Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2C3121EEB69211ED880C9BB7F1222468.roa
File:                     2C3121EEB69211ED880C9BB7F1222468.roa (raw, json)
Hash identifier:          ESAq8O82SOhUqqhMuweck9X95YW3wFO8OwFJLrsEcVU=
Subject key identifier:   D2:06:AD:F2:B5:E7:19:CF:AE:2E:1A:6D:17:6C:1F:FC:E4:94:8C:23
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0C46
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2C3121EEB69211ED880C9BB7F1222468.roa
Signing time:             Mon 27 Feb 2023 11:30:44 +0000
ROA not before:           Mon 27 Feb 2023 11:30:40 +0000
ROA not after:            Thu 27 Feb 2025 11:30:40 +0000
asID:                     61317
IP address blocks:        154.16.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3142 (0xc46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 27 11:30:40 2023 GMT
            Not After : Feb 27 11:30:40 2025 GMT
        Subject: CN=63fc9464-a7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:84:48:3b:48:18:7d:86:52:2e:80:78:26:
                    b8:cf:c6:ec:c9:8b:ec:5e:5e:e4:7b:92:df:37:30:
                    c9:df:9c:24:32:a0:52:7c:ac:87:b6:29:d4:d4:fd:
                    94:42:10:bd:18:d1:94:cd:37:ef:a3:7b:de:0e:a4:
                    c0:eb:7a:30:b9:4e:fe:1d:1d:cd:36:34:0f:0d:90:
                    88:e6:d1:9c:47:82:c3:c8:42:18:3f:88:3a:64:b5:
                    34:b3:a4:08:46:1d:cc:0c:9c:78:e0:18:6b:36:aa:
                    a4:aa:81:87:fa:d5:0a:97:9f:90:35:e0:e3:3f:94:
                    3e:da:e0:05:18:7b:ec:72:aa:11:0d:ee:b9:99:e0:
                    03:f3:bf:c7:a7:65:29:05:7b:28:54:33:f8:71:a3:
                    f5:6e:80:e0:7c:92:0e:7b:95:c2:b4:a0:5d:c0:94:
                    09:18:a5:0b:6c:f1:8d:5e:f4:85:ac:3c:ff:e6:1e:
                    ea:7b:f1:00:ff:7e:25:f8:6c:fd:45:2f:f7:25:e6:
                    0d:7d:53:74:5b:4b:b9:82:6e:0c:9a:c3:d4:29:7f:
                    b0:34:bc:d5:21:5e:10:0f:f1:4d:21:e8:d1:28:97:
                    3f:74:21:0d:40:13:76:c5:5a:6d:8b:f4:bb:2f:f6:
                    8a:50:6c:df:2a:f1:31:35:d4:62:06:7e:b5:04:8b:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:06:AD:F2:B5:E7:19:CF:AE:2E:1A:6D:17:6C:1F:FC:E4:94:8C:23
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2C3121EEB69211ED880C9BB7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:92:f0:85:85:21:e4:4f:3f:3c:cf:5f:4a:b6:90:4d:7f:52:
         b7:12:be:38:5c:79:70:ec:99:9e:a8:fc:c7:f1:f1:7b:6f:aa:
         2a:9a:fe:82:ac:6f:dd:25:ba:6f:95:0a:52:ac:98:f4:af:b3:
         e5:8e:18:d0:fa:c5:a0:fc:3b:90:93:8f:fe:2a:e2:66:35:93:
         b0:ee:15:84:ed:ab:2d:95:51:7a:a3:f3:6c:50:c5:90:42:14:
         39:a6:33:5e:cb:1c:8a:96:fb:9b:e4:99:65:8a:7f:a0:8e:98:
         dc:15:de:5f:a7:27:c4:0a:d1:56:5f:81:4c:b9:45:19:38:15:
         1d:61:8d:84:43:4b:a2:a5:46:b7:1a:ac:c6:da:6a:22:a9:86:
         75:c7:69:42:77:7f:13:ed:ea:72:0c:d5:f9:45:33:fd:8e:a3:
         4c:26:4e:b4:82:55:40:ad:08:fa:2b:29:35:f0:41:43:df:78:
         d1:5a:de:19:16:3b:15:75:81:49:e3:4e:ba:8d:a0:e0:2d:de:
         c4:5d:0c:f4:a6:79:24:ea:95:19:84:78:32:5d:4c:58:2f:cc:
         98:35:03:0b:19:ea:05:e5:cf:49:f9:62:88:8f:94:9d:8a:58:
         0e:df:61:03:f2:32:83:16:2c:d3:28:be:06:15:40:47:85:1b:
         97:30:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org