Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/47FA81940C1011EEB429881C4AD9E6FC.roa
File:                     47FA81940C1011EEB429881C4AD9E6FC.roa (raw, json)
Hash identifier:          FKP0kNl58HwQrvXJJBjkPxm95hD1HEl56BkbS+Cc9Cc=
Subject key identifier:   D5:53:FF:E1:C2:81:40:47:4B:85:A5:F6:A5:46:77:CA:00:45:1B:A0
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0F90
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/47FA81940C1011EEB429881C4AD9E6FC.roa
Signing time:             Fri 16 Jun 2023 06:37:36 +0000
ROA not before:           Fri 16 Jun 2023 06:37:32 +0000
ROA not after:            Sun 15 Jun 2025 06:37:32 +0000
asID:                     49999
IP address blocks:        154.16.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3984 (0xf90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 16 06:37:32 2023 GMT
            Not After : Jun 15 06:37:32 2025 GMT
        Subject: CN=648c0330-21fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:86:3e:be:25:8b:99:c8:a5:fe:ca:76:15:
                    37:c6:5f:05:a2:a1:c0:28:ff:75:71:ea:7b:d4:02:
                    bc:d0:84:06:19:73:a3:e1:7e:a1:43:b1:20:74:6d:
                    57:d5:e0:7e:42:8c:9a:50:91:5f:c4:05:5e:ee:14:
                    99:ab:9d:43:ed:79:b5:ac:82:b9:bd:13:0a:59:ac:
                    85:96:86:ba:ab:89:43:7b:77:81:a5:b2:bb:ec:3d:
                    14:20:5c:f0:c8:2c:4e:a0:a2:a2:d2:ee:0c:d0:2e:
                    0a:7c:87:22:4a:85:d5:a3:18:30:c8:f7:80:2f:0c:
                    3e:4f:1c:de:fb:22:0e:c3:84:69:bb:d6:fb:32:38:
                    98:f2:3d:91:45:2e:48:5a:0b:10:69:2e:53:bb:5d:
                    64:b6:50:4b:c6:0b:0c:e2:2b:b7:10:c2:07:bf:d0:
                    d5:81:e7:da:5c:41:38:c6:64:ef:24:55:b1:92:04:
                    83:e8:76:80:d7:d9:df:0e:52:65:a6:0b:e1:9e:b7:
                    fd:92:11:a7:88:68:e5:a7:b9:55:10:59:84:e3:cf:
                    b5:80:ad:84:12:74:59:e4:37:c2:a7:40:7f:be:b5:
                    85:a1:49:a1:dc:5b:e8:2c:bb:88:bf:65:f2:a5:03:
                    11:27:d1:6a:1c:fb:b7:70:bb:0c:25:25:96:45:fc:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:53:FF:E1:C2:81:40:47:4B:85:A5:F6:A5:46:77:CA:00:45:1B:A0
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/47FA81940C1011EEB429881C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:db:4b:0a:d9:21:5c:5c:fb:a3:ea:38:a6:93:73:01:1d:e1:
         1b:56:31:df:b2:21:92:e8:dd:e3:4c:82:a3:d4:b6:66:1b:6f:
         69:97:50:b7:fc:89:d2:f1:3b:bc:a3:68:e6:74:86:07:8b:32:
         54:a3:c4:52:6c:22:af:f6:c4:1a:2b:a8:60:c6:ef:8f:18:4d:
         0f:48:ee:36:08:4a:22:83:60:48:29:9e:fa:a0:bb:6a:d0:b7:
         ed:2e:b7:88:8c:11:9e:c5:26:30:7a:fd:c3:5d:80:31:49:b9:
         b5:4b:a7:77:7c:ab:6e:fa:54:cf:1d:9e:39:3d:de:34:55:b1:
         0b:d0:e6:39:87:0e:42:f8:bf:3b:1d:34:b8:ce:d6:38:f6:55:
         c4:35:3c:98:0e:c1:c2:9c:85:12:ae:c7:8e:e3:8b:e5:29:22:
         34:f0:81:d7:1b:33:c6:b8:1f:83:af:78:d3:a7:db:59:a0:65:
         ad:74:f2:e1:b7:c6:ae:a3:f2:1a:41:3c:1c:17:ec:32:e9:ff:
         cc:9d:4f:12:f2:e5:77:70:3c:10:94:d1:69:43:cb:bf:3e:5d:
         e5:dc:a2:1b:74:36:1c:98:50:d0:00:2c:77:45:17:72:1e:3f:
         86:66:a3:ad:93:5f:7f:48:e5:aa:90:0d:b9:34:a8:45:2c:06:
         86:bd:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 12:14:21 2023 by rpki-client on console-ams.rpki-client.org