Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25A17CF60B7A11EE97F16C4F4AD9E6FC.roa
File:                     25A17CF60B7A11EE97F16C4F4AD9E6FC.roa (raw, json)
Hash identifier:          ZsEytF0QV2dUzhQiOUBNIlK4XsA4n+CXrYyCtZWHm9s=
Subject key identifier:   5B:C6:F9:17:E9:44:40:7C:5B:A2:E9:22:17:0D:C9:9C:F1:9F:D0:8A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0F7B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25A17CF60B7A11EE97F16C4F4AD9E6FC.roa
Signing time:             Thu 15 Jun 2023 12:42:54 +0000
ROA not before:           Thu 15 Jun 2023 12:42:50 +0000
ROA not after:            Sat 14 Jun 2025 12:42:50 +0000
asID:                     42831
IP address blocks:        154.16.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3963 (0xf7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 15 12:42:50 2023 GMT
            Not After : Jun 14 12:42:50 2025 GMT
        Subject: CN=648b074e-9408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:a2:15:2c:fd:af:8a:8f:8e:d6:9e:59:50:
                    41:66:24:dd:44:9b:05:1c:e0:d9:0e:a9:5a:b9:2e:
                    5c:63:a4:5b:e2:39:e4:3c:5e:cc:59:2c:4a:23:aa:
                    f0:f8:24:f4:58:fd:05:21:cd:ce:86:a4:82:7b:9c:
                    b0:52:84:83:18:6b:b0:e2:08:00:76:82:63:14:93:
                    c8:7a:b6:28:e9:1f:cb:a8:ad:70:d2:85:3c:2c:24:
                    7a:40:be:63:25:9e:bd:15:f3:2f:5f:38:8d:5f:9a:
                    9c:d3:44:2b:d0:78:4b:d5:78:20:a3:19:e4:4e:f7:
                    f2:79:60:f3:05:47:0e:62:12:e2:7c:74:6f:c7:c9:
                    96:05:2c:62:15:84:d6:70:bc:47:26:10:42:a6:0d:
                    d1:fa:6d:44:3c:de:7b:de:d3:0f:b6:a1:b2:45:cd:
                    40:4d:56:b4:ad:cd:2e:9b:4d:63:ee:f4:8d:8c:a2:
                    2d:9d:bc:c3:94:b7:bb:8b:58:e1:22:42:3f:c6:76:
                    a7:31:b2:94:2e:f7:73:d1:d1:ef:83:df:49:33:ab:
                    9c:2f:9c:04:39:1f:5b:6f:13:5f:d3:09:7f:c5:de:
                    4e:af:a8:6d:52:16:0a:8b:a1:53:29:26:25:29:3e:
                    df:0e:27:5a:20:08:b8:61:5b:37:93:86:ab:b5:c5:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C6:F9:17:E9:44:40:7C:5B:A2:E9:22:17:0D:C9:9C:F1:9F:D0:8A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25A17CF60B7A11EE97F16C4F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:66:e2:96:89:72:53:dd:75:2d:19:59:1e:0a:e4:ff:8f:dc:
         39:b8:6e:1f:48:2b:cf:69:e9:27:96:c3:f1:8b:b3:ac:f4:7a:
         9a:71:f7:cc:97:00:7c:1d:cc:0c:c0:e6:08:b4:f9:b5:24:f3:
         79:27:bf:7e:f3:94:b3:c7:8f:8f:fc:da:39:45:d1:71:9b:61:
         69:0e:e1:17:9e:44:6f:ba:4f:55:16:ae:16:10:c6:7c:5f:9e:
         50:be:d2:ae:ab:b6:e0:d7:84:5a:8f:fe:b0:86:f4:e3:a1:24:
         ea:a5:a5:0e:09:72:c4:20:05:b3:dd:3b:13:f7:06:d8:27:f5:
         9c:a3:bb:93:ed:bc:ff:c4:b9:11:11:bf:a2:3b:e9:49:3a:64:
         84:f2:8e:94:34:dc:1b:16:bf:31:59:c2:50:60:ac:f6:d3:a2:
         95:7c:89:d5:ff:7b:99:54:e3:25:c6:ec:1f:94:f7:67:df:4d:
         ce:7b:6d:e1:f4:b3:9d:52:39:cf:34:8c:13:57:66:37:38:33:
         29:e8:b4:e4:df:07:82:47:47:2f:ad:5c:fc:8e:f3:fe:d4:8c:
         48:5b:83:cf:3b:e8:f1:2f:e3:25:42:35:84:f2:2b:5d:0f:29:
         3e:1f:2c:e2:dc:0a:61:d6:15:11:2e:98:fa:53:6c:89:4d:d9:
         a1:51:69:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----