Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32AAC6F2B43911EDADD2EF9DF1222468.roa
File:                     32AAC6F2B43911EDADD2EF9DF1222468.roa (raw, json)
Hash identifier:          ORzdKBYZbdMag3ea1AR4fZaMLCDzsd9Sl9SPPU20nnU=
Subject key identifier:   A6:19:02:08:88:51:2C:BD:31:84:3D:DF:27:C2:85:37:B0:06:C8:DA
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0BED
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32AAC6F2B43911EDADD2EF9DF1222468.roa
Signing time:             Fri 24 Feb 2023 11:48:47 +0000
ROA not before:           Fri 24 Feb 2023 11:48:44 +0000
ROA not after:            Sat 22 Feb 2025 11:48:44 +0000
asID:                     61317
IP address blocks:        154.16.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3053 (0xbed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 24 11:48:44 2023 GMT
            Not After : Feb 22 11:48:44 2025 GMT
        Subject: CN=63f8a41f-39a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:27:ae:c2:66:34:44:56:ad:77:7d:81:83:
                    9e:6b:58:4a:0e:b7:e5:e1:ba:f9:a2:27:88:46:85:
                    06:70:74:cb:72:ed:b9:2c:b0:17:04:0d:5e:ed:98:
                    f4:3d:9c:eb:39:ef:65:7b:05:ce:77:6d:a0:df:12:
                    86:be:6a:0d:8d:d3:3a:80:b2:bc:18:7b:e2:f2:23:
                    93:a0:a1:a7:f5:dc:13:02:f1:16:af:57:55:f2:30:
                    f2:18:f8:ed:52:a2:37:dc:98:83:69:4f:6e:5e:c6:
                    7c:fb:29:34:15:dc:6d:ae:83:b8:3b:a7:3c:35:fb:
                    1c:94:4b:26:c9:82:e2:2f:49:04:a0:0f:c1:8a:ad:
                    e0:25:5f:08:71:a0:8f:dd:32:42:36:e6:d5:36:62:
                    14:80:10:3c:82:37:02:59:81:0b:a8:8a:70:2b:6e:
                    40:66:1b:87:dc:b4:bd:7c:89:ec:33:2e:f6:28:eb:
                    66:d9:d2:57:99:a7:4d:cb:24:1b:b8:97:23:ed:28:
                    fc:9f:91:6a:58:54:85:6b:05:08:c9:68:4b:a0:cc:
                    c4:e7:e2:58:9b:7e:3e:f9:ea:45:52:fa:13:2c:33:
                    78:cd:2f:e2:e7:e5:14:a8:16:69:87:89:d8:a5:b5:
                    39:f9:38:4f:39:4d:26:ce:96:37:54:d3:c8:29:cd:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:19:02:08:88:51:2C:BD:31:84:3D:DF:27:C2:85:37:B0:06:C8:DA
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32AAC6F2B43911EDADD2EF9DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e9:6c:d8:01:52:6b:51:41:ff:4b:d0:44:7d:df:cd:33:f1:
         3d:07:dc:5f:99:5e:db:59:0a:ed:d0:3c:d1:06:5f:4b:9b:72:
         d4:7c:3a:85:9c:96:f4:bb:7d:d2:ab:75:98:6c:bd:1a:53:74:
         5d:87:06:9f:97:c0:f5:ff:b7:17:60:fa:a5:87:55:d6:64:3b:
         54:3e:fa:52:45:af:57:47:d0:67:ea:28:33:f6:45:0f:41:33:
         78:ba:54:7e:f0:6e:d5:e7:bd:0b:91:9b:f1:81:72:70:a7:d3:
         64:5c:72:6d:23:d1:5f:06:01:af:f1:69:19:44:c0:f6:2e:1a:
         ae:20:62:32:5a:ab:57:c0:4f:da:32:d9:77:c4:c6:c4:42:40:
         31:27:7d:98:ae:78:a0:ae:9f:4f:7b:5a:99:02:d3:a8:bb:8d:
         99:aa:5e:96:a0:79:7d:d0:72:97:fc:34:5b:0a:86:1f:da:7a:
         cd:14:20:9d:7b:b8:6d:fc:9f:2c:e2:e4:2f:39:8d:a2:e8:24:
         d9:13:57:b2:9d:9a:2b:1d:3c:53:d7:cd:46:e7:46:ee:c6:89:
         97:81:a1:31:41:54:da:ae:d3:56:22:5e:40:53:53:10:c8:76:
         47:34:18:1f:7b:30:65:2a:f7:7f:69:38:99:bf:db:fa:1f:b4:
         70:67:90:63
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjQxMTQ4NDRaFw0yNTAyMjIxMTQ4NDRaMBgxFjAU
BgNVBAMMDTYzZjhhNDFmLTM5YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBJSeuwmY0RFatd32Bg55rWEoOt+XhuvmiJ4hGhQZwdMty7bkssBcEDV7t
mPQ9nOs572V7Bc53baDfEoa+ag2N0zqAsrwYe+LyI5Ogoaf13BMC8RavV1XyMPIY
+O1SojfcmINpT25exnz7KTQV3G2ug7g7pzw1+xyUSybJguIvSQSgD8GKreAlXwhx
oI/dMkI25tU2YhSAEDyCNwJZgQuoinArbkBmG4fctL18iewzLvYo62bZ0leZp03L
JBu4lyPtKPyfkWpYVIVrBQjJaEugzMTn4libfj756kVS+hMsM3jNL+Ln5RSoFmmH
idiltTn5OE85TSbOljdU08gpzc2XAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUphkC
CIhRLL0xhD3fJ8KFN7AGyNowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzMyQUFDNkYyQjQzOTExRURBREQyRUY5REYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBAwDQYJKoZIhvcNAQEL
BQADggEBAJTpbNgBUmtRQf9L0ER9380z8T0H3F+ZXttZCu3QPNEGX0ubctR8OoWc
lvS7fdKrdZhsvRpTdF2HBp+XwPX/txdg+qWHVdZkO1Q++lJFr1dH0GfqKDP2RQ9B
M3i6VH7wbtXnvQuRm/GBcnCn02Rccm0j0V8GAa/xaRlEwPYuGq4gYjJaq1fAT9oy
2XfExsRCQDEnfZiueKCun097WpkC06i7jZmqXpageX3Qcpf8NFsKhh/aes0UIJ17
uG38nyzi5C85jaLoJNkTV7KdmisdPFPXzUbnRu7GiZeBoTFBVNqu01YiXkBTUxDI
dkc0GB97MGUq939pOJm/2/oftHBnkGM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org