Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8EAC19B20C1611EEA1A3B02E4AD9E6FC.roa
File:                     8EAC19B20C1611EEA1A3B02E4AD9E6FC.roa (raw, json)
Hash identifier:          7MexQOus75qprApbm8awGL9Pje25bTtKuEKXzrJtb6k=
Subject key identifier:   08:18:BD:BF:B4:C4:1B:30:C0:4D:45:9C:28:3C:E1:FB:54:BC:40:59
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0F95
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8EAC19B20C1611EEA1A3B02E4AD9E6FC.roa
Signing time:             Fri 16 Jun 2023 07:22:32 +0000
ROA not before:           Fri 16 Jun 2023 07:22:28 +0000
ROA not after:            Sun 15 Jun 2025 07:22:28 +0000
asID:                     140155
IP address blocks:        154.16.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3989 (0xf95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 16 07:22:28 2023 GMT
            Not After : Jun 15 07:22:28 2025 GMT
        Subject: CN=648c0db8-bdbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:a2:02:73:a8:bc:7e:03:6c:2b:8b:b6:fb:
                    de:74:99:3d:41:14:1b:73:b8:68:62:55:df:42:2f:
                    a9:03:07:0c:21:66:7f:41:15:66:78:bc:05:30:c1:
                    04:70:ab:67:a2:cf:68:42:b1:e9:29:f7:a9:fe:7c:
                    51:59:fa:32:99:f2:98:75:ea:27:49:b1:d0:3c:65:
                    22:88:fa:98:8d:2e:d5:37:ac:a6:c1:a4:65:1b:21:
                    5f:41:79:79:5b:ae:7b:85:7a:4b:0a:cb:3b:9c:a4:
                    b6:3b:12:dc:ed:21:ce:89:86:1a:31:17:1a:74:74:
                    72:39:29:af:b7:43:2c:2e:33:f4:57:0d:40:64:31:
                    74:96:4f:b0:23:f3:14:bc:57:49:7f:24:39:68:0a:
                    e8:5c:81:59:c5:4e:66:2a:4e:48:c1:4c:eb:45:13:
                    4f:53:17:06:ab:37:40:df:51:9c:81:6a:b3:0f:f4:
                    b8:98:0a:9e:6a:81:c3:5b:4d:82:b9:7e:2a:c2:23:
                    2f:e6:4c:6c:dc:f2:93:db:d1:1b:7a:d9:28:45:36:
                    df:dc:fe:d8:8d:d2:74:0b:92:29:2d:69:39:7a:9e:
                    a6:b9:bb:51:1b:7f:a2:d7:cd:5b:6c:6e:3a:8a:3c:
                    33:89:dd:c4:47:ce:13:c4:ef:7d:b0:11:f0:01:42:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:18:BD:BF:B4:C4:1B:30:C0:4D:45:9C:28:3C:E1:FB:54:BC:40:59
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8EAC19B20C1611EEA1A3B02E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:7f:8d:f9:a9:d3:07:06:6d:2c:c1:cd:6b:50:e4:cd:f3:2c:
         91:13:0b:c0:f5:73:7f:6a:73:e4:58:51:4f:ff:4b:b8:be:21:
         3a:46:66:3a:d0:6d:46:42:ed:db:f9:a8:b8:e8:c8:3e:02:ac:
         ee:c8:c7:89:51:16:f2:a2:2e:55:bf:f4:ce:1d:61:54:6c:86:
         f6:c9:3f:06:3c:1a:db:83:36:06:08:3e:f7:a3:9c:92:38:25:
         43:45:77:d4:d4:0b:d5:4f:4b:7c:34:d6:bc:8b:2e:b7:5c:cd:
         26:aa:3d:84:4f:f8:8e:48:35:4d:01:2c:70:12:e6:80:ab:22:
         d8:88:8d:fe:b7:d6:7a:22:18:8f:7a:63:80:66:f7:aa:1c:1a:
         ba:9c:cb:05:17:de:52:cd:c9:a5:df:96:45:c5:ec:a6:e7:98:
         70:f0:8e:be:d6:7b:12:87:c5:dc:58:a8:74:2b:60:c4:9d:4e:
         e8:37:30:d9:ce:9f:e1:7c:ec:f0:fa:ec:53:b8:ee:07:e4:08:
         f0:ff:9c:e8:31:eb:e7:50:a7:55:3e:7d:bf:9a:13:e3:dc:ab:
         a9:e0:ab:89:ed:fb:a2:00:4c:d0:9c:09:6a:55:d5:2a:04:c4:
         56:33:57:8b:ba:f3:06:23:23:82:47:0f:e5:f0:67:17:83:31:
         e7:ab:47:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org