Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/45D10B302A0311ED892436C6F1222468.roa
File:                     45D10B302A0311ED892436C6F1222468.roa (raw, json)
Hash identifier:          oztQn/k8GhJxD0Z+M1SEnoE/V/gWQVnyr93i4Ei+lKA=
Subject key identifier:   00:C1:46:BE:3F:3A:F0:39:27:4A:1C:64:A2:73:66:B3:CC:E4:CC:F6
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       097A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/45D10B302A0311ED892436C6F1222468.roa
Signing time:             Thu 01 Sep 2022 14:35:06 +0000
ROA not before:           Thu 01 Sep 2022 14:35:03 +0000
ROA not after:            Thu 05 Sep 2024 14:35:03 +0000
asID:                     22773
IP address blocks:        154.16.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2426 (0x97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  1 14:35:03 2022 GMT
            Not After : Sep  5 14:35:03 2024 GMT
        Subject: CN=6310c31a-98b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:00:3d:32:26:87:f0:a3:b6:99:01:be:37:
                    f3:05:a6:2d:45:17:f6:b8:1b:ec:35:66:28:b8:ee:
                    da:c1:2a:01:e1:85:ec:83:d4:28:5e:fb:b0:a1:e9:
                    14:17:a0:5e:6e:4a:67:5e:f4:08:92:40:d4:0a:24:
                    60:da:94:ca:fe:5c:48:69:ff:e2:4b:9f:ec:60:6b:
                    d0:ba:61:ab:eb:1c:33:c1:db:51:15:38:b2:06:f8:
                    ac:60:86:76:8f:0e:81:fa:96:ac:31:87:41:4a:49:
                    50:c1:86:88:c2:72:a9:c5:67:94:36:23:94:48:94:
                    e2:c5:2c:8d:0a:0b:b5:5a:b5:09:09:fa:89:36:e9:
                    25:a5:f4:48:55:0b:b8:af:d8:a9:c5:62:15:5c:d2:
                    bf:55:82:b9:c3:44:f2:fd:d5:a8:e4:37:6c:ed:fb:
                    76:c6:11:74:da:42:b7:f6:f4:f1:af:c5:f2:ad:a8:
                    46:e9:3a:f8:82:37:ea:18:8c:86:6e:32:51:27:ae:
                    60:c9:fb:7c:dd:70:39:97:fc:0f:73:b3:07:cd:06:
                    a7:12:45:08:7a:31:fe:b0:c8:e8:e1:09:b1:aa:c9:
                    69:09:6e:90:dc:3a:96:e3:30:a5:78:c6:ed:7d:b1:
                    3a:62:3d:e8:49:fb:45:88:41:66:bb:7f:a8:13:d4:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C1:46:BE:3F:3A:F0:39:27:4A:1C:64:A2:73:66:B3:CC:E4:CC:F6
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/45D10B302A0311ED892436C6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:64:1d:7f:89:63:b8:36:54:00:38:89:2a:84:ef:36:16:c5:
         dc:dc:04:4c:35:bd:a7:70:e5:d1:fe:57:d8:b3:d3:b7:e1:48:
         e2:66:24:6b:ff:2a:e7:0e:2e:e6:26:55:2e:45:33:21:ba:01:
         dc:78:c6:6f:a0:ac:0f:5f:f5:8f:a7:26:3a:45:78:3e:97:ff:
         46:f3:e7:c8:5a:c0:5b:57:6c:e9:0b:78:38:ee:8c:32:73:8f:
         ae:d9:dd:f4:91:dc:2b:df:ac:e2:f7:69:8b:b0:4f:c6:7d:2f:
         c3:31:4d:cf:f8:4c:2b:45:7c:ce:3d:59:f9:6d:ab:3b:4e:50:
         c6:0c:cc:12:60:39:8b:78:b6:db:ba:d9:98:16:13:b6:0b:10:
         85:2b:c0:89:9e:c5:c6:fe:26:55:07:9d:8f:1a:4f:71:b1:f7:
         01:07:a7:a6:36:5c:b7:51:71:aa:14:67:36:72:9f:fa:e2:fa:
         e0:3c:9c:22:81:2b:19:85:c5:90:b3:16:7a:7d:1f:29:f1:53:
         d0:ff:89:1a:eb:c0:ca:d2:d4:62:05:84:5f:a9:7e:00:23:7a:
         cc:a3:4b:d6:18:0f:62:30:11:1f:52:b6:c8:13:38:4c:c7:d0:
         0a:e3:3f:7b:dd:15:83:2c:14:46:0f:ff:27:a3:80:37:70:c2:
         9d:ad:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org