Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AE10478843F211EEA687536C4AD9E6FC.roa
File:                     AE10478843F211EEA687536C4AD9E6FC.roa (raw, json)
Hash identifier:          eM9iwRovtVWG8rrj3BGnX6TYyqE7aHz3h/OOwIBc1A8=
Subject key identifier:   59:E5:62:92:47:F3:4B:94:51:97:E5:DB:22:95:4B:82:3A:05:53:76
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       11B6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AE10478843F211EEA687536C4AD9E6FC.roa
Signing time:             Sat 26 Aug 2023 09:26:48 +0000
ROA not before:           Sat 26 Aug 2023 09:26:44 +0000
ROA not after:            Sat 30 Aug 2025 09:26:44 +0000
asID:                     834
IP address blocks:        154.127.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4534 (0x11b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 26 09:26:44 2023 GMT
            Not After : Aug 30 09:26:44 2025 GMT
        Subject: CN=64e9c558-676b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:7b:27:c3:07:c8:bb:4a:24:9b:b9:5d:d4:
                    3b:e2:f5:00:ff:b2:84:29:b1:10:d5:13:1d:00:25:
                    6b:d2:1b:91:98:6a:73:73:96:05:66:14:43:74:1f:
                    5b:af:59:92:7f:73:38:30:df:a2:5d:51:2c:a0:97:
                    44:31:75:c4:a5:36:8e:b6:db:dc:8c:98:8e:82:80:
                    c5:41:25:40:12:b8:41:80:cd:e8:8c:0d:d4:24:a5:
                    80:85:f8:e7:d0:da:7a:4f:64:32:71:da:47:c5:9a:
                    36:93:6f:58:8c:0f:13:be:d1:be:7b:60:d2:cc:a4:
                    bd:cd:5d:09:48:ca:09:74:08:e3:22:41:87:62:fb:
                    20:bd:7f:c9:7b:e0:5c:02:50:33:87:eb:e2:a4:83:
                    d7:1e:0c:91:ac:f6:16:1f:36:a4:81:48:88:be:f4:
                    a7:93:2f:e9:a8:3f:12:fe:06:8f:27:e1:20:9a:71:
                    85:4d:e8:fc:e2:9e:aa:c0:cd:22:4d:70:0d:b7:71:
                    89:12:33:9e:e4:2d:ea:81:86:e8:ce:2a:ec:7a:b0:
                    53:b2:40:f1:65:52:2b:ca:1c:5f:2d:6c:fc:39:c1:
                    37:a1:83:b6:fd:0a:77:35:d2:fb:4f:8d:94:89:aa:
                    2d:b8:c8:02:54:e4:96:53:b7:4c:2e:fc:09:c7:01:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E5:62:92:47:F3:4B:94:51:97:E5:DB:22:95:4B:82:3A:05:53:76
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AE10478843F211EEA687536C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:07:23:b3:e6:b8:eb:90:58:44:fb:15:1c:bd:12:0e:56:
         b5:13:3d:30:91:0d:cb:ed:bb:2f:05:c3:7b:0a:ae:df:f2:76:
         c4:fe:e9:65:02:eb:fb:bd:05:71:f0:f1:38:c3:63:13:65:c4:
         9b:8f:99:52:c7:04:47:75:d5:e9:c6:b6:de:ef:2b:08:51:0d:
         bf:54:d8:81:d5:81:a1:66:69:01:1d:47:37:1b:d3:89:4f:52:
         e0:e9:24:83:2c:47:b2:d3:54:af:e8:f2:27:d8:37:1e:a4:39:
         7e:52:7c:50:3f:e6:2b:cc:58:f1:9b:3d:d7:10:a5:61:c9:8b:
         54:07:67:e2:68:8a:b8:80:60:a5:ca:db:26:a1:47:4b:fc:7d:
         ea:ff:8c:b5:c1:25:52:ff:6c:45:61:51:35:6c:7a:ad:65:1f:
         03:a2:cb:ea:d4:57:fe:49:99:b1:29:fa:b9:30:d3:75:77:32:
         ce:a7:36:a2:8d:91:9f:2c:34:7a:54:80:99:6e:4a:7e:cf:5d:
         c7:08:5e:0a:2b:2f:eb:cf:22:a5:4b:58:00:7c:2d:00:da:e0:
         31:aa:89:ab:10:b3:c4:7f:d2:90:89:14:6c:77:41:44:70:fa:
         87:aa:96:42:e7:6c:8b:ee:cd:51:97:09:a2:ef:4c:d8:89:a4:
         7d:c3:27:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 12:29:00 2023 by rpki-client on console-ams.rpki-client.org