Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D00A415091F111EBB9BDA567F8AEA228.roa
File:                     D00A415091F111EBB9BDA567F8AEA228.roa (raw, json)
Hash identifier:          QOW47qP3+qO8E+S1JRTwgA7kORMW7xlN6A0TwO4icvE=
Subject key identifier:   08:22:5A:54:7F:06:C0:85:62:B1:D9:99:CF:4B:BD:A7:40:D8:93:DA
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0534
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D00A415091F111EBB9BDA567F8AEA228.roa
Signing time:             Wed 31 Mar 2021 07:22:13 +0000
ROA not before:           Wed 31 Mar 2021 07:22:09 +0000
ROA not after:            Mon 31 Mar 2025 07:22:09 +0000
asID:                     133752
IP address blocks:        154.16.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332 (0x534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Mar 31 07:22:09 2021 GMT
            Not After : Mar 31 07:22:09 2025 GMT
        Subject: CN=60642325-0fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:06:a5:64:d3:37:0c:01:2f:3a:89:d9:58:
                    ef:47:ee:ba:4a:e5:7c:c6:45:2d:c2:e2:c6:da:a6:
                    d6:16:ed:7d:6b:e3:88:b0:80:5d:cb:5f:8c:ff:3c:
                    da:a7:35:19:0d:f0:a1:2a:cb:85:f0:e5:f4:3b:cd:
                    0a:9e:41:dc:94:0a:72:33:58:ab:f2:21:6e:0f:c8:
                    cd:89:13:d7:f1:f2:d6:e2:db:5b:44:bc:2a:a1:23:
                    c1:32:d3:af:31:2c:e8:eb:76:50:e9:7e:66:ec:52:
                    84:2d:1a:aa:9f:51:a6:9b:97:bf:9d:9e:f4:1a:65:
                    75:9d:d8:10:a7:bd:40:ca:c4:1f:4c:89:6e:93:7d:
                    cc:7d:d5:2e:65:34:3f:27:56:90:6d:58:37:72:d2:
                    3d:31:8a:f5:0b:b8:63:e1:71:37:dc:62:78:95:31:
                    9d:3f:d0:8f:4a:cf:42:22:db:b1:04:1e:fb:14:37:
                    5b:80:04:90:81:4c:2f:9e:ed:35:c3:8b:b3:02:63:
                    8c:ba:85:2a:73:a1:2f:5d:32:ee:7f:eb:66:19:53:
                    0c:7d:f8:29:ad:44:32:d8:36:a1:bd:14:be:09:4c:
                    95:6c:57:f4:cb:4f:68:6c:48:86:9b:b3:5c:ba:bb:
                    6e:ce:d7:e0:f0:9b:7e:c7:91:ae:38:17:39:2f:49:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:22:5A:54:7F:06:C0:85:62:B1:D9:99:CF:4B:BD:A7:40:D8:93:DA
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D00A415091F111EBB9BDA567F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:36:6b:1d:db:7b:40:14:e7:9b:67:ff:58:74:2e:a0:7e:
         74:48:88:1d:2a:8e:1f:ca:05:d2:81:86:36:77:45:66:9d:eb:
         06:2f:05:bb:d4:35:7b:58:10:bc:0c:c7:28:63:a2:39:87:e0:
         aa:fd:ed:fd:3b:d9:0d:d4:5c:2e:7f:aa:34:a6:96:38:84:79:
         f3:35:a0:59:6f:13:5d:1e:be:b6:97:6e:b7:a7:bc:32:02:64:
         31:4b:89:4f:19:2c:45:d6:d7:6f:00:1e:ea:4c:81:ba:ab:43:
         84:b1:1b:a0:94:3b:01:45:97:1f:ba:2c:f9:f7:72:ca:4b:6c:
         33:1d:53:83:de:37:3e:27:65:9a:7f:33:fd:51:20:fa:00:d9:
         1e:b6:62:c6:30:2d:ec:31:52:43:f1:a1:2c:69:cb:4f:df:7c:
         61:ed:fa:39:03:b5:d8:e0:e6:52:d9:5d:e4:aa:57:f5:50:4a:
         33:18:f9:ca:2b:19:15:a8:fc:0a:41:8d:a2:bc:ef:5a:ca:18:
         cd:40:0d:ac:9f:25:37:fe:1d:3b:43:b3:b3:29:ba:74:24:71:
         bf:e7:29:19:19:44:24:5a:c1:c3:8c:5a:fa:4b:fe:c3:63:89:
         fa:de:7c:e7:4f:13:69:07:38:80:52:df:31:d7:52:cc:2d:9c:
         c7:93:14:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----