Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/956654A02B3B11ED80272890F1222468.roa
File:                     956654A02B3B11ED80272890F1222468.roa (raw, json)
Hash identifier:          1alkLAx5H107wTpOA/6XUomG9OubnaWJ+4Cd6Ju5IA8=
Subject key identifier:   2A:3A:D4:55:A6:D9:88:93:01:9F:92:05:F1:96:B6:AB:D7:6C:D7:41
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       098B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/956654A02B3B11ED80272890F1222468.roa
Signing time:             Sat 03 Sep 2022 03:50:43 +0000
ROA not before:           Sat 03 Sep 2022 03:50:37 +0000
ROA not after:            Sun 01 Sep 2024 03:50:37 +0000
asID:                     40676
IP address blocks:        154.16.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2443 (0x98b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  3 03:50:37 2022 GMT
            Not After : Sep  1 03:50:37 2024 GMT
        Subject: CN=6312cf13-fedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f7:c4:6c:0d:89:18:67:f5:e6:76:95:5b:76:
                    75:5d:da:94:4d:c9:71:26:3a:b2:71:04:ca:94:a4:
                    56:04:53:3f:d0:62:65:a8:ff:72:6c:4c:c4:d9:16:
                    e2:3f:03:62:e7:f2:7f:60:61:fd:d7:6d:1c:80:7a:
                    de:25:47:e3:24:0c:5b:73:e4:20:f7:e2:09:70:2f:
                    19:6e:c7:8f:8a:d0:f8:23:d3:be:a7:5e:28:77:fd:
                    b0:c1:61:a1:d9:f4:b6:7c:cb:95:2d:ca:ca:9c:df:
                    fe:27:8b:d8:71:30:6a:42:32:5f:06:bd:8e:98:16:
                    58:ef:27:70:45:af:0f:29:e9:71:5f:e6:e6:e7:60:
                    f8:2c:c2:41:c4:c4:9b:a1:bd:85:be:62:94:54:ca:
                    bb:ec:d0:9d:22:04:62:0d:eb:31:3b:ac:9d:39:8c:
                    f0:59:de:57:6d:98:3c:b2:b6:f7:3c:39:c2:64:12:
                    1c:b9:34:cb:c0:3f:1c:b2:18:12:a6:31:94:ec:ef:
                    0e:85:f9:6e:a0:9c:96:58:27:95:84:29:a3:31:13:
                    4e:d4:3b:7e:18:72:4c:48:07:01:33:0a:24:96:2d:
                    cd:31:76:d0:98:8b:9e:22:9a:e3:3b:34:2f:45:64:
                    19:5c:29:e1:21:51:2a:33:af:5a:50:49:dc:2a:de:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3A:D4:55:A6:D9:88:93:01:9F:92:05:F1:96:B6:AB:D7:6C:D7:41
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/956654A02B3B11ED80272890F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:2a:9f:bd:f0:c3:ae:a2:b1:62:29:b3:87:a0:b1:7f:44:2c:
         dd:e5:72:f8:88:5f:4e:fb:12:1c:98:c2:d5:32:a9:06:fe:b4:
         64:f2:4a:9c:b0:bc:f4:7f:42:36:3b:96:5d:12:38:be:e6:24:
         41:76:46:f8:d5:59:da:d0:d0:8e:5f:3f:c4:b7:68:e6:25:23:
         60:ec:ae:b4:09:4b:7e:9d:aa:33:89:8b:c5:da:19:8c:88:7a:
         4e:1c:b1:86:40:3b:58:23:b9:83:16:28:a1:78:b2:8c:fb:ba:
         58:99:86:d7:4b:79:fe:f9:43:c5:fd:00:7d:1b:fc:6a:06:57:
         45:7d:6e:ef:2c:1e:c9:95:3f:b8:c3:6a:b5:74:45:85:ba:9e:
         4e:55:5f:1f:56:29:16:71:0f:69:1e:45:70:8a:b8:ca:4c:45:
         42:31:fb:fc:23:3f:6b:5b:25:21:99:2a:6d:e7:99:e4:6a:02:
         27:5b:24:9c:39:62:c2:23:a3:54:4b:cb:eb:1d:2b:97:06:97:
         13:13:45:e9:bb:34:90:43:a1:87:7f:f8:71:ef:b0:5c:aa:c5:
         87:b0:3e:1d:a3:74:19:1a:3a:e4:5a:ac:94:7b:f0:56:62:22:
         b5:84:45:ea:67:2f:13:94:26:3f:1e:17:c1:85:de:8f:15:4b:
         77:33:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org