Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07AA58F0456711EDA6A30695F1222468.roa
File:                     07AA58F0456711EDA6A30695F1222468.roa (raw, json)
Hash identifier:          VZ5S9SFZHtXhC72UQKztfOf3j76x9ZpbdV1qyQn6CUU=
Subject key identifier:   CC:36:FF:9A:AC:1E:BE:A8:F9:92:BB:AB:61:D1:76:DE:40:48:02:42
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       09E2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07AA58F0456711EDA6A30695F1222468.roa
Signing time:             Thu 06 Oct 2022 11:07:13 +0000
ROA not before:           Thu 06 Oct 2022 11:07:07 +0000
ROA not after:            Sun 06 Oct 2024 11:07:07 +0000
asID:                     142430
IP address blocks:        154.16.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  6 11:07:07 2022 GMT
            Not After : Oct  6 11:07:07 2024 GMT
        Subject: CN=633eb6e1-a9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:f3:a3:06:f8:69:1a:7d:66:53:07:18:86:
                    bb:f5:50:de:81:bd:cf:af:80:21:0e:6d:33:3d:c2:
                    63:93:81:24:36:80:2d:dc:0e:92:d2:0b:3e:a3:15:
                    6c:e4:7b:73:87:a4:e4:d6:a9:2a:0b:3f:c9:56:5f:
                    95:26:7e:16:0a:49:24:3e:7d:41:0a:38:30:2b:5d:
                    fd:72:57:e1:92:56:f4:94:1d:59:5f:a9:d8:35:c6:
                    e3:8a:3c:cf:44:ef:53:ab:9b:39:ab:b0:a4:ef:2c:
                    ab:d0:80:a8:2b:9c:b9:43:a1:d3:9a:e3:37:72:b7:
                    c1:cd:55:04:3b:5d:b0:51:5e:c2:d7:0c:d8:27:1a:
                    93:a6:65:2f:cc:74:ee:df:f1:29:c7:06:c2:44:cd:
                    53:34:24:8c:b8:d8:d2:7b:74:6e:dc:6d:80:7e:b4:
                    0d:6d:83:b5:5e:43:df:08:33:af:21:17:6f:44:31:
                    b4:67:82:f6:ee:92:95:84:b1:0d:e4:a6:40:ef:c8:
                    80:37:f9:a9:41:58:61:80:bb:a4:ae:df:79:15:d0:
                    42:8c:d2:73:48:b6:c4:18:27:25:3b:4c:bd:e0:f2:
                    aa:73:22:9b:48:72:53:aa:e1:21:7a:83:99:fa:3c:
                    dd:0b:93:c5:7f:8e:1f:ee:7e:0f:7b:19:f7:51:8a:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:36:FF:9A:AC:1E:BE:A8:F9:92:BB:AB:61:D1:76:DE:40:48:02:42
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07AA58F0456711EDA6A30695F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:33:bb:a7:6c:0f:8a:ae:7c:a7:89:62:49:be:64:32:20:29:
         52:2e:37:40:b9:c6:6a:35:c0:aa:c3:04:cf:fd:c6:34:32:a7:
         fc:ec:c0:bb:c8:59:2d:13:2c:86:a9:d1:66:d6:3f:d3:e4:12:
         ad:17:01:17:c7:56:5e:a9:a7:8f:0b:6e:ee:f0:84:c1:c8:b6:
         b3:c7:98:f6:2e:d9:0b:d6:57:28:1d:2d:4e:9e:57:45:91:fc:
         a0:9d:8f:d4:c9:99:c4:9e:15:ce:68:75:ff:f2:00:f3:e5:ce:
         9d:9a:88:76:0a:bf:36:10:a3:72:02:f6:0f:3d:d9:a4:4f:9f:
         4f:f2:42:85:97:d4:cb:46:69:42:99:d3:7a:14:ec:15:59:79:
         95:45:1e:ac:2f:a1:ba:cf:83:c9:01:68:c1:59:5e:a9:ee:1a:
         98:5d:d0:7e:7e:93:aa:62:82:0b:18:ad:a8:7a:9c:cc:8a:4d:
         0f:9f:95:2d:b4:e2:4b:e0:1f:bb:7b:08:ee:73:ce:64:5e:60:
         83:09:b1:e1:b2:df:ea:ec:91:3b:4c:4a:c2:1e:b3:c1:81:90:
         c9:12:e5:ed:96:54:9d:a9:49:c3:71:0e:00:5f:88:4f:e6:ec:
         74:75:56:8d:ee:ea:4d:3e:2b:00:47:71:71:95:cb:5c:12:69:
         f2:f1:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org