Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1937BF3074F211EDB94EF27DF1222468.roa
File:                     1937BF3074F211EDB94EF27DF1222468.roa (raw, json)
Hash identifier:          8z/QeuIQD085i4JIQD2/UIXTVnfQEYg0FAtMgfFdhMI=
Subject key identifier:   43:0B:6B:0C:28:13:30:B0:F0:76:FF:40:FC:E7:36:38:50:0C:35:4A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0AF0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1937BF3074F211EDB94EF27DF1222468.roa
Signing time:             Mon 05 Dec 2022 23:11:07 +0000
ROA not before:           Tue 06 Dec 2022 23:11:02 +0000
ROA not after:            Sat 07 Dec 2024 23:11:02 +0000
asID:                     207279
IP address blocks:        154.16.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2800 (0xaf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec  6 23:11:02 2022 GMT
            Not After : Dec  7 23:11:02 2024 GMT
        Subject: CN=638e7a8b-694b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:80:97:16:b2:54:dc:16:0f:af:53:42:ba:
                    67:1f:48:69:76:96:9f:23:0a:23:0c:47:47:45:6e:
                    70:05:76:fc:7e:47:75:ac:01:52:84:e9:dc:b4:7b:
                    37:f3:a8:77:59:39:9e:ab:d0:7b:fd:15:08:9d:d4:
                    61:f8:98:8f:fd:58:01:7d:57:25:2f:a6:18:55:cc:
                    85:fa:2f:53:82:8c:85:b7:20:ac:60:f8:82:fe:b6:
                    b0:9c:48:f4:90:df:49:b1:1f:ef:29:a4:41:93:9e:
                    e1:03:4d:21:96:37:46:4a:26:d2:49:c0:2b:fa:a8:
                    df:e7:4a:96:41:2c:3f:c4:38:93:4e:93:8f:6b:66:
                    61:5c:a8:ee:14:b2:24:85:16:b8:c4:5c:19:fb:19:
                    0f:0c:dd:1b:dd:90:9e:47:f2:2a:d6:89:c5:16:d3:
                    77:a7:77:55:08:04:24:57:e2:e4:7e:3f:7a:39:ff:
                    5f:04:fa:ac:9d:ea:ed:9a:d2:e5:7f:bf:61:f5:c8:
                    5b:17:6e:e5:49:4c:aa:d2:8a:13:f8:65:ea:e3:07:
                    b8:86:db:4d:d0:3c:fd:cc:db:0c:50:a4:dc:b2:ef:
                    a9:20:97:08:3c:fb:3d:13:fe:c2:5f:c8:8e:ed:00:
                    4d:2b:90:fe:d3:e0:3c:c7:51:5e:ed:ba:11:2c:46:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0B:6B:0C:28:13:30:B0:F0:76:FF:40:FC:E7:36:38:50:0C:35:4A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1937BF3074F211EDB94EF27DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:b1:5f:0d:c0:87:4e:17:88:63:e5:88:dc:8d:4d:b4:10:
         a6:c0:34:7c:ee:6e:46:a1:75:3e:7e:d7:f7:23:77:96:a8:51:
         7c:06:78:2e:ac:17:88:2f:b8:56:e8:09:89:7e:55:b9:a1:a1:
         f3:9b:60:ed:8f:08:a3:d4:b9:75:9a:93:7f:81:d6:4e:20:e9:
         e0:fe:8b:0a:65:fb:d1:3b:04:ee:93:0c:cf:df:ad:83:cf:0f:
         47:53:1b:97:8c:fb:7a:37:c0:bb:08:83:bf:9e:3c:12:d5:91:
         69:92:3a:04:96:2d:91:26:7c:84:ad:10:22:20:c3:00:77:c0:
         d5:c4:cc:8b:dd:94:2d:b4:6a:39:55:fa:87:ee:d3:ec:e9:f6:
         35:12:7e:c4:dd:d6:35:07:a2:67:34:e4:98:50:18:c7:4b:a9:
         96:b2:cd:d1:73:d0:75:9b:9c:76:6b:60:55:50:c1:cc:2c:3f:
         9b:42:9f:7e:97:78:67:63:56:fe:76:b2:00:6c:1e:a2:b7:fa:
         e0:4e:65:90:73:c8:8a:e2:89:c0:ef:1f:4b:54:75:50:c0:31:
         23:22:e1:ff:99:8c:86:e5:75:fe:a3:77:11:41:97:51:af:99:
         6c:0c:45:3f:0b:ed:b4:31:b0:e7:fe:2d:74:11:fc:bc:bd:5d:
         84:77:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org