Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C62C5A96492F11EDBB1555F6F1222468.roa
File:                     C62C5A96492F11EDBB1555F6F1222468.roa (raw, json)
Hash identifier:          QX90GXOvNhPAmkwFRBuKr34MVhSWfhWiRUtMVD8LG38=
Subject key identifier:   3C:C4:4E:0E:5C:17:23:73:AD:A1:97:B7:64:52:45:A9:75:3F:45:41
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       09F4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C62C5A96492F11EDBB1555F6F1222468.roa
Signing time:             Tue 11 Oct 2022 06:41:46 +0000
ROA not before:           Tue 11 Oct 2022 06:41:42 +0000
ROA not after:            Fri 11 Oct 2024 06:41:42 +0000
asID:                     18345
IP address blocks:        154.16.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2548 (0x9f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 11 06:41:42 2022 GMT
            Not After : Oct 11 06:41:42 2024 GMT
        Subject: CN=63451029-f7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:db:73:66:41:8f:08:88:3d:aa:7d:05:d5:d1:
                    e7:76:bd:9b:0e:75:a5:51:55:e7:31:96:91:de:b2:
                    35:86:10:ae:1b:17:14:2f:ea:be:11:67:71:c2:ff:
                    b2:4f:7f:0e:27:80:ec:ec:ab:8c:32:83:25:60:51:
                    1e:3c:93:7d:3c:47:b2:99:67:bd:52:b1:bf:46:73:
                    86:80:8f:e1:9f:82:10:9f:6e:20:2e:8f:67:bc:f8:
                    40:44:a5:26:c0:25:9e:87:c9:6c:15:b2:58:42:8c:
                    b3:e8:c9:4b:be:93:4f:e3:ad:20:78:c9:3d:18:2b:
                    88:92:37:91:2c:c7:46:5b:94:24:aa:95:28:56:59:
                    18:c9:e6:ec:f9:ea:f1:dd:17:95:ec:82:43:33:5d:
                    c6:ed:88:49:c0:9d:60:d6:1c:d8:70:ec:62:02:46:
                    99:e1:c2:5a:2c:ee:fe:3e:42:68:25:49:c3:a9:7c:
                    41:43:6a:e6:74:8c:7e:dc:fa:48:05:34:c5:47:4e:
                    2b:6d:da:45:e5:f8:9f:03:11:c5:ae:ac:1a:03:7d:
                    50:ce:6d:ee:df:4b:ed:87:54:ed:b5:15:9c:d9:19:
                    72:21:e8:bb:87:c5:6d:aa:a6:70:20:77:85:4e:1e:
                    d8:42:2d:57:c3:85:2a:c0:6f:aa:20:2f:d0:41:73:
                    23:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C4:4E:0E:5C:17:23:73:AD:A1:97:B7:64:52:45:A9:75:3F:45:41
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C62C5A96492F11EDBB1555F6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ff:ef:92:b1:1e:f4:f9:a8:11:00:06:74:c6:ec:9f:72:23:
         95:92:c3:0c:e0:c9:20:8c:da:47:b7:ce:91:19:78:ed:64:1f:
         ab:10:62:ab:f1:6f:e3:45:ea:2a:e9:cb:78:d2:75:d0:7d:ef:
         2b:ef:f3:49:33:93:e4:79:33:7a:e8:c6:82:48:29:1f:9b:c5:
         71:d3:f5:c1:bf:0e:f7:7d:bf:b2:ee:11:75:56:8b:fd:20:a3:
         c8:24:be:0e:e0:60:cb:9b:09:09:90:d8:1b:9b:a1:03:53:dc:
         a4:69:ea:31:33:f6:f1:6e:ba:53:f8:35:d1:09:de:ae:10:9b:
         24:9e:5a:b4:7d:af:47:fc:a1:ae:3d:92:56:16:50:5a:ef:07:
         2c:a0:d8:bd:49:af:60:af:c7:a4:80:a4:2a:1b:91:d7:31:2e:
         ff:41:73:e9:b0:ef:bb:ca:47:83:bc:e9:68:75:e5:5c:0e:11:
         b1:db:8a:51:c1:88:9e:27:4d:90:bc:ef:74:e3:32:d4:58:ac:
         56:89:c0:8c:b0:39:e8:53:18:63:d6:29:75:45:e6:d8:e9:97:
         9a:11:60:ac:3b:78:2e:de:bd:26:fe:bf:b1:ee:80:6e:6f:00:
         ff:7a:9c:f8:f2:3a:9e:11:28:fe:ae:ab:e5:09:65:5c:87:1f:
         0f:4b:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org