c:ec:3c:89:25:d9:86:90:4d:
                    cd:f4:29:8a:9d:11:a2:6a:a9:f7:e7:a5:1a:68:40:
                    fd:61:2a:02:68:1b:63:c3:79:ef:99:ec:c0:64:d1:
                    54:7c:4f:2b:f8:82:16:1e:36:a0:11:ef:da:2a:75:
                    28:fb:2d:d4:97:b5:86:fb:91:38:67:f4:dc:6f:31:
                    1f:5d:af:03:7e:72:50:11:8b:f7:c3:c2:0e:bd:f2:
                    fc:23:2b:d3:71:05:b9:6f:9b:a9:b2:5c:6c:d4:90:
                    47:33:b8:c8:6d:6b:cc:48:22:09:49:ad:df:c3:9d:
                    db:25:fa:31:0b:e6:96:07:a1:f8:73:3e:79:6a:54:
                    75:cf:f8:d4:d1:8d:6f:a9:e3:79:05:eb:fe:f7:90:
                    9e:71:5b:08:90:a2:39:63:7c:eb:53:c3:66:a3:85:
                    6b:56:36:59:0e:b3:63:a1:f5:fc:dc:a9:6c:16:e2:
                    82:d9:bc:58:36:b3:16:7d:e4:49:b1:6c:91:6d:99:
                    63:ae:2e:52:42:fe:f6:2b:64:f9:8a:56:48:97:ab:
                    66:9e:ce:bf:59:dd:c3:f5:9f:0e:da:9c:2c:28:17:
                    50:6e:f2:88:e9:8b:45:4d:94:58:a5:1b:1c:81:fe:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:47:8A:C6:E0:22:8A:B9:0C:F9:2F:5F:91:98:98:93:92:C3:2D:BC
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/059F4C5C2A0311ED922280C5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:fd:06:41:8f:9b:3f:d3:d8:4e:2a:6c:33:7d:a7:88:f2:86:
         7d:c8:15:5a:0a:88:08:aa:39:2b:cf:30:dc:70:23:d8:cd:f5:
         1e:63:18:01:cf:79:73:8a:53:86:4a:28:9f:92:8c:16:4d:82:
         36:2b:18:86:e4:4b:2f:f6:bd:6e:97:eb:16:bb:db:38:6a:40:
         8f:06:c8:7b:87:5d:70:69:a1:1d:8f:93:4f:d6:6f:95:c6:8f:
         2a:20:31:de:ea:e5:b6:69:75:3d:c5:05:bc:03:d5:06:8e:84:
         60:f4:07:35:c0:38:c8:4a:6f:29:11:96:ee:01:e4:ca:d2:d1:
         87:66:95:d5:49:35:66:e4:c0:d6:70:aa:86:5e:6e:59:ca:6e:
         62:57:60:fd:48:dc:c6:4b:6a:e0:1d:08:d5:fa:24:4a:af:6e:
         3a:22:a8:83:07:db:14:a3:07:75:f0:cc:a8:bb:b1:ee:ec:4d:
         33:42:b2:4c:4c:e3:8d:92:0f:1e:18:20:8d:ef:c0:ba:8a:85:
         45:a5:88:0f:64:0f:8b:d2:15:75:0d:8e:aa:7a:55:2e:52:c1:
         63:0b:23:e3:76:9e:48:03:6f:f8:5c:b8:73:40:80:f6:be:4f:
         79:b3:9f:d9:d8:67:3d:4a:a4:52:89:11:77:23:21:07:91:13:
         81:6a:e6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org