Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/13CF95E2F48511EC8E9BBCABF1222468.roa
File:                     13CF95E2F48511EC8E9BBCABF1222468.roa (raw, json)
Hash identifier:          0kuRwygYInAjbkW5P0Q1gFxCeLZNxmafQncTtlJzuMc=
Subject key identifier:   30:DD:60:DE:BF:64:6A:B4:70:B4:52:56:ED:44:DB:C7:3E:13:D3:21
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       08BE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/13CF95E2F48511EC8E9BBCABF1222468.roa
Signing time:             Sat 25 Jun 2022 12:48:14 +0000
ROA not before:           Sat 25 Jun 2022 12:48:10 +0000
ROA not after:            Tue 25 Jun 2024 12:48:10 +0000
asID:                     60721
IP address blocks:        154.127.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 25 12:48:10 2022 GMT
            Not After : Jun 25 12:48:10 2024 GMT
        Subject: CN=62b7040e-ba3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1d:42:f0:8e:f0:bd:46:74:2a:c0:07:81:ff:
                    af:89:a7:fb:b6:2f:12:32:23:7c:77:66:95:3f:6f:
                    9a:3f:02:24:ef:4e:a5:e1:09:f9:80:ae:2e:a9:4a:
                    92:92:09:d9:40:8a:f9:a7:f7:9a:71:6b:09:1a:42:
                    f5:92:58:1f:84:a8:85:25:35:42:a9:80:df:26:ab:
                    7e:24:5e:80:92:37:3c:c0:67:11:b4:9c:3f:14:92:
                    3a:f4:e1:ed:e7:a8:1c:86:09:3a:1a:7d:95:85:23:
                    db:17:c5:57:cb:f3:c3:49:ea:b7:29:84:b6:fd:34:
                    78:f5:3f:f7:13:7f:a9:d3:23:7f:a6:b9:54:24:56:
                    c3:76:3e:be:82:20:7f:ab:ae:37:55:dd:a5:f0:af:
                    30:1b:38:05:bb:78:7c:73:73:6d:98:26:be:0c:98:
                    9f:9f:79:e5:ea:0f:e7:d7:5b:4b:8a:38:71:1a:28:
                    09:9a:4c:af:f5:d6:04:37:94:d5:89:c3:54:5b:6e:
                    e2:23:c2:9e:a2:41:47:79:f5:12:93:07:6e:73:ad:
                    79:e3:90:b2:7b:27:fb:2b:95:33:9f:1b:40:bc:3b:
                    ef:44:f4:8d:b5:bc:fe:7e:bf:89:96:80:f7:fe:ea:
                    85:9d:cf:1b:9c:49:a4:ae:3f:2d:91:8e:39:c0:ad:
                    8a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DD:60:DE:BF:64:6A:B4:70:B4:52:56:ED:44:DB:C7:3E:13:D3:21
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/13CF95E2F48511EC8E9BBCABF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:0d:85:de:2b:2f:7d:01:0e:d9:1e:51:b8:de:40:a6:30:
         02:06:0f:b4:7d:09:f1:76:ab:5c:c2:24:f2:fa:17:15:56:c5:
         1b:06:7e:f2:d5:71:74:11:9b:72:fd:ba:99:54:24:8a:dc:2b:
         90:76:7c:62:07:28:9b:53:c2:5c:72:48:a1:3d:05:53:c4:da:
         c0:63:fa:14:e8:d8:80:77:61:68:b9:1c:65:3e:80:0e:30:0a:
         39:eb:bc:1b:93:3b:71:ce:8a:a2:6b:32:03:b8:76:6c:62:d0:
         89:2e:5f:49:75:47:bd:48:a2:35:73:78:4a:c4:b3:6d:b0:17:
         71:cd:c9:45:b2:ff:b0:0e:66:5f:5e:dc:89:ba:78:4d:50:1e:
         c6:88:1e:ce:c4:82:f1:db:af:5e:06:05:3d:bc:a9:8f:b0:85:
         1a:28:f9:55:aa:dc:17:31:1f:2a:82:8e:da:27:c7:72:87:05:
         ac:c9:62:4f:74:30:f6:d6:3d:01:c1:50:c0:2d:3a:5c:f2:4c:
         83:82:17:e6:cd:28:ac:d7:0c:ee:9c:9b:fb:f1:a3:dc:21:8d:
         b8:90:60:a8:55:04:4f:34:6a:b2:54:fa:b3:c8:47:2b:03:ac:
         9c:d5:33:46:77:19:8b:55:f0:6f:f9:46:0a:cb:bb:46:c8:27:
         5c:8a:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org