Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5B8B625A3D7511EE915E834B4AD9E6FC.roa
File:                     5B8B625A3D7511EE915E834B4AD9E6FC.roa (raw, json)
Hash identifier:          DNr2Ax6OdNIix27PPe5QdAqiSwkJLWs8KXpwzPw8k9c=
Subject key identifier:   F3:1B:F3:80:01:C2:B6:08:1C:41:C6:49:D2:B8:10:57:3C:29:4F:3A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       118B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5B8B625A3D7511EE915E834B4AD9E6FC.roa
Signing time:             Fri 18 Aug 2023 03:14:35 +0000
ROA not before:           Fri 18 Aug 2023 03:14:31 +0000
ROA not after:            Mon 18 Aug 2025 03:14:31 +0000
asID:                     834
IP address blocks:        154.16.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4491 (0x118b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 18 03:14:31 2023 GMT
            Not After : Aug 18 03:14:31 2025 GMT
        Subject: CN=64dee21b-c77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:14:eb:b8:7e:15:68:14:de:99:a8:c5:a1:
                    70:a3:59:28:37:18:a4:a6:6c:08:05:cb:a2:75:4a:
                    66:ad:9e:f3:b0:a2:47:e6:29:e7:f8:47:51:74:4f:
                    a3:fa:55:34:58:9c:0c:6b:d5:06:72:90:a9:14:2c:
                    78:b4:96:2d:c7:df:b2:5f:8c:bd:ee:69:b3:6f:56:
                    ee:4f:db:aa:86:ed:bd:ef:a0:2f:ea:65:de:88:9c:
                    d4:10:cc:69:2d:e1:de:4f:72:00:58:bf:bd:11:17:
                    14:4c:ba:51:30:f1:3c:01:f5:6b:3a:d5:d6:7b:3f:
                    37:68:c5:e3:6f:98:7f:ca:4f:a1:04:6e:51:c7:09:
                    ee:92:f2:b3:e2:ca:ed:42:88:ae:87:60:fa:55:8b:
                    53:79:62:64:ce:6e:83:65:45:ce:59:0e:48:fa:26:
                    52:d8:50:66:75:c3:ba:9f:8c:31:81:2c:c4:73:2c:
                    1e:72:55:75:1d:7a:b7:da:f4:89:ea:1a:67:f2:e1:
                    d5:03:60:91:2c:b3:59:df:96:5f:08:b2:72:0e:68:
                    c5:ba:7e:3e:68:89:34:f1:10:e7:61:17:39:99:66:
                    87:68:bc:a2:6f:b7:37:98:d0:bd:3d:2c:85:63:a3:
                    6c:04:51:1d:3f:51:4c:ec:99:8e:78:73:b5:a2:50:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1B:F3:80:01:C2:B6:08:1C:41:C6:49:D2:B8:10:57:3C:29:4F:3A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5B8B625A3D7511EE915E834B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b5:0c:a3:7b:b6:15:93:dc:2e:5f:4a:9d:00:9a:f3:b0:17:
         86:f9:cb:25:86:71:dd:59:d5:73:b3:6f:8a:7c:ee:00:1c:92:
         81:43:d5:39:90:7e:f0:ad:c5:f6:08:e1:ff:df:f1:62:ec:2e:
         b2:68:03:e0:db:8d:84:88:15:34:0d:38:21:43:5b:16:51:d1:
         37:fb:2b:4a:88:e0:d3:3f:0b:27:4f:b8:ab:24:6b:89:29:15:
         a1:a5:1f:0f:76:31:85:76:e5:cc:c5:1a:fd:e0:b7:68:0c:c8:
         7d:bc:0c:a6:ff:9c:7e:3d:c6:06:44:0f:78:ef:87:c1:f9:39:
         8f:99:4a:12:ba:75:44:ff:12:66:a8:a8:fb:f1:71:62:20:e3:
         0a:1d:10:49:0e:0a:0a:00:45:c2:b3:49:63:fe:7c:08:67:fc:
         61:0c:2b:7b:29:9a:a8:03:a9:e2:d1:0d:6f:cc:d4:9e:f6:c6:
         1e:86:bc:96:34:38:e8:5b:66:64:49:83:f3:57:91:69:f5:b1:
         af:5c:61:cb:61:a9:2c:4c:64:7a:7d:47:ec:00:df:a4:b0:20:
         27:69:19:29:9a:6a:b7:5e:8d:ba:21:77:7d:87:27:f4:33:8c:
         43:10:6d:e6:a1:90:6a:5b:e0:61:27:4a:78:4a:68:c6:4a:0b:
         94:89:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----