Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A441CEEB69511ED9B8B75C0F1222468.roa
File:                     2A441CEEB69511ED9B8B75C0F1222468.roa (raw, json)
Hash identifier:          UvPASbmnABfVzgkZndd3cg3ulQU+S/npNWdxpKwoDEE=
Subject key identifier:   68:A2:2C:AE:24:0B:8C:6D:F3:19:9B:47:B4:8E:2A:0A:31:D7:18:E0
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0C69
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A441CEEB69511ED9B8B75C0F1222468.roa
Signing time:             Mon 27 Feb 2023 11:52:09 +0000
ROA not before:           Mon 27 Feb 2023 11:52:06 +0000
ROA not after:            Thu 27 Feb 2025 11:52:06 +0000
asID:                     61317
IP address blocks:        154.16.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 07:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3177 (0xc69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 27 11:52:06 2023 GMT
            Not After : Feb 27 11:52:06 2025 GMT
        Subject: CN=63fc9969-a726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ea:84:47:90:a0:c7:02:62:ce:96:6f:60:e5:
                    ca:02:80:1d:eb:cc:fb:93:bb:c1:2c:40:14:7b:c3:
                    19:3a:db:a8:45:66:1b:11:5e:a3:de:89:83:22:2c:
                    a6:e4:cc:f5:e4:a1:b3:1a:88:bd:e3:bd:37:26:48:
                    66:6e:a1:7a:cc:73:55:ff:c0:1f:fb:de:4d:5f:24:
                    39:f5:ca:01:18:cc:7a:45:a8:87:79:9f:65:24:68:
                    5c:9a:19:d0:71:be:22:b8:26:fb:29:8e:6d:04:85:
                    87:54:f6:e2:7f:3a:86:4b:93:54:c2:77:66:21:56:
                    8f:9c:ad:ab:4a:ee:6e:cb:d7:a7:9b:d6:47:2c:58:
                    92:3f:7a:67:cd:2e:ed:f2:4e:72:98:f6:2e:a9:b3:
                    9f:f5:cc:60:89:37:3b:99:71:09:9d:ee:bd:4f:ce:
                    21:a0:e0:7d:c6:ef:15:af:d3:c2:ee:09:39:62:4f:
                    a9:dc:bb:3d:45:bf:0f:fc:5c:fe:f7:cc:ac:53:03:
                    c4:4a:c1:45:7d:85:6a:4c:fd:ca:d4:6b:d5:b3:c1:
                    8e:d2:b3:34:04:6d:c3:53:d5:2a:b1:66:2c:67:08:
                    d7:f9:fb:ab:08:2e:1d:04:09:69:b9:3d:12:c6:48:
                    b3:68:8a:62:57:2c:ba:71:ed:65:a4:89:e1:dd:5c:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A2:2C:AE:24:0B:8C:6D:F3:19:9B:47:B4:8E:2A:0A:31:D7:18:E0
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A441CEEB69511ED9B8B75C0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:1c:0d:bf:69:5b:16:3c:1f:02:eb:b5:b1:8c:23:4b:70:43:
         02:a2:60:c9:b3:2f:7f:08:24:23:7e:99:db:8b:30:2f:c9:61:
         5b:8c:9e:6b:25:84:91:c4:a0:49:3c:d7:b0:e8:c3:64:3e:d7:
         f6:e1:67:97:ff:fc:2d:b8:56:a6:6f:4a:b4:e3:ed:82:e2:a6:
         09:5c:dd:fb:65:01:90:93:b5:4b:82:a7:2a:e2:e6:5e:8a:44:
         db:46:c6:41:6d:15:26:67:35:71:4f:c3:3b:6b:82:1c:ad:91:
         59:30:34:35:1b:9f:57:65:93:05:c1:cc:78:18:02:86:86:f1:
         92:76:90:07:56:29:51:2d:b6:31:6f:29:bc:9b:ba:30:eb:9c:
         49:92:b4:5c:af:d7:da:39:54:61:a6:a7:b3:c2:0b:20:e9:fd:
         a0:b8:be:02:d4:34:a5:dd:4e:d6:e0:e5:bf:79:54:5f:ce:22:
         50:0a:73:79:aa:df:1c:9d:9a:bb:99:aa:f5:e1:f1:25:64:bb:
         22:33:c0:a8:4a:40:5d:2e:2a:97:0e:19:ec:82:74:59:98:59:
         4e:8e:e6:73:7b:f1:d7:dc:51:a7:e1:36:ce:08:e1:d8:20:f9:
         a1:87:2c:c0:e6:c4:3e:96:ea:09:a6:37:4d:9f:c3:12:16:45:
         e9:ba:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 08:14:49 2024 by rpki-client on console-ams.rpki-client.org