Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1263BF84546B11EEAEF1046C4AD9E6FC.roa
File:                     1263BF84546B11EEAEF1046C4AD9E6FC.roa (raw, json)
Hash identifier:          W8DCZq8+5QGJHh/cMIYZRqf5XiALPH1LQz8+eou9fcY=
Subject key identifier:   C0:52:20:57:2D:6A:06:27:0B:B4:B6:74:9F:14:BB:0B:E1:8E:E4:F1
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       123E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1263BF84546B11EEAEF1046C4AD9E6FC.roa
Signing time:             Sat 16 Sep 2023 08:28:54 +0000
ROA not before:           Sat 16 Sep 2023 08:28:51 +0000
ROA not after:            Tue 17 Sep 2024 08:28:51 +0000
asID:                     272460
IP address blocks:        154.127.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4670 (0x123e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 16 08:28:51 2023 GMT
            Not After : Sep 17 08:28:51 2024 GMT
        Subject: CN=65056746-3742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:a8:a8:1d:39:d1:bd:17:90:42:20:14:35:
                    13:7a:c3:a5:83:ec:6b:f5:db:b4:ba:d3:df:e7:78:
                    af:b9:96:b4:a2:2f:7a:55:65:0f:b1:3e:94:35:26:
                    28:2c:32:e7:35:cf:e3:b3:0b:b6:c4:ea:4b:c2:cf:
                    41:e0:56:ed:4b:f5:6b:a4:84:b7:15:07:0d:20:87:
                    22:c3:f5:2f:1f:c2:86:3e:3b:37:ec:76:01:5c:94:
                    dd:c1:82:73:f4:69:31:ff:fe:1f:4d:b1:21:94:30:
                    fd:33:f4:13:9a:84:9e:6b:4b:7d:24:d0:d4:29:02:
                    ba:b7:d0:45:a7:f4:a3:8a:d9:8c:5d:ab:68:fb:85:
                    97:db:df:0f:7e:1e:56:d8:a2:ec:3b:4d:56:61:7e:
                    f9:da:0e:5e:5a:9f:6b:0a:70:b2:98:67:58:f2:b4:
                    18:c2:ce:d5:e9:3a:c9:34:79:e4:c5:98:0a:16:23:
                    8c:d1:49:d3:be:23:28:0d:bd:4a:49:e9:8b:17:39:
                    8c:0b:65:ca:c5:64:a8:38:1b:67:45:d9:48:c4:a8:
                    c2:0f:a4:1f:a1:ab:e0:be:13:a5:0d:67:91:c3:8b:
                    48:c9:49:3e:28:71:de:69:08:f1:03:94:8f:42:65:
                    3e:1f:bd:7c:2c:56:4d:05:8a:46:fa:aa:a7:d5:f6:
                    56:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:52:20:57:2D:6A:06:27:0B:B4:B6:74:9F:14:BB:0B:E1:8E:E4:F1
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1263BF84546B11EEAEF1046C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:7a:88:89:86:68:19:20:cc:d0:e3:ec:b8:f3:fc:46:11:db:
         79:eb:82:28:6f:eb:03:0e:1c:74:37:1d:08:5c:8f:d1:67:ba:
         46:75:17:b4:d6:7e:47:46:2d:10:28:d3:31:b0:d6:40:b1:6e:
         b0:91:b2:4d:45:0e:48:a8:ee:b4:d5:94:ff:5a:78:b4:00:8b:
         3b:7d:bc:f4:2f:82:e9:da:de:3e:30:26:ab:9f:4d:38:27:ec:
         29:45:e0:cf:37:02:56:e1:66:cb:23:48:a7:ea:b6:5b:e0:79:
         89:4a:3f:53:98:c8:8a:6e:80:b7:25:24:7a:d8:d5:22:39:67:
         ab:dd:c6:c3:b6:8a:d1:4e:a3:12:f1:d0:8d:cc:cd:28:9c:2c:
         5a:f3:18:2c:8a:15:a4:7a:e8:bc:b4:4c:0d:3b:1b:15:b5:e3:
         36:82:05:45:b2:ed:ed:5a:0b:bc:79:e7:12:71:19:e7:e2:b5:
         14:ae:ca:de:97:2e:53:9c:35:0f:e5:c4:bd:c4:fd:a7:3e:7e:
         f9:4e:c0:84:80:f7:9f:9a:70:45:c6:c6:48:c1:85:71:b0:9c:
         70:e5:9f:02:6f:1f:d4:d5:8e:93:81:0f:1a:1a:e0:a7:50:df:
         0d:a5:12:c9:8c:a8:8c:5c:ea:1c:78:97:1a:55:7f:23:96:e3:
         30:50:28:0b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEj4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA5MTYwODI4NTFaFw0yNDA5MTcwODI4NTFaMBgxFjAU
BgNVBAMTDTY1MDU2NzQ2LTM3NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIRaioHTnRvReQQiAUNRN6w6WD7Gv127S609/neK+5lrSiL3pVZQ+xPpQ1
JigsMuc1z+OzC7bE6kvCz0HgVu1L9WukhLcVBw0ghyLD9S8fwoY+OzfsdgFclN3B
gnP0aTH//h9NsSGUMP0z9BOahJ5rS30k0NQpArq30EWn9KOK2Yxdq2j7hZfb3w9+
HlbYouw7TVZhfvnaDl5an2sKcLKYZ1jytBjCztXpOsk0eeTFmAoWI4zRSdO+IygN
vUpJ6YsXOYwLZcrFZKg4G2dF2UjEqMIPpB+hq+C+E6UNZ5HDi0jJST4ocd5pCPED
lI9CZT4fvXwsVk0Fikb6qqfV9lahAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUwFIg
Vy1qBicLtLZ0nxS7C+GO5PEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzEyNjNCRjg0NTQ2QjExRUVBRUYxMDQ2QzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafzIwDQYJKoZIhvcNAQEL
BQADggEBABp6iImGaBkgzNDj7Ljz/EYR23nrgihv6wMOHHQ3HQhcj9FnukZ1F7TW
fkdGLRAo0zGw1kCxbrCRsk1FDkio7rTVlP9aeLQAizt9vPQvguna3j4wJqufTTgn
7ClF4M83AlbhZssjSKfqtlvgeYlKP1OYyIpugLclJHrY1SI5Z6vdxsO2itFOoxLx
0I3MzSicLFrzGCyKFaR66Ly0TA07GxW14zaCBUWy7e1aC7x55xJxGefitRSuyt6X
LlOcNQ/lxL3E/ac+fvlOwISA95+acEXGxkjBhXGwnHDlnwJvH9TVjpOBDxoa4KdQ
3w2lEsmMqIxc6hx4lxpVfyOW4zBQKAs=
Generated at Thu Nov 16 15:21:50 2023 by rpki-client on console-ams.rpki-client.org