Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31641EC6005411EE962627114AD9E6FC.roa
File:                     31641EC6005411EE962627114AD9E6FC.roa (raw, json)
Hash identifier:          ckd3ijJ6JWlA2kmmm4IaQhJmI3njZYkXs5DkEx5xzqU=
Subject key identifier:   E0:DC:76:26:9B:7F:88:6B:DC:06:D7:CE:A4:BF:93:A7:6B:7C:C6:63
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0E9B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31641EC6005411EE962627114AD9E6FC.roa
Signing time:             Thu 01 Jun 2023 08:13:30 +0000
ROA not before:           Thu 01 Jun 2023 08:13:26 +0000
ROA not after:            Sun 01 Jun 2025 08:13:26 +0000
asID:                     834
IP address blocks:        154.16.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3739 (0xe9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun  1 08:13:26 2023 GMT
            Not After : Jun  1 08:13:26 2025 GMT
        Subject: CN=6478532a-5e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:e5:82:52:03:ca:27:d3:16:a3:f9:f4:51:
                    00:18:6c:e0:cc:88:18:79:a1:f4:14:eb:33:7b:a7:
                    ee:19:1d:6f:48:e4:9f:f1:ff:e2:a4:b5:a7:7e:50:
                    fa:35:3f:ab:e1:14:9e:5f:e1:9f:1a:2f:43:7c:1f:
                    36:7a:e6:ed:94:9b:dd:96:0d:70:fe:3b:82:22:79:
                    be:4c:21:8c:a9:26:16:82:68:d6:ba:3c:12:9d:22:
                    23:80:98:6e:d7:bc:ee:34:7a:df:12:27:e3:53:31:
                    93:aa:9c:10:04:4b:bb:b2:7c:68:54:8e:a4:04:f1:
                    17:3f:f1:80:54:f7:9f:b5:e4:40:15:6b:13:62:6b:
                    09:e6:5e:1b:ee:5d:59:9e:9a:d9:dd:ac:f5:10:0a:
                    a3:c7:76:5f:f7:0c:a9:9f:c1:61:b7:3f:8e:78:83:
                    cd:df:8d:7d:34:d8:f8:5f:04:cc:42:d7:89:4a:23:
                    f5:79:b3:66:38:80:ec:ad:b6:34:2c:5b:0a:83:06:
                    35:0b:ae:15:c5:93:2a:7b:43:0e:c1:b0:63:0c:d2:
                    a2:e5:b5:44:e2:e9:fe:9f:7a:d0:ef:49:7f:b9:f1:
                    11:21:5c:84:65:b9:12:6c:0f:8a:b2:1e:9b:f8:21:
                    0f:06:69:06:53:43:69:23:2e:f2:b7:a3:ba:06:ec:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DC:76:26:9B:7F:88:6B:DC:06:D7:CE:A4:BF:93:A7:6B:7C:C6:63
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31641EC6005411EE962627114AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:30:c8:26:bf:97:0e:df:d8:ea:51:1c:ca:31:1e:3b:c0:16:
         76:c1:b1:ed:25:fa:c6:80:7b:60:a3:c0:74:67:cf:83:c1:1a:
         ff:fd:eb:74:b9:70:29:21:a0:3f:b8:aa:ad:ac:76:50:c8:52:
         1c:a2:99:0d:ae:69:70:83:72:a3:b0:60:f0:3b:03:73:93:92:
         5c:2f:9e:fd:89:64:0d:f4:be:b5:de:85:8f:b4:77:b5:db:e3:
         04:9c:b6:f5:e9:2f:93:73:e5:fb:39:82:ec:20:2f:69:9e:fc:
         38:d2:4c:3e:93:8e:47:87:2d:de:f7:48:2b:17:0f:68:2f:bc:
         51:f3:bc:45:b2:99:43:44:97:96:e9:a7:2e:5e:53:18:66:22:
         cf:1a:2f:4b:a7:d1:c5:be:7b:08:e7:c3:49:8a:84:f6:3f:0f:
         5a:a9:42:e1:ba:82:1c:22:a0:05:35:d2:3b:3c:18:49:27:20:
         99:a3:99:34:08:26:ff:06:2e:0e:b4:96:5d:5d:83:c9:94:28:
         20:3f:bf:6b:99:86:75:d1:bb:e5:51:be:40:8f:8e:b7:3f:1e:
         a3:c2:01:ed:a1:f5:76:78:bd:f4:ed:29:fe:91:b3:1c:7d:0d:
         87:3f:a7:cc:8c:58:d1:be:25:54:2f:c1:53:2f:ed:4c:79:9b:
         87:3c:ba:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org