Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0846D370411A11ED9A847AC9F1222468.roa
File:                     0846D370411A11ED9A847AC9F1222468.roa (raw, json)
Hash identifier:          r7e82zlb9wQ8z8S9NysOqhbPzDnB0BwJSbAt3lXMxZw=
Subject key identifier:   F5:4C:23:B8:BD:26:6C:9A:4D:53:DC:A5:44:6F:11:FF:2F:C7:9D:88
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       09D4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0846D370411A11ED9A847AC9F1222468.roa
Signing time:             Fri 30 Sep 2022 23:45:58 +0000
ROA not before:           Sat 01 Oct 2022 23:45:52 +0000
ROA not after:            Sun 01 Oct 2023 23:45:52 +0000
asID:                     136557
IP address blocks:        154.16.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516 (0x9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  1 23:45:52 2022 GMT
            Not After : Oct  1 23:45:52 2023 GMT
        Subject: CN=63377fb6-1847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:13:fd:e5:23:5d:65:e5:7c:e4:a6:5c:a2:46:
                    b7:ab:62:19:e3:51:48:7d:89:b8:25:0f:fc:28:59:
                    86:51:17:28:2d:47:b0:f3:61:a7:81:3e:02:12:36:
                    1d:bf:cd:14:17:fc:6a:fe:18:e4:d5:c5:6c:78:1c:
                    d5:85:24:f8:95:07:18:51:a6:b7:ea:46:d6:d7:a8:
                    d5:6b:0c:c1:9e:f5:7e:e8:c1:66:5d:83:ea:14:2b:
                    8f:9b:80:82:cb:80:24:84:22:e7:93:a8:d1:5e:79:
                    03:49:c9:f5:46:7d:c1:e9:bf:83:8d:dc:5b:af:35:
                    61:1d:32:63:b1:c8:60:a0:a8:13:b4:98:b4:62:c5:
                    6a:73:0b:43:bb:2e:af:9c:9b:79:02:3c:2c:1e:20:
                    7b:9d:cb:96:ab:0b:db:73:a0:4f:23:2b:cc:9d:b2:
                    86:20:24:e5:6c:37:5f:5b:69:94:60:e8:c4:14:7f:
                    02:dd:6b:6b:81:6f:6e:66:05:1a:08:57:57:6a:74:
                    69:dd:db:69:ee:cf:46:02:29:5b:1f:05:30:bc:e7:
                    43:66:1f:a6:e4:4c:c4:0b:0c:fc:96:09:99:50:47:
                    eb:05:51:82:3c:0a:b0:75:89:43:3a:b8:0d:a5:ef:
                    8c:fb:19:04:99:a8:61:db:66:07:7e:b6:7a:ae:46:
                    11:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4C:23:B8:BD:26:6C:9A:4D:53:DC:A5:44:6F:11:FF:2F:C7:9D:88
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0846D370411A11ED9A847AC9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:fb:62:20:9b:27:ed:5a:a3:9a:6d:db:35:ed:81:be:c6:
         2d:5e:16:8c:91:f5:2b:32:6e:0b:7a:f6:4f:7d:c0:6c:8f:88:
         3b:d9:04:f4:31:00:d0:59:15:f0:46:c0:6d:bb:b6:62:dc:b1:
         ba:02:d3:f3:e5:b6:c4:ef:48:73:f7:00:cf:47:1e:99:db:61:
         89:79:a5:2a:67:d4:42:e1:bc:56:42:39:b0:1e:09:07:9e:04:
         58:2e:dd:01:bb:d0:9e:10:86:01:5f:e2:84:6c:d8:19:13:ec:
         d9:86:3d:99:75:95:95:74:5b:fb:75:42:ea:b1:b4:c8:38:9e:
         13:e2:6b:c4:3b:a0:86:27:02:a6:07:bb:14:d7:0a:60:6f:90:
         92:01:d1:ec:f6:21:c9:e8:cf:6f:95:94:b7:6f:96:bc:a6:9b:
         f6:9c:73:64:f0:11:46:2a:10:06:46:ae:e4:a9:a8:e9:f1:5f:
         69:75:c0:c4:25:a5:53:0f:c8:ce:61:5f:59:cd:8c:ce:cb:80:
         c0:ad:a1:37:cd:61:f0:d7:34:9b:c8:74:3e:7a:73:eb:25:86:
         2d:87:1a:1a:bc:c2:58:8e:5e:95:1f:b1:f1:af:c9:fc:e6:88:
         1b:4b:06:7a:2c:fe:f4:12:8c:15:00:18:42:06:cd:df:cb:ba:
         be:32:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org