Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/389B31E2DA9411ED9D3A340F306D8C1D.roa
File:                     389B31E2DA9411ED9D3A340F306D8C1D.roa (raw, json)
Hash identifier:          JzTYKwmht/D8lprwrQR+YGbt7mSPf6863RCHPMGv/xo=
Subject key identifier:   64:F6:0D:57:8C:27:65:83:69:58:78:F3:20:1F:E8:DC:F4:36:1C:82
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0D61
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/389B31E2DA9411ED9D3A340F306D8C1D.roa
Signing time:             Fri 14 Apr 2023 07:16:06 +0000
ROA not before:           Fri 14 Apr 2023 07:16:02 +0000
ROA not after:            Tue 09 Apr 2024 07:16:02 +0000
asID:                     834
IP address blocks:        154.16.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3425 (0xd61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Apr 14 07:16:02 2023 GMT
            Not After : Apr  9 07:16:02 2024 GMT
        Subject: CN=6438fdb6-2283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:bb:58:1a:56:f1:9f:f0:85:9f:ee:e9:39:
                    20:4c:9a:b6:ee:3e:78:ee:e5:9b:71:be:6b:75:0b:
                    1b:b0:02:00:99:b0:43:b8:36:4e:7a:5b:6d:8c:ad:
                    65:71:9b:50:f7:25:e2:a7:ad:f5:7b:ee:73:15:a9:
                    58:91:66:83:cc:f4:ef:9d:d5:1a:20:ee:87:30:e4:
                    41:33:af:e8:6d:84:03:24:d0:f9:a8:86:73:97:62:
                    11:50:70:21:14:b5:03:c1:74:e2:6e:24:19:7f:39:
                    79:e1:9e:8d:f9:4d:eb:f0:ff:f6:8b:41:7d:3d:4d:
                    40:f1:46:6c:0a:50:f8:65:9a:97:de:fc:a2:a4:3a:
                    4b:e1:40:d1:e5:db:f0:8f:43:38:aa:e7:96:70:fa:
                    f1:22:96:3f:0e:f5:d2:f8:86:d6:34:a7:47:ca:e6:
                    7e:70:c0:0e:b8:93:10:c1:7e:20:6e:71:e1:d4:24:
                    ee:53:07:75:a4:7b:b7:b4:91:a5:63:7b:1a:1a:dc:
                    d1:02:4d:bf:f4:13:1a:72:94:1f:87:75:86:24:ec:
                    72:1a:3d:0e:5f:7c:ac:0e:2f:38:00:a1:d9:bc:8b:
                    9a:12:a7:35:6a:60:82:74:84:97:e8:3e:2f:70:4b:
                    3a:11:5f:03:b2:3d:04:7c:41:03:28:53:d7:75:f1:
                    a6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F6:0D:57:8C:27:65:83:69:58:78:F3:20:1F:E8:DC:F4:36:1C:82
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/389B31E2DA9411ED9D3A340F306D8C1D.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:74:f1:4b:55:1a:2e:d3:3e:34:78:41:28:43:fe:4d:52:7e:
         b4:2b:01:ac:57:4c:3c:9c:6b:61:29:bd:a0:25:82:66:23:55:
         ba:2b:9a:58:bc:5e:a9:5c:df:be:8c:f4:08:b7:0f:7d:56:e2:
         36:5e:ca:bf:e7:70:03:56:76:8e:8f:48:d0:0a:25:f0:8a:f3:
         a1:51:c6:3e:52:e9:49:c7:af:e4:6d:1e:e8:b8:41:a2:c1:0b:
         27:eb:98:2f:35:6b:01:de:c3:d5:d2:d0:bf:67:31:9c:c7:19:
         3c:ec:83:b2:c9:ed:5a:49:3f:f9:80:53:ce:bf:54:9d:0b:a0:
         55:09:e6:f5:76:44:d6:15:ec:33:bb:a8:32:cc:b9:27:bb:98:
         11:c1:25:7f:7f:0f:cb:c0:5d:96:77:2f:02:e8:9f:09:e6:d9:
         75:1b:fd:46:74:52:21:51:d3:74:a1:8a:70:40:0c:df:36:f2:
         e6:29:b6:4f:e8:4b:d3:21:c7:21:ad:db:91:b4:79:70:19:34:
         1b:62:11:fb:e9:45:fa:bc:58:51:40:43:90:00:61:fc:be:32:
         79:c5:ab:c0:dd:ad:80:13:b1:27:17:64:b9:76:4f:14:c4:e4:
         c1:1b:a7:8e:e0:b7:63:a2:38:db:20:da:cf:cd:a4:e9:aa:be:
         00:80:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org