Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D88F393CED5511EC9134B0DBF1222468.roa
File:                     D88F393CED5511EC9134B0DBF1222468.roa (raw, json)
Hash identifier:          SZPYOgi5rCOikwjki4y4UynESQ0JWMEWE3hVKYrEilM=
Subject key identifier:   57:B0:DA:FE:B7:68:49:3E:35:6A:A5:1C:60:B2:EC:48:80:7F:03:26
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       089B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D88F393CED5511EC9134B0DBF1222468.roa
Signing time:             Thu 16 Jun 2022 09:22:30 +0000
ROA not before:           Thu 16 Jun 2022 09:22:26 +0000
ROA not after:            Sun 16 Jun 2024 09:22:26 +0000
asID:                     40676
IP address blocks:        154.16.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2203 (0x89b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 16 09:22:26 2022 GMT
            Not After : Jun 16 09:22:26 2024 GMT
        Subject: CN=62aaf656-8553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:65:1c:57:49:d7:21:65:73:81:64:b2:88:
                    a2:b4:97:5d:a0:be:92:78:52:61:d9:a8:71:8d:1e:
                    75:83:88:a7:be:71:03:08:5e:f0:72:95:66:a2:6c:
                    bd:f9:26:32:39:8c:82:60:6e:28:df:47:dd:9d:60:
                    b1:c1:a1:3e:1c:39:3e:4c:58:80:ac:fa:37:6b:d4:
                    d1:ad:ad:4c:d9:57:67:7c:74:8d:44:a8:c1:6a:21:
                    33:95:b7:5e:fc:9c:27:e7:ef:aa:ef:77:5a:f3:8a:
                    fd:54:df:6a:76:33:30:8d:cd:c5:f9:34:2c:bc:fd:
                    31:bc:96:5b:e3:78:49:15:b7:f4:27:1c:48:33:94:
                    9a:80:15:21:b5:e5:b2:12:43:37:17:41:56:d4:73:
                    89:d4:1b:d9:9b:8d:72:ac:e4:13:45:c7:fd:91:6f:
                    66:86:72:3f:23:da:18:ad:42:4a:dd:e0:05:c4:ae:
                    8c:1b:5b:a1:43:f3:95:56:28:a5:19:bb:03:06:b3:
                    22:36:71:7f:70:d7:54:31:68:2a:a0:4a:a2:c6:20:
                    8e:a6:aa:69:e1:c2:bc:a0:9f:f8:ae:df:df:cd:8a:
                    02:09:da:a4:c2:75:f2:50:9a:6d:4e:5d:77:9d:e7:
                    e9:56:b6:08:a4:7c:e3:8f:1b:c1:7d:04:94:e9:80:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B0:DA:FE:B7:68:49:3E:35:6A:A5:1C:60:B2:EC:48:80:7F:03:26
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D88F393CED5511EC9134B0DBF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:bb:6b:87:8d:04:33:97:43:b6:e5:14:85:b7:97:b4:c5:ce:
         d2:0a:20:b7:6d:a2:fc:5a:7c:9f:7f:60:ac:9b:db:47:12:74:
         cd:0d:fe:67:47:2b:af:2b:2f:e0:d7:1f:ca:c6:eb:5d:9e:12:
         15:d1:9d:ca:10:08:26:7c:a8:2a:72:38:d1:59:e0:62:1f:a1:
         c1:96:4c:52:e4:d1:6e:00:42:15:98:11:3f:1f:52:33:0b:0b:
         1a:1a:2e:e1:81:89:32:9e:5b:0e:f3:54:03:48:5a:88:db:23:
         a8:e1:21:fc:2a:96:fe:e3:7c:3c:0b:bc:5a:89:f1:b5:50:93:
         e0:c3:1a:95:09:7b:42:60:a1:83:11:ad:aa:a1:5e:c3:6e:72:
         10:1d:47:5d:0c:4f:d9:47:d6:20:3c:b2:e8:14:c3:44:e3:b1:
         ac:19:ff:80:ba:52:d8:21:bb:e3:0f:be:99:a3:c3:bd:0d:80:
         06:76:4c:a8:79:7c:66:9c:9e:25:0a:f7:12:88:0a:00:71:43:
         5f:74:7e:12:a5:96:c1:4f:43:03:ef:c6:89:93:e1:d7:af:00:
         fc:48:d9:54:1a:ab:2b:5c:e6:b8:1e:2f:af:09:f9:a8:60:fb:
         a2:7a:8b:57:21:48:27:9d:03:09:ba:b6:22:c2:16:f6:40:41:
         00:62:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org