Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DCD87D8B43E11ED8BF985ACF1222468.roa
File:                     1DCD87D8B43E11ED8BF985ACF1222468.roa (raw, json)
Hash identifier:          n+21zNEn3Iu9iR7SBKHwpR2FIlu05QcRnEYmlgr5DOo=
Subject key identifier:   1B:4F:48:F5:D1:B1:49:31:58:BD:34:31:BB:8A:22:62:22:7A:77:FF
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0C1B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DCD87D8B43E11ED8BF985ACF1222468.roa
Signing time:             Fri 24 Feb 2023 12:24:00 +0000
ROA not before:           Fri 24 Feb 2023 12:23:56 +0000
ROA not after:            Sat 22 Feb 2025 12:23:56 +0000
asID:                     61317
IP address blocks:        154.16.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3099 (0xc1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 24 12:23:56 2023 GMT
            Not After : Feb 22 12:23:56 2025 GMT
        Subject: CN=63f8ac60-9c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:4f:3b:69:c1:b4:dc:72:e6:a9:66:fc:10:
                    a0:29:0a:b8:7a:bc:61:c8:25:f1:49:a9:c5:b6:4d:
                    ea:b9:84:26:e0:28:56:29:10:45:14:a7:7f:ef:50:
                    1b:9f:cd:39:7e:34:e0:1c:3d:6e:8d:06:3a:35:e0:
                    cf:16:2f:f2:c7:dd:09:33:bb:21:84:a3:90:32:9d:
                    d2:37:42:aa:4c:85:ed:3f:59:11:27:f8:ed:cb:f0:
                    97:ad:4a:1d:78:71:6f:9a:23:50:d2:25:4c:42:92:
                    9d:81:60:61:6e:0c:5c:15:77:b6:9a:36:7c:2d:73:
                    5f:88:5a:cd:55:b8:2e:09:2c:27:90:dd:74:7d:8d:
                    63:ea:be:c8:0d:40:9f:9f:f4:41:28:ae:23:c3:30:
                    10:39:38:23:c1:94:4e:7d:1c:30:be:60:4e:60:ff:
                    4f:a5:ce:c9:67:2d:43:81:ab:61:c2:71:83:ed:84:
                    86:3d:ef:35:16:9a:80:e9:1b:fd:80:67:52:af:b8:
                    cd:82:b3:8a:6e:b0:01:29:03:6b:30:48:5a:d2:aa:
                    16:67:73:e1:f4:22:44:da:e9:58:f8:4c:bb:b0:a0:
                    02:7f:07:6e:6d:b5:71:2d:62:e2:88:7d:33:62:6b:
                    9c:5c:d6:9f:cd:97:08:ec:5d:92:87:15:bc:58:42:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4F:48:F5:D1:B1:49:31:58:BD:34:31:BB:8A:22:62:22:7A:77:FF
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DCD87D8B43E11ED8BF985ACF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:27:64:50:78:c9:1c:b2:f5:a4:cf:ab:df:3e:13:7e:96:
         3e:64:5b:fc:2f:3e:c9:42:80:72:11:f8:b2:76:81:b8:d2:4c:
         53:54:c1:e5:0b:7b:bb:a4:41:d5:fb:df:03:0d:bd:76:1d:d1:
         f0:ce:1d:45:f3:e0:07:e8:9a:dc:9b:85:90:e3:86:2b:65:71:
         b1:ba:32:91:2c:54:a2:6c:d2:85:c6:89:6c:c0:af:c7:bc:e5:
         fe:72:86:d7:28:1b:ab:71:0b:90:20:08:ec:79:73:6f:2e:39:
         f1:49:e8:c4:5f:e9:f0:8d:0d:20:b6:06:8c:f0:73:4c:1e:4e:
         a0:27:c4:e1:aa:83:20:03:b6:70:e2:6e:e3:72:e6:d8:32:23:
         44:fd:e4:cc:a8:22:76:75:16:c9:d5:35:07:d8:94:87:72:1a:
         19:20:44:4e:40:e5:dd:fa:a1:44:9c:e5:94:29:89:74:48:2b:
         03:48:7e:6e:85:ab:c5:65:1c:a3:d8:68:e7:a7:42:8d:9b:52:
         d5:eb:59:65:92:4d:08:f8:b3:ea:ea:32:37:39:79:a5:6b:0f:
         b5:4d:b6:da:74:a1:b8:93:1f:39:96:72:89:e9:a3:e4:15:8a:
         47:db:6e:4a:48:12:c3:e1:b0:d1:09:30:9f:66:be:8e:5a:05:
         aa:1d:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org