Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D1C4BC4058A11EE9C6A40644AD9E6FC.roa
File:                     1D1C4BC4058A11EE9C6A40644AD9E6FC.roa (raw, json)
Hash identifier:          faYMWDiGfB9kjlkVZSWZ1LJNLA34hgfIG9AyBOEiduk=
Subject key identifier:   2A:6C:36:81:7D:85:38:91:47:8F:0B:C7:92:44:25:76:67:0F:0C:90
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0EFC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D1C4BC4058A11EE9C6A40644AD9E6FC.roa
Signing time:             Wed 07 Jun 2023 23:22:05 +0000
ROA not before:           Thu 08 Jun 2023 23:22:01 +0000
ROA not after:            Sat 07 Jun 2025 23:22:01 +0000
asID:                     834
IP address blocks:        154.16.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3836 (0xefc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun  8 23:22:01 2023 GMT
            Not After : Jun  7 23:22:01 2025 GMT
        Subject: CN=6481111d-3052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:2b:59:39:60:78:bc:e9:c7:f3:ca:0d:b7:
                    8a:2f:64:01:34:fb:4a:5f:60:33:9c:15:f5:52:a2:
                    4e:e0:65:cc:64:1d:5c:f4:e0:0c:f1:67:c2:9f:72:
                    e6:07:bf:e7:f2:d6:4e:57:13:2f:ab:c9:fd:cb:d9:
                    b8:19:9e:33:05:da:9a:49:5d:d8:7c:ce:aa:d1:a8:
                    fc:75:f5:8f:e0:de:0c:23:03:43:be:62:5a:f5:67:
                    10:d9:50:3a:ed:fa:60:79:9d:c8:df:66:a0:48:2c:
                    d4:89:d6:16:8f:65:ed:db:33:25:02:8e:c5:bd:7b:
                    9a:25:2e:10:bf:43:05:73:f7:d6:76:fd:7b:b7:00:
                    83:be:b2:69:52:54:a8:3d:ff:ab:86:13:57:01:71:
                    50:26:f3:31:f4:57:41:68:5b:36:70:b6:0c:89:d5:
                    5d:ff:b3:06:28:5e:b4:c4:ff:6c:b4:9f:23:3b:bb:
                    16:f9:0b:ee:19:69:05:16:94:15:ef:01:ae:68:96:
                    09:81:31:05:fa:cb:83:e9:c5:15:49:12:73:f2:58:
                    c7:40:a6:40:49:c9:a7:55:09:a5:da:df:f0:dc:26:
                    52:2e:da:d2:45:42:a2:3d:e9:8f:c9:89:23:d8:92:
                    92:b4:15:de:c7:11:bf:70:0f:e8:df:f1:f3:dc:f2:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6C:36:81:7D:85:38:91:47:8F:0B:C7:92:44:25:76:67:0F:0C:90
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D1C4BC4058A11EE9C6A40644AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:9d:de:0d:a9:0c:f9:06:2f:af:0c:24:07:e3:18:07:ba:bd:
         56:a1:dc:be:0d:ea:a9:ad:78:d7:ed:e8:f1:22:d5:7f:d7:99:
         d2:18:f3:ab:08:a7:7b:18:c3:2e:ce:d6:dd:a3:1c:46:1a:02:
         76:26:22:f7:c6:4e:61:e4:f8:9f:ca:61:1f:19:56:04:03:59:
         b7:f4:58:cd:56:a9:cf:1f:3c:b0:36:54:28:21:e6:72:35:b2:
         8f:55:40:e1:cf:7b:a8:9c:68:c5:39:85:70:cf:b2:57:94:0f:
         1d:16:2e:fa:2f:6a:a8:72:e1:07:53:f4:0c:cf:fa:72:24:91:
         b8:9b:2d:d6:8e:3c:07:79:cc:c1:7a:c1:9a:4d:c3:d3:f2:8a:
         1d:b0:5d:05:6c:b7:0d:9a:e0:d8:27:d3:e0:e0:2d:65:48:89:
         95:e3:9d:8e:01:01:83:0b:b6:30:12:e0:3a:0f:22:e0:e4:60:
         ef:3e:36:8c:87:92:55:92:5e:72:b9:7f:54:8a:57:b8:72:97:
         dd:96:f3:3a:36:bb:72:7f:20:af:40:ce:49:21:d3:6e:02:98:
         88:91:4c:d1:35:db:9f:66:69:b8:29:cc:bf:60:c5:cc:f8:88:
         1d:3c:a2:7a:9b:19:b7:82:ca:62:40:37:af:c8:de:93:8f:b7:
         1e:67:e8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org