Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4F9FF0443AA711EEAE9DCF2A4AD9E6FC.roa
File:                     4F9FF0443AA711EEAE9DCF2A4AD9E6FC.roa (raw, json)
Hash identifier:          QuJWrDWR6T5KYllpj848EAN2w3KrXxirFag01aVPPdg=
Subject key identifier:   E9:20:59:68:61:31:86:27:D2:B1:A9:FB:F6:2F:6D:54:EA:57:88:EC
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       115F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4F9FF0443AA711EEAE9DCF2A4AD9E6FC.roa
Signing time:             Mon 14 Aug 2023 13:34:37 +0000
ROA not before:           Mon 14 Aug 2023 13:34:33 +0000
ROA not after:            Wed 13 Aug 2025 13:34:33 +0000
asID:                     398465
IP address blocks:        154.16.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4447 (0x115f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 14 13:34:33 2023 GMT
            Not After : Aug 13 13:34:33 2025 GMT
        Subject: CN=64da2d6c-207d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:52:6b:91:82:cd:fc:44:b9:d9:17:52:39:
                    e2:ba:c3:2b:2a:49:46:57:25:9f:19:af:cd:8a:4a:
                    0f:44:60:73:41:59:40:f2:f5:39:8b:28:8e:b3:22:
                    15:4a:da:26:6f:e9:51:a9:e4:9c:30:db:3c:05:9c:
                    c4:09:36:55:b5:b4:ae:f6:40:2f:43:b0:92:78:f2:
                    54:ea:be:a8:93:43:8c:07:9b:f1:ff:60:81:ae:bd:
                    23:38:bd:98:fc:9b:c5:67:a9:18:30:b4:b9:5e:3c:
                    5c:45:12:07:4e:35:d0:da:04:07:9c:b2:67:55:ef:
                    00:f7:e5:2a:00:63:24:bc:42:92:32:ba:30:1a:21:
                    36:b1:b9:24:a4:ff:ff:85:a5:94:bb:bf:cb:2d:0d:
                    c9:4f:e6:59:54:fe:ed:9c:32:f7:c8:cd:00:41:44:
                    ec:14:6b:91:d3:f1:1c:9d:97:a2:d4:ab:e9:a6:fc:
                    e4:e6:41:13:86:74:e7:87:75:12:57:4c:5d:28:8a:
                    f8:fd:62:69:d2:0e:dd:9c:84:02:ee:16:25:88:25:
                    1a:e5:71:e9:d7:b7:34:05:13:f1:ab:aa:12:b5:4a:
                    8a:ae:0b:a7:d0:3b:ab:87:3d:1d:56:91:70:bd:55:
                    13:d7:7f:b6:a8:45:21:64:3c:fc:8a:54:0c:19:5a:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:20:59:68:61:31:86:27:D2:B1:A9:FB:F6:2F:6D:54:EA:57:88:EC
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4F9FF0443AA711EEAE9DCF2A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:10:21:13:53:59:46:a1:ec:d7:54:7c:e0:e3:56:bc:83:
         f3:05:e3:c2:35:8c:bc:65:93:44:e0:9b:af:0b:5e:45:2c:02:
         71:d5:79:f9:04:8c:3f:f1:ab:15:39:16:1d:71:92:8c:d2:61:
         eb:fb:8c:14:4a:3c:3c:d2:06:42:17:06:4c:51:71:46:cd:17:
         b1:c7:a9:c4:e1:e5:75:cc:92:bc:d5:b5:3d:82:ae:b9:21:d4:
         43:08:52:4b:24:51:9c:16:a8:52:cd:35:5f:f9:16:0e:ca:d1:
         3d:5d:6c:9f:76:af:4b:98:f9:ea:df:51:8f:e0:ed:ca:3c:aa:
         8e:dd:e8:38:de:ab:f5:32:15:3e:84:25:80:9d:72:65:76:02:
         91:5f:33:ec:82:25:26:14:1a:b6:bb:68:3d:0e:e9:16:9d:a1:
         19:e3:0d:33:51:4d:00:af:88:a1:57:0c:64:21:3b:76:52:d1:
         df:1c:95:cc:59:de:7e:c1:8f:90:57:43:2f:93:38:66:c4:d9:
         30:bc:5d:8e:54:13:3b:b7:87:af:fc:dc:ba:83:bf:de:27:54:
         10:a2:78:e7:5c:53:5f:5c:18:88:98:c7:35:ee:5e:bc:4e:1d:
         8a:53:80:46:eb:ae:18:6a:8f:2a:94:5b:61:26:a6:93:1f:b8:
         da:36:3e:ae
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEV8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA4MTQxMzM0MzNaFw0yNTA4MTMxMzM0MzNaMBgxFjAU
BgNVBAMTDTY0ZGEyZDZjLTIwN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVBlJrkYLN/ES52RdSOeK6wysqSUZXJZ8Zr82KSg9EYHNBWUDy9TmLKI6z
IhVK2iZv6VGp5Jww2zwFnMQJNlW1tK72QC9DsJJ48lTqvqiTQ4wHm/H/YIGuvSM4
vZj8m8VnqRgwtLlePFxFEgdONdDaBAecsmdV7wD35SoAYyS8QpIyujAaITaxuSSk
//+FpZS7v8stDclP5llU/u2cMvfIzQBBROwUa5HT8Rydl6LUq+mm/OTmQROGdOeH
dRJXTF0oivj9YmnSDt2chALuFiWIJRrlcenXtzQFE/GrqhK1SoquC6fQO6uHPR1W
kXC9VRPXf7aoRSFkPPyKVAwZWiNDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6SBZ
aGExhifSsan79i9tVOpXiOwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzRGOUZGMDQ0M0FBNzExRUVBRTlEQ0YyQTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGUwDQYJKoZIhvcNAQEL
BQADggEBAHbxECETU1lGoezXVHzg41a8g/MF48I1jLxlk0Tgm68LXkUsAnHVefkE
jD/xqxU5Fh1xkozSYev7jBRKPDzSBkIXBkxRcUbNF7HHqcTh5XXMkrzVtT2Crrkh
1EMIUkskUZwWqFLNNV/5Fg7K0T1dbJ92r0uY+erfUY/g7co8qo7d6Djeq/UyFT6E
JYCdcmV2ApFfM+yCJSYUGra7aD0O6RadoRnjDTNRTQCviKFXDGQhO3ZS0d8clcxZ
3n7Bj5BXQy+TOGbE2TC8XY5UEzu3h6/83LqDv94nVBCieOdcU19cGIiYxzXuXrxO
HYpTgEbrrhhqjyqUW2EmppMfuNo2Pq4=
-----END CERTIFICATE-----