Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A26EE18C2A0311ED8AAC1BC7F1222468.roa
File:                     A26EE18C2A0311ED8AAC1BC7F1222468.roa (raw, json)
Hash identifier:          ezKSifFFaqCI2ifwzyALjHVfo6NQnl7PeS1XjYlG5Dw=
Subject key identifier:   1B:20:4F:09:AA:2C:75:D6:BD:E8:48:4C:5D:A6:3E:84:6A:13:CD:8A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       097E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A26EE18C2A0311ED8AAC1BC7F1222468.roa
Signing time:             Thu 01 Sep 2022 14:37:42 +0000
ROA not before:           Thu 01 Sep 2022 14:37:38 +0000
ROA not after:            Thu 05 Sep 2024 14:37:38 +0000
asID:                     22773
IP address blocks:        154.16.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2430 (0x97e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  1 14:37:38 2022 GMT
            Not After : Sep  5 14:37:38 2024 GMT
        Subject: CN=6310c3b6-a7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:b3:56:45:f0:09:56:30:58:88:af:1c:41:
                    ad:db:d1:c0:40:bf:d5:61:da:21:45:27:28:7b:1f:
                    06:d5:55:2c:c7:f3:13:99:f1:08:45:35:d6:74:1f:
                    f4:85:98:ad:5f:c0:da:d0:16:11:2c:40:94:2b:60:
                    9b:d6:7f:a8:76:b0:fc:2b:a5:a5:24:28:50:1c:8a:
                    ff:06:7b:93:8c:af:6f:37:9c:d7:d1:10:06:a6:34:
                    cb:63:0b:9f:32:5d:eb:92:2d:2c:73:05:54:a5:0a:
                    bc:33:85:f2:23:1f:17:48:42:6a:84:d4:4f:09:aa:
                    78:4e:c7:5f:47:35:90:13:ff:ba:b4:06:31:63:d0:
                    f9:93:07:2d:e0:ac:8c:1c:a8:61:24:a6:e5:35:39:
                    90:56:e0:a3:df:22:9f:69:e7:12:3e:ce:33:d6:8c:
                    2a:eb:fe:5f:c2:79:cb:4f:3f:ad:90:7a:7d:85:a1:
                    40:45:17:72:ed:f6:61:87:62:a6:80:e9:79:4d:7f:
                    1f:a6:6d:28:2d:51:71:d4:26:b5:33:11:76:d3:d5:
                    3b:59:6a:96:08:cb:36:df:29:f8:5f:08:64:71:b9:
                    a8:77:b2:e2:6e:f0:15:af:f8:a9:a9:d5:42:cb:47:
                    bb:75:f8:79:32:13:92:80:d3:0b:a4:a4:0f:f8:17:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:20:4F:09:AA:2C:75:D6:BD:E8:48:4C:5D:A6:3E:84:6A:13:CD:8A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A26EE18C2A0311ED8AAC1BC7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:12:69:8d:82:13:8a:d7:fb:e8:e1:ba:0e:de:da:fc:80:2e:
         08:c7:1d:fc:d4:53:6a:74:fd:ed:ad:0c:c7:16:2e:50:08:10:
         1a:5a:c7:9e:16:8c:f8:36:14:f3:e0:59:00:32:ab:f7:a8:6e:
         ab:f3:4f:ec:8b:71:97:ad:72:f2:7a:70:6f:e3:91:23:10:1a:
         18:10:93:2f:df:f8:cb:0e:59:fc:c9:25:d5:e0:97:bc:6d:5a:
         2e:4b:8d:8c:22:82:d1:4a:ca:07:ef:28:7c:92:bf:3f:ea:6c:
         fa:51:7c:02:67:64:9e:53:ea:d9:c3:0a:a3:1b:57:bc:c6:4d:
         a4:15:31:4c:e7:f7:c8:00:c2:bb:cb:9e:55:04:9d:86:b1:ed:
         87:4a:62:e7:bf:d9:fa:5e:9e:fa:91:3c:f0:1a:43:ba:cd:2a:
         48:14:65:15:9e:50:e9:c4:15:2a:e7:2d:c3:db:4e:cf:7d:1e:
         d3:1f:cf:b7:9e:40:04:36:2b:47:58:8a:54:e0:23:ed:b4:86:
         7f:73:df:f0:07:97:16:ce:8a:2e:d5:43:2a:eb:10:65:43:28:
         a0:23:3f:19:dd:cc:d9:51:00:8c:d2:2c:62:f1:78:1a:df:68:
         b0:17:15:8d:5e:ae:cf:41:a1:a6:82:a4:e3:5b:dd:59:40:c2:
         81:be:10:96
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCX4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA5MDExNDM3MzhaFw0yNDA5MDUxNDM3MzhaMBgxFjAU
BgNVBAMMDTYzMTBjM2I2LWE3ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0c7NWRfAJVjBYiK8cQa3b0cBAv9Vh2iFFJyh7HwbVVSzH8xOZ8QhFNdZ0
H/SFmK1fwNrQFhEsQJQrYJvWf6h2sPwrpaUkKFAciv8Ge5OMr283nNfREAamNMtj
C58yXeuSLSxzBVSlCrwzhfIjHxdIQmqE1E8JqnhOx19HNZAT/7q0BjFj0PmTBy3g
rIwcqGEkpuU1OZBW4KPfIp9p5xI+zjPWjCrr/l/CectPP62Qen2FoUBFF3Lt9mGH
YqaA6XlNfx+mbSgtUXHUJrUzEXbT1TtZapYIyzbfKfhfCGRxuah3suJu8BWv+Kmp
1ULLR7t1+HkyE5KA0wukpA/4FysVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUGyBP
Caosdda96EhMXaY+hGoTzYowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0EyNkVFMThDMkEwMzExRUQ4QUFDMUJDN0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEMIwDQYJKoZIhvcNAQEL
BQADggEBAGASaY2CE4rX++jhug7e2vyALgjHHfzUU2p0/e2tDMcWLlAIEBpax54W
jPg2FPPgWQAyq/eobqvzT+yLcZetcvJ6cG/jkSMQGhgQky/f+MsOWfzJJdXgl7xt
Wi5LjYwigtFKygfvKHySvz/qbPpRfAJnZJ5T6tnDCqMbV7zGTaQVMUzn98gAwrvL
nlUEnYax7YdKYue/2fpenvqRPPAaQ7rNKkgUZRWeUOnEFSrnLcPbTs99HtMfz7ee
QAQ2K0dYilTgI+20hn9z3/AHlxbOii7VQyrrEGVDKKAjPxndzNlRAIzSLGLxeBrf
aLAXFY1ers9BoaaCpONb3VlAwoG+EJY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org