Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/268A0FD2078011EEA4DC085A4AD9E6FC.roa
File:                     268A0FD2078011EEA4DC085A4AD9E6FC.roa (raw, json)
Hash identifier:          9Jhl8v5y8j1TxTsHyX9dA/wgoRj0Hos7IhcBalxaeU4=
Subject key identifier:   47:47:BF:0F:91:51:33:BF:4E:AD:D5:4E:24:C8:F4:BF:B9:27:BA:DC
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0F26
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/268A0FD2078011EEA4DC085A4AD9E6FC.roa
Signing time:             Sat 10 Jun 2023 11:15:48 +0000
ROA not before:           Sat 10 Jun 2023 11:15:44 +0000
ROA not after:            Tue 10 Jun 2025 11:15:44 +0000
asID:                     14445
IP address blocks:        154.16.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 07:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3878 (0xf26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 10 11:15:44 2023 GMT
            Not After : Jun 10 11:15:44 2025 GMT
        Subject: CN=64845b64-a61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:42:9e:1b:b0:3d:ba:cf:08:1d:db:9b:22:
                    24:28:28:be:8b:a6:97:f8:89:84:27:9a:b0:61:6d:
                    81:1d:61:de:a1:6a:47:d8:6c:18:1e:98:75:8e:ec:
                    fe:4a:1b:88:21:36:cc:d9:27:18:c9:45:04:0b:60:
                    da:56:31:72:3b:e3:a1:1e:d9:b1:be:f9:da:70:d3:
                    5b:df:c3:6e:21:2b:78:e7:ce:32:2c:73:b3:8c:cc:
                    0f:25:1c:4f:71:b2:e1:98:e1:03:4e:a9:d8:2d:00:
                    f9:8a:33:52:45:d5:e6:99:1c:48:70:70:8e:3d:ca:
                    44:c7:98:e7:27:9d:1f:c9:2e:0a:19:13:b8:0f:81:
                    e3:5d:f3:8f:4a:73:01:6e:7a:b0:59:89:d1:cc:89:
                    5d:6d:b0:1b:5e:e5:95:82:0b:fa:10:03:b8:8f:a9:
                    eb:4a:85:59:f6:8a:ad:0d:5e:0f:e2:5b:08:37:45:
                    3c:72:94:d1:c2:5a:0f:92:d1:4d:96:58:87:2e:c3:
                    c7:82:f2:e2:dc:c0:52:71:d5:e8:9e:27:1a:a4:87:
                    c1:71:f8:93:97:2a:66:9d:8a:17:a3:d3:68:ee:52:
                    73:0d:62:96:e3:a4:6d:8f:b9:a1:2e:3b:fe:e5:03:
                    8d:29:b3:b2:c9:d1:b6:f5:e5:8e:44:e8:cc:a2:56:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:47:BF:0F:91:51:33:BF:4E:AD:D5:4E:24:C8:F4:BF:B9:27:BA:DC
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/268A0FD2078011EEA4DC085A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f9:f2:d4:fc:3f:f7:0c:02:f8:26:93:64:d0:51:aa:82:9b:
         46:c5:f7:17:ba:68:da:b8:a6:c2:f4:9b:fb:ff:91:76:04:de:
         48:25:ca:bc:bd:ed:59:c2:82:45:2b:87:f5:e1:dd:03:27:b0:
         7b:69:b6:c0:9c:bf:ed:2e:ae:76:c0:c3:b5:d7:60:e0:6b:c7:
         0a:dc:15:10:ff:53:43:88:05:1f:80:43:41:cc:00:91:ea:f9:
         f9:31:82:59:d5:9e:ef:47:15:ef:b6:21:cb:4e:6b:1a:a5:00:
         d1:40:bd:a4:3c:a7:02:91:3e:e2:f5:47:15:a8:aa:ba:a8:a0:
         a6:08:86:37:5b:4a:27:80:c2:6e:38:a6:91:36:9c:ca:5d:ae:
         d0:97:6f:3b:94:c7:59:52:68:25:e8:b5:16:ba:db:34:d7:45:
         4c:72:0e:e4:7d:0f:c9:e5:37:0d:5d:67:cc:a7:33:d7:f9:9e:
         95:ea:cd:51:54:60:3f:93:60:4b:e8:65:e7:01:cb:12:99:d6:
         c5:98:c1:c3:dd:5e:20:5a:1b:bc:cd:8a:d4:9d:e1:01:b1:a0:
         50:98:99:fe:6d:97:4b:90:94:65:0d:ec:73:8d:49:7f:15:ff:
         6c:44:b0:d8:0a:0a:f6:a2:69:d5:70:5d:7e:69:5a:75:05:95:
         57:2f:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 11:50:11 2024 by rpki-client on console-ams.rpki-client.org