Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E66617125BC611ED99FC2AC8F1222468.roa
File:                     E66617125BC611ED99FC2AC8F1222468.roa (raw, json)
Hash identifier:          xaf4fmESii/Vh41U1ArWe4tBSz7ijWeh95tPodjmxgY=
Subject key identifier:   0F:D6:5F:B9:70:05:8F:36:91:61:1E:3C:9A:DA:B5:86:12:9C:B3:A8
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0A9B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E66617125BC611ED99FC2AC8F1222468.roa
Signing time:             Thu 03 Nov 2022 22:28:55 +0000
ROA not before:           Fri 04 Nov 2022 22:28:49 +0000
ROA not after:            Sat 04 Nov 2023 22:28:49 +0000
asID:                     3320
IP address blocks:        154.16.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2715 (0xa9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov  4 22:28:49 2022 GMT
            Not After : Nov  4 22:28:49 2023 GMT
        Subject: CN=636440a6-cd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:92:71:fb:ab:7a:2c:6e:2b:0f:03:c2:c7:
                    71:f5:6f:e9:1e:63:6f:b6:b2:90:54:14:fc:d7:c9:
                    ff:a4:da:18:1a:54:6e:15:a3:d4:f1:b0:f3:75:44:
                    c4:49:83:90:1b:4f:7d:a9:28:98:cc:85:f1:f1:bd:
                    7d:98:9d:c1:f9:52:71:eb:59:69:c8:77:02:4b:46:
                    8d:9e:aa:0b:8b:5b:b7:a0:8c:be:3d:a7:91:da:0e:
                    c4:48:04:21:53:b3:5a:bc:6f:b9:9d:ec:b1:25:07:
                    43:1c:bd:83:cd:11:df:90:44:9d:0a:33:6d:a0:0d:
                    ca:d0:a0:0e:af:3a:ab:e4:c7:40:04:23:08:2f:73:
                    cc:01:31:2a:e8:9f:2f:12:2d:de:fd:92:71:9a:2b:
                    3c:dd:c9:71:ef:fc:2d:77:2a:01:2b:68:23:ea:99:
                    32:2f:c1:01:ad:78:52:39:d0:22:02:f8:10:4a:53:
                    dd:a8:22:b2:c8:53:f8:42:69:24:7d:bc:45:81:7b:
                    76:7f:df:8b:d3:df:af:8a:6b:81:91:1b:63:cc:89:
                    c2:a0:d5:cd:ed:1d:22:ea:c6:35:d5:03:d2:2f:12:
                    9e:7c:80:da:51:3d:b6:fd:78:61:7d:37:90:9e:f2:
                    a2:1d:c6:bb:f4:ca:31:02:a3:41:b9:1e:a1:97:ad:
                    95:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D6:5F:B9:70:05:8F:36:91:61:1E:3C:9A:DA:B5:86:12:9C:B3:A8
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E66617125BC611ED99FC2AC8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:2b:30:65:40:12:a2:9a:35:65:81:7d:e4:ef:8e:5e:c2:9a:
         3c:d1:b3:8e:22:b6:5f:6e:c9:a7:54:cc:19:c3:02:e1:fc:58:
         fc:8f:f1:11:74:85:7d:52:c8:f4:3d:b1:90:6a:3c:ca:28:e1:
         c1:8a:4c:42:2d:a2:50:30:97:e2:0e:20:09:eb:ac:aa:3d:c0:
         ce:bf:8b:49:e7:8d:ff:9d:0a:05:ce:64:ce:9a:ec:2e:34:f5:
         7d:44:55:50:dd:bd:a5:33:1c:ae:92:75:25:4d:6a:84:50:3c:
         32:ec:c3:0c:66:9d:51:ce:21:06:e6:c6:bc:af:b7:cd:d6:21:
         62:f8:0c:02:03:fd:1d:f5:a0:e4:d4:21:17:e5:2f:f6:d2:28:
         d3:cf:f5:a5:ca:1f:50:9d:56:b4:df:d9:40:f8:af:b0:a4:bb:
         ac:17:29:65:c3:e5:48:9b:5c:5e:0d:bd:2e:40:ac:aa:00:fe:
         d0:08:60:37:18:13:f7:eb:79:68:33:3b:8a:17:af:fa:34:c2:
         4c:5a:70:8f:c0:c0:01:60:81:81:71:56:4e:5f:f8:d4:1f:61:
         4c:99:4b:51:c0:aa:d8:5f:7e:c8:b0:5b:ec:69:aa:83:ff:d1:
         54:de:1f:d3:0c:b9:bd:fe:ae:e5:78:fc:29:51:1a:57:f8:93:
         5f:73:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org