Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB0DF54C85E211EDACA3FA9EF1222468.roa
File:                     DB0DF54C85E211EDACA3FA9EF1222468.roa (raw, json)
Hash identifier:          tWDSpedUu7R5Zc2RGHdBL3NACE7MlW4Seqk7tBXB7X8=
Subject key identifier:   BB:58:13:FD:77:60:E3:96:1E:A8:DB:B6:51:4A:71:60:85:77:D0:15
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0B17
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB0DF54C85E211EDACA3FA9EF1222468.roa
Signing time:             Tue 27 Dec 2022 12:34:50 +0000
ROA not before:           Tue 27 Dec 2022 12:34:46 +0000
ROA not after:            Fri 27 Dec 2024 12:34:46 +0000
asID:                     49999
IP address blocks:        154.127.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2839 (0xb17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec 27 12:34:46 2022 GMT
            Not After : Dec 27 12:34:46 2024 GMT
        Subject: CN=63aae66a-5c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:00:72:d5:b7:40:3f:e0:40:b4:53:19:d7:
                    3f:5f:0d:06:ea:18:8a:8e:77:d2:d6:65:49:f3:d4:
                    52:3e:57:a7:7e:42:1b:65:eb:b1:a6:86:9e:2d:4f:
                    42:7e:8a:84:df:a2:23:a8:9b:8e:80:c8:45:01:b9:
                    50:73:11:c7:d8:eb:83:9a:03:50:de:9c:38:e3:64:
                    aa:7f:4e:ca:49:3e:5a:b5:0f:c2:dd:53:0b:43:2a:
                    28:98:38:e3:23:a8:2b:07:32:b7:e8:a9:69:65:bb:
                    71:7b:c8:f6:4b:8d:f0:8c:8f:5d:3a:5d:b2:3c:65:
                    f9:8c:9e:7a:f4:a4:2b:9e:ad:c8:a1:06:2f:09:8f:
                    df:7e:73:f8:33:50:22:5d:02:14:38:15:51:5d:0b:
                    0b:89:cd:e2:0e:cf:04:49:70:a8:8f:77:51:43:20:
                    0e:69:8d:45:66:a5:5e:d5:97:04:9c:16:a7:96:15:
                    89:b2:39:db:f7:b7:ec:26:04:bd:32:0b:f9:69:6b:
                    77:d0:43:47:b1:0d:a0:c4:e3:8f:d0:1f:09:33:e6:
                    47:9c:7e:52:a0:12:f2:fc:b4:e0:20:e5:ce:fc:25:
                    bb:18:b4:a1:ac:39:25:6c:34:ca:50:5e:60:90:6d:
                    d4:e3:08:ad:6e:27:58:99:41:f7:5f:3e:46:58:cf:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:58:13:FD:77:60:E3:96:1E:A8:DB:B6:51:4A:71:60:85:77:D0:15
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB0DF54C85E211EDACA3FA9EF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:91:98:66:b8:a7:b2:42:56:fc:f5:b4:64:bd:65:e7:47:fc:
         a9:14:68:64:11:6e:d3:87:45:99:6f:97:d2:91:a7:82:7d:e4:
         1d:c4:be:be:43:c4:8d:e1:7a:18:60:b3:75:56:d2:01:f0:c2:
         f2:f1:5c:12:43:b6:80:a3:5e:b3:43:b5:ee:f0:6c:1c:24:76:
         ab:63:74:a6:cf:6f:02:2e:cc:0a:b4:1a:fe:fe:0a:12:51:d6:
         78:a0:27:93:35:d4:9f:54:e2:81:6a:c0:a6:67:50:25:29:fb:
         7a:56:a2:cc:e3:43:72:8b:e3:42:94:4d:e1:ad:dc:30:88:52:
         f6:f9:f4:90:3d:4c:db:0d:07:7b:18:a1:e8:a1:a8:e5:d4:ab:
         a4:4d:b5:cd:7f:59:85:6d:8c:5e:3f:ee:e3:42:f9:20:9e:89:
         41:54:18:75:8f:26:40:98:24:f6:f0:84:c1:d6:49:59:aa:df:
         ba:9a:d1:5a:e0:fe:45:99:78:56:d1:49:72:e8:c8:76:55:a0:
         0b:25:14:62:78:c6:a1:e2:d9:26:d4:a6:bc:b6:ae:31:0a:6c:
         32:79:56:1e:f2:1a:0d:e4:d5:fe:7d:9a:5f:3f:4c:ae:e2:a6:
         88:ce:50:c3:de:6c:33:b4:9b:ab:db:0b:61:76:61:bf:65:bc:
         36:f7:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org