Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63E4F6C6B43D11ED870A4EAAF1222468.roa
File:                     63E4F6C6B43D11ED870A4EAAF1222468.roa (raw, json)
Hash identifier:          Zrse7gspVkmmul5iZgeCzO0TE3fjh2xZCzJC/fal9Nw=
Subject key identifier:   37:B3:DB:6F:95:5B:68:5A:9A:66:63:2E:58:67:6B:EB:C6:04:C6:FE
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0C0D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63E4F6C6B43D11ED870A4EAAF1222468.roa
Signing time:             Fri 24 Feb 2023 12:18:48 +0000
ROA not before:           Fri 24 Feb 2023 12:18:43 +0000
ROA not after:            Sat 22 Feb 2025 12:18:43 +0000
asID:                     61317
IP address blocks:        154.16.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 07:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3085 (0xc0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 24 12:18:43 2023 GMT
            Not After : Feb 22 12:18:43 2025 GMT
        Subject: CN=63f8ab28-3380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:2d:c4:66:4d:f5:5f:e4:0c:d9:8c:e6:87:
                    f4:c4:bb:af:3c:cc:a7:88:3f:23:40:cf:6e:4d:b7:
                    66:48:af:d7:ef:3a:03:d1:f5:43:4e:ca:46:90:6f:
                    80:cb:26:ec:f2:94:e0:74:b4:63:2e:9b:78:39:c7:
                    dd:b6:25:5d:b6:e1:fa:f8:6f:bc:23:51:b6:c5:13:
                    e4:8c:6a:19:9b:28:bf:36:23:bd:2e:4b:24:cd:48:
                    bb:0a:7d:98:2f:74:da:d9:17:ac:25:2a:41:83:81:
                    88:73:ea:bb:7c:5c:74:e0:08:a6:c5:d3:72:79:b3:
                    6d:7e:6b:95:c2:d4:0b:6f:cb:85:ad:2d:7e:6c:25:
                    26:ca:18:2b:58:8b:a8:48:4b:84:4f:27:49:83:84:
                    b3:ea:2c:fc:c1:4f:8a:68:ca:fd:13:0f:ab:ff:75:
                    3a:d6:82:29:75:8e:64:fb:37:c5:c5:49:71:3c:77:
                    44:a8:33:1f:27:8a:9c:f8:f0:de:b5:ef:8e:62:7e:
                    1a:c8:e6:ae:d0:26:e5:f2:07:0e:97:f2:dd:9d:19:
                    1c:28:8c:1f:4f:95:b0:e9:bc:02:96:f7:21:2d:fc:
                    bc:e9:67:2e:31:08:7d:1d:ad:f6:0c:eb:db:a9:97:
                    cc:46:72:b0:c8:55:0b:ac:fb:d6:f5:1f:58:c9:49:
                    83:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B3:DB:6F:95:5B:68:5A:9A:66:63:2E:58:67:6B:EB:C6:04:C6:FE
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63E4F6C6B43D11ED870A4EAAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:07:46:50:bc:f1:57:55:bb:bf:28:6d:42:90:67:b3:c6:
         71:96:04:1f:57:d4:0e:9c:66:8c:5c:67:0a:19:45:75:c6:2b:
         62:8b:b6:8d:15:2a:78:a7:74:65:8d:f7:85:97:b1:c2:7b:28:
         1e:95:77:86:54:dd:fc:75:43:47:82:3a:11:c3:33:c8:64:e4:
         39:a2:ae:fc:85:3d:8a:75:85:c7:da:aa:74:ba:9a:bb:86:04:
         29:d9:b9:d4:6b:fc:71:93:99:62:20:9b:62:e6:a2:9b:e7:a1:
         01:07:68:ce:15:d1:59:8d:da:d4:0a:65:ec:7e:d0:1c:ab:a6:
         2a:33:88:6d:89:3d:86:2c:a8:dc:59:05:17:c7:9d:23:55:6a:
         af:63:63:a2:0b:f6:d3:62:d8:32:50:15:36:47:1e:9f:cf:e4:
         d4:00:8a:23:b7:63:85:5c:c8:e0:cc:9b:d8:81:6e:98:72:79:
         68:f2:cc:91:b9:e2:26:3e:99:27:d4:47:6f:65:4a:55:5b:f0:
         38:e1:09:8a:98:72:9c:95:cd:02:fa:74:70:df:b2:74:bc:36:
         37:91:37:27:dc:5b:42:86:6a:5a:9b:7b:d3:da:31:12:3f:01:
         8a:ce:26:36:0c:43:3c:ea:a9:f5:61:80:4f:c8:8a:71:7d:a4:
         d7:51:31:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 08:12:29 2024 by rpki-client on console-fra.rpki-client.org