Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/36725BD685E211EDA058579DF1222468.roa
File:                     36725BD685E211EDA058579DF1222468.roa (raw, json)
Hash identifier:          Pg3b1f5i6DN2XGKiQxaVRqevBZaIOGSolPBub+QtWyw=
Subject key identifier:   1B:A7:E9:BC:1F:AD:9D:F7:54:63:08:82:21:35:42:F8:67:EF:C9:ED
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0B15
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/36725BD685E211EDA058579DF1222468.roa
Signing time:             Tue 27 Dec 2022 12:30:14 +0000
ROA not before:           Tue 27 Dec 2022 12:30:10 +0000
ROA not after:            Fri 27 Dec 2024 12:30:10 +0000
asID:                     207279
IP address blocks:        154.16.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2837 (0xb15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec 27 12:30:10 2022 GMT
            Not After : Dec 27 12:30:10 2024 GMT
        Subject: CN=63aae556-16fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9e:ff:06:95:5c:cc:3f:88:f3:c5:e0:6b:1e:
                    17:83:fe:2c:d4:93:97:85:e7:e4:05:b1:17:95:a1:
                    be:f9:22:fb:db:7c:31:5b:92:95:a1:53:12:d2:f5:
                    93:59:b5:b5:0f:7e:bb:6a:39:20:20:11:c2:33:c4:
                    6e:cd:eb:d9:af:1c:4d:0a:1c:02:78:b7:71:a1:16:
                    e7:d6:35:6d:32:28:40:e0:ca:9e:1d:65:60:dd:cf:
                    54:7d:83:37:d5:a6:78:b4:b7:8d:38:a9:d8:2c:b3:
                    55:b8:e1:17:93:00:99:cd:09:a8:f8:68:eb:52:5d:
                    88:38:99:77:14:0e:b6:c1:10:d0:9a:d9:ce:ff:a7:
                    ad:91:98:98:bf:e4:a3:43:a2:83:c7:ab:d8:c8:8d:
                    11:5e:4f:61:8e:76:d2:96:a7:0e:11:b8:db:b0:40:
                    42:25:28:de:dd:ea:65:b7:90:62:8a:8b:60:34:2e:
                    32:f6:0d:88:f1:3a:72:ac:bd:af:f0:9a:fe:23:65:
                    ab:0c:be:58:c2:c2:c0:45:16:6d:91:94:4b:25:29:
                    8d:9c:4b:93:4c:4e:9a:08:78:cf:85:66:3a:3d:12:
                    0c:0f:aa:d3:8b:b2:75:22:d0:01:00:11:ae:25:10:
                    84:6a:2e:1c:ce:5f:d5:99:d5:a5:43:46:87:cb:3b:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:E9:BC:1F:AD:9D:F7:54:63:08:82:21:35:42:F8:67:EF:C9:ED
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/36725BD685E211EDA058579DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:44:8e:ac:2d:ce:80:1d:51:b6:37:5a:26:d1:32:7f:23:47:
         ba:86:dc:8c:bc:ea:32:0f:ca:8a:96:1d:3b:9f:32:78:59:7b:
         4d:26:bb:ef:90:fb:3e:88:11:59:04:37:45:c0:54:31:86:82:
         e7:1f:6d:ae:10:9f:eb:89:9d:d1:e3:81:24:5c:3a:e0:85:88:
         67:93:3a:75:a4:07:98:9c:cb:01:6c:45:a9:84:68:4c:c1:f9:
         73:43:45:c8:b4:88:e6:66:0a:20:bf:1c:4d:d4:98:fe:2a:df:
         cc:2f:a0:49:b2:34:87:7e:33:d9:a0:09:5b:55:87:28:3d:9e:
         1f:f1:ff:79:76:09:3f:d0:41:a1:ae:99:ca:f3:29:69:7a:e0:
         bf:a9:31:5b:8e:1b:7d:19:57:1c:1e:db:ee:a5:15:a7:1f:c4:
         ec:55:c1:86:e1:22:b6:64:cd:e4:9a:dc:c1:05:85:fa:57:61:
         d3:04:3a:ea:cc:2b:08:62:bc:1e:a2:8f:c0:fa:e9:44:d4:cb:
         95:17:84:b7:63:18:c3:1c:84:89:a4:2a:50:d6:2f:a6:3d:69:
         05:3e:da:7e:1f:2d:49:cc:80:90:7a:ec:48:ad:59:fb:8b:0b:
         56:fe:fc:51:2d:c8:bb:08:8d:cd:3e:4e:8a:80:ab:f1:7a:e4:
         4f:d7:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org