Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C38E9558005211EE83513D8B4AD9E6FC.roa
File:                     C38E9558005211EE83513D8B4AD9E6FC.roa (raw, json)
Hash identifier:          feInXDrgvIpMfTeqfgdmFpz7r1an3n0krB8X9+6c5kg=
Subject key identifier:   B9:A1:A8:5B:99:EC:35:D8:4C:E1:AA:40:4C:39:DE:54:8D:A0:F6:AC
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0E8F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C38E9558005211EE83513D8B4AD9E6FC.roa
Signing time:             Thu 01 Jun 2023 08:03:16 +0000
ROA not before:           Thu 01 Jun 2023 08:03:13 +0000
ROA not after:            Sun 01 Jun 2025 08:03:13 +0000
asID:                     834
IP address blocks:        154.127.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3727 (0xe8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun  1 08:03:13 2023 GMT
            Not After : Jun  1 08:03:13 2025 GMT
        Subject: CN=647850c4-91dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:43:53:47:ac:41:5d:f5:c6:f7:8d:9a:cb:fa:
                    0e:d5:c1:de:c3:47:61:0c:7c:35:e8:f6:3b:88:90:
                    10:f0:40:76:d0:20:38:0f:2b:bf:fd:09:dc:17:e0:
                    6c:cb:44:df:79:8b:eb:e4:34:fc:78:e4:92:9a:be:
                    59:db:af:c8:10:6e:45:45:ba:4a:d8:41:44:82:b4:
                    c4:fe:37:bf:69:ff:ba:25:8f:0c:63:f8:43:01:18:
                    cd:46:be:1f:55:e1:1f:bd:a3:1b:43:18:33:53:53:
                    bc:3f:0b:99:af:78:20:91:5a:33:95:ac:00:6f:1f:
                    43:29:e2:ff:0b:90:c4:a0:d1:7d:f3:00:06:b7:8e:
                    a2:88:56:67:d4:f8:a0:e7:fd:56:be:cc:cd:12:95:
                    00:3d:e0:bf:aa:3c:4c:74:42:d9:88:03:3b:6f:83:
                    74:e9:63:bd:04:83:73:39:e4:26:05:b6:e1:a5:43:
                    17:5e:99:fd:d4:0d:e6:ad:08:5f:e5:b6:96:92:bd:
                    c8:86:1e:40:cd:f9:71:a0:01:1e:32:75:e2:e3:59:
                    af:84:a1:d7:c5:7a:51:ff:87:34:d0:61:b1:48:8c:
                    55:db:c7:1f:9e:db:aa:7a:b8:b7:35:36:8f:11:6d:
                    2a:1f:3c:2f:d3:87:fb:76:d2:9b:be:2b:fe:81:8b:
                    df:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A1:A8:5B:99:EC:35:D8:4C:E1:AA:40:4C:39:DE:54:8D:A0:F6:AC
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C38E9558005211EE83513D8B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:05:5a:55:d1:6d:83:8e:22:8a:4d:97:fe:48:47:b1:5a:43:
         e2:d7:20:27:e9:e4:29:66:c9:ce:03:78:01:5d:94:15:b7:b2:
         75:98:b3:12:80:e5:c2:2e:b1:a0:44:06:7f:9a:47:ac:f6:35:
         b0:20:44:f3:e6:b5:55:a8:7a:26:c3:05:54:3c:6c:e6:0c:50:
         a4:7d:34:72:70:cf:0d:86:76:90:59:63:14:d7:aa:63:8c:e7:
         6c:19:cf:ce:a3:c3:ac:f9:f8:97:ab:65:c0:f7:e9:43:f7:e9:
         80:01:04:70:58:76:cd:27:d1:2a:77:84:1f:cc:9d:27:5c:ff:
         29:2f:17:29:72:f8:54:56:6c:dc:d2:fb:89:33:90:4b:2f:ce:
         29:1d:6a:6f:48:85:d4:ee:61:1d:24:32:95:e4:d0:4a:ee:fd:
         c1:ec:69:99:e4:7b:26:b0:87:7f:7e:6a:ed:8d:a0:72:12:53:
         8a:3a:e7:9c:72:3f:85:e6:d1:ee:71:a5:bb:77:b5:44:b2:82:
         cf:9b:74:4f:fe:1f:39:19:94:e6:e7:39:13:4e:24:f7:0c:01:
         3d:ed:d3:cf:b8:32:21:c8:67:21:59:d5:eb:f6:0d:ac:67:6e:
         0f:56:b4:0a:95:c3:c6:d6:5e:22:60:f9:0e:8a:84:12:0f:41:
         be:26:f9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org