Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C02EF290B69211EDBFC247B9F1222468.roa
File:                     C02EF290B69211EDBFC247B9F1222468.roa (raw, json)
Hash identifier:          pdU6ptXzdDndTomntXYVV1eMZOYfOrjUJbX6Q6ZSx80=
Subject key identifier:   45:87:42:27:79:D9:78:7B:29:7B:40:66:74:37:2F:DA:ED:A2:14:C7
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0C50
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C02EF290B69211EDBFC247B9F1222468.roa
Signing time:             Mon 27 Feb 2023 11:34:53 +0000
ROA not before:           Mon 27 Feb 2023 11:34:49 +0000
ROA not after:            Thu 27 Feb 2025 11:34:49 +0000
asID:                     61317
IP address blocks:        154.16.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3152 (0xc50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 27 11:34:49 2023 GMT
            Not After : Feb 27 11:34:49 2025 GMT
        Subject: CN=63fc955c-deb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:91:b3:d0:e3:b2:91:df:fc:13:10:61:2b:
                    d2:32:fb:b8:66:e1:fb:c6:e3:e6:b6:9e:97:b9:66:
                    e8:06:50:e2:e1:19:61:2b:59:61:bf:52:aa:45:8e:
                    26:9c:8e:f2:12:17:cc:47:ec:2c:a4:39:7f:57:83:
                    f7:57:2f:7e:b7:fc:69:c2:8a:ce:f6:0b:05:56:42:
                    8a:da:57:43:17:1d:9f:af:d9:63:6a:2b:e5:bc:25:
                    7d:88:85:b1:51:7c:16:65:ce:10:d4:c0:c7:cd:3c:
                    1c:51:88:3e:11:06:6f:a5:7b:9e:78:c6:4c:4e:51:
                    7b:83:56:de:da:fc:bd:66:eb:06:8d:f8:b6:57:dd:
                    16:72:18:5f:b1:c2:fa:1b:67:41:dc:ac:12:df:b6:
                    bf:92:e4:e8:ed:ee:81:6c:c0:9e:4c:21:b8:4f:bf:
                    b1:2f:d7:2a:14:da:f9:23:5a:dd:1f:0c:20:16:26:
                    76:57:0b:d5:1a:0a:de:b8:dc:f2:78:d9:f3:42:8a:
                    72:22:4e:cb:87:a2:84:2b:7b:75:bc:9a:75:a2:fe:
                    24:6e:11:bb:38:b9:e2:12:d4:9f:95:55:39:7d:12:
                    f1:50:fe:6c:e5:cd:a9:d4:d8:9d:c7:e2:4a:b4:af:
                    5e:cf:eb:98:9e:79:6e:0b:2d:46:5f:36:85:cf:3f:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:87:42:27:79:D9:78:7B:29:7B:40:66:74:37:2F:DA:ED:A2:14:C7
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C02EF290B69211EDBFC247B9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:30:ce:8d:1e:b2:b7:b6:5a:6a:f5:3b:d9:de:a0:ba:65:a8:
         fd:5a:ce:e4:87:68:38:ad:a5:75:a5:d7:57:78:8a:45:37:b2:
         c2:ea:0a:47:18:a7:b4:22:ce:a8:5d:07:95:8f:74:aa:62:d8:
         00:29:52:b5:c3:10:06:86:06:ac:6c:81:de:0b:47:7d:8f:9f:
         20:86:ef:ae:55:05:74:84:b2:20:ae:50:63:d8:90:74:23:e4:
         54:c6:98:d3:c9:00:d4:29:9a:bc:8c:ef:20:f1:6f:2e:75:d7:
         5e:65:57:ad:0b:44:c2:a2:56:5c:07:1d:14:47:c9:64:54:b0:
         82:af:3d:47:fa:6e:8f:82:2f:64:d1:90:ac:2e:0e:4f:e6:51:
         e1:9d:da:83:ae:7c:f0:14:c9:40:b7:b3:78:5c:6f:96:c3:fa:
         8a:81:2d:ae:d6:34:6b:ce:ae:25:01:e3:e8:27:26:74:84:5f:
         d9:c2:8f:3d:c8:10:21:43:f0:81:25:0f:c6:08:33:49:1c:91:
         19:3f:df:fb:c9:19:54:1d:7d:ee:9a:57:0d:5b:2c:0d:fd:46:
         e5:2a:c4:39:1d:91:97:1b:b3:76:5f:ff:4d:c5:5f:69:8d:ce:
         a0:b7:9d:1f:71:05:09:56:9e:18:1a:25:f8:c6:f2:f6:e3:b9:
         17:bf:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org