Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08A35806B69611EDA58A00C3F1222468.roa
File:                     08A35806B69611EDA58A00C3F1222468.roa (raw, json)
Hash identifier:          akSS3bNuwkG+gvB1vdIrpow57D4aCB4RzGI29FyTWLk=
Subject key identifier:   93:6C:7C:23:1F:E6:2C:6D:0A:17:50:C4:71:1B:48:51:CD:AA:27:92
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0C73
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08A35806B69611EDA58A00C3F1222468.roa
Signing time:             Mon 27 Feb 2023 11:58:22 +0000
ROA not before:           Mon 27 Feb 2023 11:58:19 +0000
ROA not after:            Thu 27 Feb 2025 11:58:19 +0000
asID:                     61317
IP address blocks:        154.16.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3187 (0xc73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 27 11:58:19 2023 GMT
            Not After : Feb 27 11:58:19 2025 GMT
        Subject: CN=63fc9ade-ff21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:8b:03:2f:eb:63:da:d5:e4:9f:7e:dc:e3:
                    98:bd:aa:6f:15:c6:06:31:4f:0a:a6:fa:8a:98:b7:
                    89:93:6e:fb:a0:db:15:db:4b:be:0b:0d:6a:d9:fc:
                    60:84:5b:06:6e:26:2c:4c:90:eb:4d:70:88:12:96:
                    a0:b9:0d:cd:ef:20:44:e0:b6:27:f7:56:4b:98:75:
                    c0:d7:1e:74:15:72:ab:71:b0:77:15:cc:4c:1c:3a:
                    72:db:b3:3d:f9:ea:84:f1:aa:93:b2:08:72:8f:9f:
                    3b:29:59:ae:bc:6f:52:10:87:46:9e:6d:a1:09:cc:
                    c9:86:7c:74:e1:12:e6:7f:b6:8e:d0:02:f1:6b:b7:
                    46:64:27:e9:4e:17:1d:84:d4:33:ef:54:e1:84:da:
                    05:d0:50:8b:99:81:68:b8:5a:c5:dd:f0:bd:ae:c7:
                    55:81:f1:4b:2e:1e:2e:d8:b9:0e:aa:88:14:d8:e5:
                    71:89:06:24:7f:dd:82:6b:be:f8:46:11:81:b7:01:
                    a2:45:13:8e:03:56:35:72:9d:6d:c7:db:58:cd:e4:
                    63:b1:94:0c:6e:f9:af:1d:b9:b3:db:bf:d7:10:dd:
                    af:49:ed:d5:5f:c0:3c:22:65:b9:3f:d2:7b:b2:69:
                    47:81:c4:8c:e7:e0:cb:dd:cb:7b:80:6d:29:f4:52:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6C:7C:23:1F:E6:2C:6D:0A:17:50:C4:71:1B:48:51:CD:AA:27:92
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08A35806B69611EDA58A00C3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:1c:dc:30:88:5b:89:11:24:71:c0:3f:b7:cc:7c:9f:52:9b:
         18:7c:d4:2b:39:ce:71:db:96:c0:e2:46:72:c4:5d:50:4d:93:
         d5:af:57:a8:ab:4a:92:08:cf:5c:ee:42:9a:0f:f1:51:4f:27:
         5e:54:3f:87:91:30:01:eb:2b:64:26:ac:2a:76:ff:13:a6:b3:
         e9:d4:dd:a7:d0:b6:46:23:0c:f4:69:50:71:bf:9b:b4:27:94:
         8b:24:57:7a:38:9f:12:02:55:a4:ac:cf:3e:da:97:ee:43:3e:
         70:86:2c:9f:34:56:4c:60:fb:21:ce:1e:55:5e:9d:fe:a2:28:
         26:3c:d8:d3:9b:34:b7:61:03:f3:e8:49:43:ad:05:8b:eb:9f:
         04:3c:0e:de:2d:69:e4:aa:5e:b1:07:f6:bc:3b:fc:6f:d2:73:
         b7:81:1f:7a:70:43:70:2b:1d:d3:ed:03:6d:57:53:3d:11:ad:
         95:f5:5d:81:36:91:89:a1:82:be:5a:0e:7f:81:81:22:b9:fa:
         b2:c3:5a:63:1d:8f:72:99:68:22:f7:4c:0b:ee:78:6c:47:20:
         aa:e9:85:8a:d8:1a:71:7c:5a:cb:ce:6c:cd:f4:34:9f:13:b4:
         e5:e8:3c:6a:b9:db:65:a9:84:d1:ef:fa:fe:02:71:4d:97:37:
         74:0e:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org