Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C409559C005011EEB87104854AD9E6FC.roa
File:                     C409559C005011EEB87104854AD9E6FC.roa (raw, json)
Hash identifier:          BXqNkMPoDjem/3qRnzx6+uVRRsmGhtVNYI0JLdxtNZU=
Subject key identifier:   E3:00:70:3F:1A:ED:3D:BB:84:1C:CD:1D:FB:E7:5F:A2:78:9C:00:16
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0E7D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C409559C005011EEB87104854AD9E6FC.roa
Signing time:             Thu 01 Jun 2023 07:48:58 +0000
ROA not before:           Thu 01 Jun 2023 07:48:55 +0000
ROA not after:            Sun 01 Jun 2025 07:48:55 +0000
asID:                     834
IP address blocks:        154.16.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3709 (0xe7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun  1 07:48:55 2023 GMT
            Not After : Jun  1 07:48:55 2025 GMT
        Subject: CN=64784d6a-46f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:82:76:0c:29:88:48:80:9f:12:7e:e1:82:cd:
                    ea:8b:4b:97:6c:3d:2a:33:43:76:1d:0f:0f:67:d2:
                    ae:d1:ce:d0:eb:f7:f1:92:d9:b4:81:7d:6f:99:99:
                    ab:71:16:33:97:86:19:45:ae:77:36:65:c4:47:d7:
                    b1:d8:57:56:de:92:03:ef:c2:2b:05:69:80:fc:85:
                    a2:2b:28:dd:c2:a1:73:fe:1f:f1:82:bf:a7:b2:03:
                    e3:ce:28:cb:24:75:54:b4:d2:91:d2:cb:71:2f:23:
                    27:e0:a8:4a:eb:43:b9:f2:2b:25:69:c7:c0:16:b3:
                    ed:f5:64:7d:18:ad:14:56:5d:12:29:ef:6d:54:ee:
                    2e:7d:94:02:40:e1:f9:18:28:b8:91:bf:5c:0c:25:
                    22:71:15:ae:b4:53:91:ea:0e:c7:00:44:c7:1e:85:
                    8e:64:65:eb:2f:e5:97:53:f7:64:66:ae:21:23:27:
                    99:0f:06:51:ef:2c:1c:c7:9a:2f:5a:a8:23:51:2b:
                    83:48:d0:d0:5d:3a:25:0a:be:53:2f:1a:42:b1:82:
                    20:ee:bb:60:1d:b4:3b:b0:76:ce:39:ee:ff:85:15:
                    95:23:72:c7:39:8c:15:d9:0f:14:6c:09:c3:81:5f:
                    0a:af:a1:c9:ff:19:f5:cd:63:6a:29:5f:03:e9:6e:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:70:3F:1A:ED:3D:BB:84:1C:CD:1D:FB:E7:5F:A2:78:9C:00:16
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C409559C005011EEB87104854AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:6b:e2:a8:95:91:84:35:e0:46:8d:01:90:ed:97:b6:19:bc:
         f9:40:5a:8a:ac:b8:51:e7:bf:74:86:31:78:d2:2d:3b:80:f2:
         a7:7a:c2:9c:76:ab:cb:23:1e:ff:4b:64:ba:cb:89:e9:ad:35:
         45:74:d6:0f:e8:c1:a9:c9:1e:32:51:cb:4e:7e:85:15:1f:f7:
         3c:85:86:70:7d:ed:08:4b:03:a0:a2:68:49:19:7d:9a:6f:b1:
         72:7d:8c:d6:dc:42:88:9d:36:da:2b:3f:3e:5d:95:0c:39:f7:
         5b:c1:12:b8:51:13:81:7f:0a:cb:1e:a2:93:21:d2:18:37:3b:
         23:a8:78:64:13:29:45:44:be:99:64:36:70:49:ec:d0:b6:c2:
         b0:10:9f:ba:0f:ae:fc:80:7b:06:d5:bf:3e:76:88:5a:08:1c:
         7a:0a:48:f2:9f:d8:7c:b8:f4:f7:28:8b:ba:98:37:d1:b5:fc:
         8b:4f:6c:66:59:4a:e7:4f:6d:11:6c:55:f3:9b:1b:0a:4f:d8:
         7f:f5:f5:79:73:71:35:b6:6a:fc:48:da:81:ed:02:22:bc:7d:
         e7:7b:01:38:48:9c:17:37:f0:e6:df:d6:10:7b:79:3f:10:f0:
         ed:86:80:96:64:fb:b0:8a:79:e0:39:7c:b6:47:5b:1b:c2:b4:
         d2:03:88:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org