Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60EC6110241911EEB79E4B134AD9E6FC.roa
File:                     60EC6110241911EEB79E4B134AD9E6FC.roa (raw, json)
Hash identifier:          48UBMnl5Go0EY4SDcco3u44zr5fjiPlSpDowH9hba5A=
Subject key identifier:   57:11:D5:CD:6B:0C:37:5F:C5:30:C6:6E:6B:E7:80:E3:ED:E7:02:8B
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       109E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60EC6110241911EEB79E4B134AD9E6FC.roa
Signing time:             Sun 16 Jul 2023 20:43:11 +0000
ROA not before:           Sun 16 Jul 2023 20:43:08 +0000
ROA not after:            Tue 15 Jul 2025 20:43:08 +0000
asID:                     834
IP address blocks:        154.16.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4254 (0x109e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jul 16 20:43:08 2023 GMT
            Not After : Jul 15 20:43:08 2025 GMT
        Subject: CN=64b4565f-7692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:08:5c:9c:c3:c3:44:11:60:42:63:1b:bc:
                    60:ee:f2:ef:1b:d8:8f:b3:94:68:2c:53:d8:55:05:
                    d5:02:76:04:e5:ff:cd:54:f3:12:ce:0f:e4:38:dc:
                    66:d7:31:c4:47:c7:12:72:a3:4b:44:1f:90:e6:52:
                    97:8f:d4:73:8b:a6:5a:ac:a1:ba:00:65:43:cf:1d:
                    ab:bd:8b:85:10:43:c9:40:09:49:68:bb:41:65:6a:
                    77:a8:3f:57:bc:2c:06:77:ef:7e:e4:24:46:2f:66:
                    0b:03:43:70:14:7b:ca:d1:66:66:d9:6e:c9:de:6f:
                    d1:9a:49:14:06:b3:7d:db:6d:50:c8:85:86:f8:39:
                    0b:59:82:d4:af:05:35:f6:22:13:d4:4c:9d:59:43:
                    5b:9e:cf:a0:d7:86:d6:9d:7e:5e:82:ee:4c:61:32:
                    cc:fc:56:41:9b:3a:f2:44:14:ee:8a:dc:b4:ab:ed:
                    e7:58:54:3a:cb:71:d0:f4:39:d7:75:fc:2a:b0:78:
                    99:da:83:9f:c7:24:f1:9b:ac:97:96:e7:21:e4:51:
                    81:5e:61:6b:de:bd:07:df:4a:38:98:54:dc:0e:93:
                    e7:32:8b:a8:07:28:22:5a:26:1d:e6:32:39:64:c3:
                    77:0f:01:65:08:0c:b2:1a:5f:4c:b7:f7:ac:94:e0:
                    56:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:11:D5:CD:6B:0C:37:5F:C5:30:C6:6E:6B:E7:80:E3:ED:E7:02:8B
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60EC6110241911EEB79E4B134AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:9a:cf:d7:e2:14:d2:42:9f:f6:db:a8:35:3e:59:ee:b3:0c:
         46:b4:21:b8:f5:b9:51:82:55:6b:d4:98:3d:71:01:b1:87:2a:
         68:07:f1:03:86:31:01:84:2e:ac:b4:dd:64:d7:5f:3c:10:9f:
         ad:c8:52:97:1e:36:1a:ba:bb:6a:75:16:8f:e1:d3:19:3a:5e:
         e9:6e:bf:ad:2f:10:18:d6:16:66:fb:4b:7b:41:94:51:28:46:
         b2:bf:54:49:70:28:69:de:d9:4f:c3:9e:8f:32:1d:52:03:83:
         dc:5c:4f:f4:cd:50:39:b0:73:5f:0c:1c:12:7d:81:90:8c:08:
         43:37:93:aa:0a:7c:cb:e3:22:0b:e9:9c:0d:2c:f2:53:f4:77:
         3a:14:2b:71:dc:ee:3b:8e:1a:ce:6e:ec:6f:c1:69:99:ba:8b:
         1a:da:49:3c:a3:83:67:28:74:de:e4:c3:d0:d2:6a:21:9f:8a:
         a7:09:af:66:e4:65:a0:21:9a:2c:ac:c7:06:81:95:32:9a:2c:
         a3:02:9c:92:6b:a0:91:73:cb:b0:4d:79:dc:b5:70:0e:98:f2:
         5f:70:79:d9:18:9d:b1:7b:6a:99:f3:a3:de:a0:8b:9f:8c:a3:
         a7:bf:bb:3d:70:6f:b0:da:fd:dc:bf:0d:9b:aa:f1:de:d3:0f:
         10:8c:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 13:51:07 2023 by rpki-client on console-fra.rpki-client.org