Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE0F8A26961A11EBA5025784F8AEA228.roa
File:                     DE0F8A26961A11EBA5025784F8AEA228.roa (raw, json)
Hash identifier:          ePw63IFzXusixe1zNu0/6D+vdIgFEtMTcwoz/7zljPQ=
Subject key identifier:   75:FC:F5:4E:FF:67:FA:20:36:A5:46:7E:21:0D:B8:4D:FF:47:63:DC
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0545
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE0F8A26961A11EBA5025784F8AEA228.roa
Signing time:             Mon 05 Apr 2021 14:26:10 +0000
ROA not before:           Mon 05 Apr 2021 14:26:05 +0000
ROA not after:            Sat 05 Apr 2025 14:26:05 +0000
asID:                     9009
IP address blocks:        154.16.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1349 (0x545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Apr  5 14:26:05 2021 GMT
            Not After : Apr  5 14:26:05 2025 GMT
        Subject: CN=606b1e02-2949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:4b:df:f3:62:bc:8d:1c:80:ea:f3:4c:9e:
                    1a:56:5f:5a:4c:d9:d1:68:47:c1:f1:78:ce:4c:af:
                    5c:37:6b:76:d3:72:08:b9:72:88:1a:9a:46:1d:1a:
                    ed:6c:ce:fa:88:36:db:04:00:8f:a5:01:6f:99:c7:
                    7a:8b:b0:45:83:e1:01:7d:6c:88:2c:57:81:ce:61:
                    5b:a7:32:31:a9:09:e7:1a:aa:fe:7f:70:98:1e:a6:
                    c0:c5:c1:15:ab:a3:5b:c2:65:72:9e:00:3d:db:80:
                    0d:04:e6:9f:12:f4:17:8a:cf:7d:a8:d3:96:4a:37:
                    8a:3e:fa:bb:1e:af:d7:44:cc:3e:91:ea:f3:b0:0d:
                    76:15:fe:cf:78:28:85:ec:71:44:d8:d6:c2:8d:1f:
                    bb:db:3a:6d:2c:a1:e0:82:97:12:3c:82:30:31:37:
                    bc:0c:04:11:27:4a:40:02:3d:7d:3e:de:e0:ac:84:
                    90:18:d7:c0:a6:6e:6e:89:a2:f5:25:6d:1a:78:69:
                    46:4a:50:65:72:0f:68:95:fd:02:72:4c:9d:2d:27:
                    3b:fa:7b:60:f1:e1:cd:82:a3:6c:e7:af:8d:fe:31:
                    7f:fd:a8:a7:68:d5:01:1b:51:e3:cd:a3:2b:0f:f5:
                    8e:91:1e:f8:1c:44:d6:7d:44:68:a1:3d:6c:76:e8:
                    4c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FC:F5:4E:FF:67:FA:20:36:A5:46:7E:21:0D:B8:4D:FF:47:63:DC
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE0F8A26961A11EBA5025784F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:fd:22:63:78:ce:6f:47:f0:9e:8c:a7:9c:83:c8:87:e9:f4:
         a8:dc:f8:b6:05:a0:7c:82:8d:54:8c:da:d6:0f:6d:50:82:b6:
         3d:8e:ed:8a:d6:46:d8:8a:f5:96:d9:8b:48:8b:d2:4c:16:db:
         88:6b:a9:0c:2c:14:7a:9a:28:04:cf:41:a3:4c:5e:e4:da:18:
         84:f1:a4:10:d9:1a:aa:8a:0e:68:8d:d7:e7:86:9f:61:c3:c5:
         30:66:a8:09:c2:39:45:29:a2:81:36:0c:0b:06:2f:54:14:79:
         ae:a2:25:35:22:8c:d4:a2:7d:6d:d6:7b:4f:22:c5:5c:20:82:
         3f:0f:2d:98:a5:f9:f8:36:eb:e2:e9:64:2d:5b:25:1b:11:7b:
         40:13:3c:e8:b7:4e:37:71:3e:a8:a4:68:9f:1b:6a:32:bd:7c:
         4f:55:5a:f3:6c:34:52:79:81:ca:f2:57:19:a9:76:b1:03:15:
         ce:be:33:40:5b:e5:bc:c3:fa:3d:0e:f1:06:87:6e:3d:19:c4:
         e7:94:29:47:c8:2b:4f:6a:3e:14:bb:f0:13:5c:aa:55:39:ff:
         68:43:08:c0:49:00:44:53:a4:03:e5:4b:d5:a9:2c:72:75:26:
         b1:52:73:2b:93:1c:62:82:78:e4:7d:51:e0:fe:b2:38:0f:54:
         52:24:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org