Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5923DBE245B311ED995F99D5F1222468.roa
File:                     5923DBE245B311ED995F99D5F1222468.roa (raw, json)
Hash identifier:          NQz14pnmjMjpVNDLQZN8OfuRVYEMs/49z7xFD7lkXFU=
Subject key identifier:   78:73:1C:4D:7B:1A:CE:45:AF:20:F3:57:02:0B:41:2F:19:B3:48:90
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       09E6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5923DBE245B311ED995F99D5F1222468.roa
Signing time:             Thu 06 Oct 2022 20:13:32 +0000
ROA not before:           Thu 06 Oct 2022 20:13:27 +0000
ROA not after:            Fri 06 Oct 2023 20:13:27 +0000
asID:                     204843
IP address blocks:        154.16.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2534 (0x9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  6 20:13:27 2022 GMT
            Not After : Oct  6 20:13:27 2023 GMT
        Subject: CN=633f36eb-cd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:73:64:12:50:8e:f7:a4:33:46:53:cf:a7:
                    8b:d0:07:b1:3f:70:44:1f:1c:ff:0f:9a:38:f2:67:
                    3a:b8:3a:13:b5:75:4d:3c:70:0f:bc:c2:9e:8f:ce:
                    a2:f2:fa:b2:65:55:87:e7:74:03:5f:77:b9:0b:26:
                    06:15:aa:ed:86:e9:08:cf:47:20:1f:04:aa:8a:bd:
                    de:cc:ef:36:e9:81:65:35:89:9c:9f:86:e6:c2:e0:
                    bc:f2:66:28:96:45:65:ee:51:e4:c9:16:1e:25:98:
                    11:94:77:1f:00:da:83:40:80:c4:4a:e6:8b:bf:f4:
                    39:2e:3b:24:44:b0:05:1d:04:62:e8:9f:22:95:7e:
                    d3:87:9d:d0:ab:0c:75:e0:9e:85:18:d1:94:ed:03:
                    b2:03:a2:6c:49:23:cb:bf:d8:b1:1d:75:87:ec:76:
                    47:f6:d7:e5:e4:5c:58:2f:c3:12:84:08:04:d9:5f:
                    45:2f:37:82:d6:30:dd:1c:7e:09:a8:ed:55:91:32:
                    5c:d7:17:7c:9b:b7:fa:9e:90:b2:7a:2b:b5:3a:f2:
                    6e:8a:08:4c:6d:8a:29:34:76:ab:b5:cf:0f:8a:90:
                    9f:e0:2e:e8:e3:48:cd:d9:4c:80:49:d6:2d:1d:2f:
                    68:8d:9a:60:32:37:b0:88:3d:37:cc:60:09:25:5c:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:73:1C:4D:7B:1A:CE:45:AF:20:F3:57:02:0B:41:2F:19:B3:48:90
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5923DBE245B311ED995F99D5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:96:e3:bb:3b:56:a3:9d:38:54:46:46:10:41:78:3b:30:58:
         4c:20:85:06:a9:04:83:70:37:fd:af:41:cd:9e:ac:2a:11:4e:
         5d:13:2d:29:83:d0:8c:65:c8:37:97:9a:67:5f:f0:4e:37:32:
         b1:db:73:95:3a:6f:8e:df:71:b9:27:c1:52:8a:03:26:02:b6:
         64:12:6e:09:82:2f:65:e6:3f:34:73:46:6d:cd:43:9b:45:c5:
         41:98:ac:fd:d3:1b:cf:6a:9c:8b:5b:8e:6b:03:07:6f:e0:be:
         4e:d1:cf:15:01:c1:48:ef:22:f0:00:ae:69:84:0a:e3:3c:3b:
         6d:10:9d:45:8a:b5:9f:d0:fe:c0:ce:88:c1:3a:ab:14:dc:1c:
         7c:c5:7a:b9:ae:d2:17:af:e9:97:a0:fb:44:99:8b:03:31:96:
         5a:01:72:a3:8d:eb:44:a5:c7:4e:b1:fd:e9:3b:79:e9:64:d8:
         20:9c:80:22:e6:3f:10:a5:3d:8d:e7:8c:e0:2d:5c:c9:84:d7:
         2c:f8:c9:e9:2f:2c:ce:6e:f3:6c:23:97:81:cb:ed:e0:c4:3c:
         8a:55:ff:18:d4:03:67:75:50:b1:e9:81:d7:ca:29:15:7a:81:
         c7:48:2a:93:dd:7a:18:41:b7:ab:59:50:b5:61:92:0f:ee:75:
         11:5b:2e:55
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCeYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjEwMDYyMDEzMjdaFw0yMzEwMDYyMDEzMjdaMBgxFjAU
BgNVBAMMDTYzM2YzNmViLWNkNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEQ3NkElCO96QzRlPPp4vQB7E/cEQfHP8PmjjyZzq4OhO1dU08cA+8wp6P
zqLy+rJlVYfndANfd7kLJgYVqu2G6QjPRyAfBKqKvd7M7zbpgWU1iZyfhubC4Lzy
ZiiWRWXuUeTJFh4lmBGUdx8A2oNAgMRK5ou/9DkuOyREsAUdBGLonyKVftOHndCr
DHXgnoUY0ZTtA7IDomxJI8u/2LEddYfsdkf21+XkXFgvwxKECATZX0UvN4LWMN0c
fgmo7VWRMlzXF3ybt/qekLJ6K7U68m6KCExtiik0dqu1zw+KkJ/gLujjSM3ZTIBJ
1i0dL2iNmmAyN7CIPTfMYAklXNDNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUeHMc
TXsazkWvIPNXAgtBLxmzSJAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzU5MjNEQkUyNDVCMzExRUQ5OTVGOTlENUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENQwDQYJKoZIhvcNAQEL
BQADggEBAF+W47s7VqOdOFRGRhBBeDswWEwghQapBINwN/2vQc2erCoRTl0TLSmD
0IxlyDeXmmdf8E43MrHbc5U6b47fcbknwVKKAyYCtmQSbgmCL2XmPzRzRm3NQ5tF
xUGYrP3TG89qnItbjmsDB2/gvk7RzxUBwUjvIvAArmmECuM8O20QnUWKtZ/Q/sDO
iME6qxTcHHzFermu0hev6Zeg+0SZiwMxlloBcqON60Slx06x/ek7eelk2CCcgCLm
PxClPY3njOAtXMmE1yz4yekvLM5u82wjl4HL7eDEPIpV/xjUA2d1ULHpgdfKKRV6
gcdIKpPdehhBt6tZULVhkg/udRFbLlU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org