Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56EDFBB8F48311EC94166DA6F1222468.roa
File:                     56EDFBB8F48311EC94166DA6F1222468.roa (raw, json)
Hash identifier:          O95vJniCP82h3pslbyWfByR+br+pFqaayBulM8AYPSg=
Subject key identifier:   ED:53:31:F1:DA:6F:48:73:C5:31:77:95:D2:75:79:0A:E6:4C:D3:17
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       08BA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56EDFBB8F48311EC94166DA6F1222468.roa
Signing time:             Sat 25 Jun 2022 12:35:48 +0000
ROA not before:           Sat 25 Jun 2022 12:35:44 +0000
ROA not after:            Tue 25 Jun 2024 12:35:44 +0000
asID:                     60721
IP address blocks:        154.127.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2234 (0x8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 25 12:35:44 2022 GMT
            Not After : Jun 25 12:35:44 2024 GMT
        Subject: CN=62b70124-5524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:48:84:40:a1:9f:da:a0:89:d1:17:c9:7d:
                    c3:ea:d5:f9:88:f3:2d:7a:aa:10:bc:5e:e9:35:fb:
                    1d:d9:6c:02:7a:f0:f1:f5:f7:eb:52:db:ad:e7:ab:
                    6f:e3:51:67:32:11:e0:11:11:f4:cc:12:f0:08:1a:
                    15:21:58:38:38:64:7e:58:6b:9a:18:cf:06:8e:27:
                    c9:52:56:77:96:18:99:78:35:6c:2a:23:b5:28:0d:
                    e8:ce:f0:1e:1e:15:7f:3e:0b:e7:e5:1e:2c:30:f5:
                    37:33:8e:79:42:dd:10:f4:dd:76:49:9b:0a:10:33:
                    a1:81:98:94:53:fe:f5:22:e3:1a:b0:5f:e3:29:c4:
                    1b:ec:12:3d:30:7f:59:14:39:57:75:92:00:9d:8b:
                    11:81:75:8e:31:31:f3:61:63:ea:5f:a4:33:fd:4a:
                    bb:cf:ea:04:17:18:d1:d2:6f:af:09:fd:5d:2d:e4:
                    c3:c3:d1:96:fa:ad:5c:09:52:53:70:ff:91:3d:5e:
                    99:67:9b:f3:76:b2:80:56:35:7d:12:4a:da:53:ee:
                    bf:ee:43:6b:96:26:83:34:b1:4e:38:b7:22:20:df:
                    5f:90:13:87:c2:66:b9:96:4a:e0:50:e3:54:f5:6d:
                    a9:06:2d:7c:5f:71:03:6a:f0:1c:cd:91:dd:68:13:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:53:31:F1:DA:6F:48:73:C5:31:77:95:D2:75:79:0A:E6:4C:D3:17
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56EDFBB8F48311EC94166DA6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:65:32:a9:df:52:5f:b7:a9:61:5c:63:97:44:eb:04:ba:b8:
         3c:52:44:c9:0e:92:9a:8a:55:e8:55:c2:72:c5:49:12:49:9f:
         22:8e:24:f2:aa:22:f9:d4:aa:06:63:5a:37:7f:e3:ee:55:66:
         1f:ce:98:e1:26:b3:03:de:f3:4a:10:0b:cf:85:dc:99:49:ba:
         60:73:3c:7f:08:da:60:bd:07:ad:e5:39:83:1d:ef:df:10:db:
         a1:0b:a2:d3:ec:6d:10:0f:48:14:52:79:53:41:a5:3c:3f:2f:
         8f:a0:a7:34:a2:14:b5:1d:8e:3a:86:bc:0f:1c:35:f3:4f:3c:
         8b:7c:70:11:af:2d:52:38:bf:58:25:03:75:3c:90:da:fa:53:
         7c:c3:0e:c6:29:fb:cb:14:06:7f:4a:1b:c4:22:b1:9a:a6:eb:
         f9:4d:1c:0d:89:5a:69:51:44:0c:58:a5:98:8e:86:f3:fd:66:
         63:e0:dd:e0:83:57:3c:35:4c:cf:8e:04:c2:d6:05:bd:9c:a0:
         50:f4:08:49:93:e5:21:45:72:99:ce:88:9c:9a:ff:b2:89:7e:
         32:06:54:26:5d:88:7d:41:28:bc:50:c7:90:1e:13:06:8d:a1:
         85:4d:db:c0:03:ff:6c:dd:3d:c9:bf:d2:14:1b:fc:fe:63:c9:
         07:5f:0b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org