Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E7DEE5C8B68F11EDA9FCCEB0F1222468.roa
File:                     E7DEE5C8B68F11EDA9FCCEB0F1222468.roa (raw, json)
Hash identifier:          mBEXY4XTpjg1wycIc8tBVz2yn+6fSQ+o9jpD2gRzjoA=
Subject key identifier:   2F:5E:18:A5:B0:68:60:B9:1E:E6:0B:23:34:97:57:9D:3B:E1:50:28
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0C2C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E7DEE5C8B68F11EDA9FCCEB0F1222468.roa
Signing time:             Mon 27 Feb 2023 11:14:31 +0000
ROA not before:           Mon 27 Feb 2023 11:14:27 +0000
ROA not after:            Fri 28 Feb 2025 11:14:27 +0000
asID:                     61317
IP address blocks:        154.16.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3116 (0xc2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 27 11:14:27 2023 GMT
            Not After : Feb 28 11:14:27 2025 GMT
        Subject: CN=63fc9096-e4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:e1:b1:4e:2a:f4:3a:22:9f:8b:05:70:64:
                    87:e2:4e:d7:16:cd:c0:36:54:c5:3d:e0:9e:76:fd:
                    8b:8c:3a:6b:90:4f:81:8f:f4:7c:03:56:e7:cf:5f:
                    c9:4c:a3:e3:9e:9d:24:f0:12:d5:c3:30:ce:bf:b0:
                    6f:b3:89:a1:1d:a6:59:ff:9f:19:bf:b6:db:57:c0:
                    71:42:33:c1:09:38:8c:f0:3d:08:82:b5:65:2a:f1:
                    6d:aa:20:39:db:48:87:fb:53:4c:8f:dc:c0:e4:54:
                    02:f1:f2:19:71:52:33:4c:21:f9:86:3b:81:48:ad:
                    3d:5d:61:f6:2b:72:30:38:5a:75:d6:3f:90:61:be:
                    3f:02:ce:5b:42:fd:e8:57:70:86:e5:a0:0e:ca:7b:
                    c4:64:7c:aa:3e:f4:69:4f:f2:b4:b8:27:44:a8:57:
                    d9:4f:a0:92:6e:ee:23:c8:06:c6:b1:b5:db:b2:97:
                    d4:e7:ba:b3:9b:56:44:93:7b:ec:fb:57:a4:1d:9a:
                    45:35:00:f2:1c:80:b5:77:38:0d:4f:36:aa:f4:df:
                    a2:e9:58:59:07:25:1d:51:89:b5:d2:42:21:56:4c:
                    88:db:dc:89:b5:84:44:60:04:da:75:09:88:90:32:
                    c0:72:b1:99:e6:56:60:d1:ed:bf:3e:2b:ef:5a:1b:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5E:18:A5:B0:68:60:B9:1E:E6:0B:23:34:97:57:9D:3B:E1:50:28
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E7DEE5C8B68F11EDA9FCCEB0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:97:e6:89:c4:97:67:bb:ad:b1:bd:d7:8c:b9:32:54:de:f0:
         ed:47:9b:6b:91:fc:86:a0:2e:c9:dd:83:c5:db:d8:d5:29:6f:
         3a:f6:0f:fa:62:c2:7a:c7:ce:f0:cb:91:1c:61:44:e9:c4:57:
         a0:c7:d9:62:20:a3:b1:27:4b:d5:79:2c:19:71:48:c0:68:37:
         fe:b7:1f:2e:9f:25:c6:d3:55:a3:3d:14:c4:a0:d9:64:f0:27:
         d2:d0:62:61:5e:9a:7a:9a:af:8f:45:6e:94:f9:36:e1:db:89:
         5f:9b:e4:73:9d:cc:03:7a:71:14:5d:9f:77:a1:10:5a:0d:23:
         82:cf:84:d8:a9:71:c5:fa:42:c4:dd:25:41:03:5a:a3:14:57:
         75:bf:fc:cb:d4:59:90:81:bb:11:50:58:eb:ca:82:86:2a:1a:
         04:60:77:b5:05:f4:96:f3:21:e1:6d:a0:9b:4f:a0:2d:6c:14:
         d7:a0:eb:4d:4d:48:b3:d6:36:f4:02:71:26:09:28:6f:74:3e:
         7d:dc:c9:bc:ca:a2:b4:65:4b:e3:2b:a3:db:c6:d2:3d:07:dc:
         a1:f6:e2:e8:ca:55:b2:5d:db:68:a8:68:2f:75:55:23:94:da:
         38:50:3c:1d:cf:a7:fb:7c:bc:fa:c8:b8:9a:c0:b3:14:30:d9:
         ce:b6:c5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org