Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F223ECD4B8F811ED93ADC7F6F1222468.roa
File:                     F223ECD4B8F811ED93ADC7F6F1222468.roa (raw, json)
Hash identifier:          BRdHk2jZiBUcOP02IqYmLGG8pXLZAUkbxCh/5RVYr3Q=
Subject key identifier:   30:11:52:55:2D:84:8A:87:7F:D0:A6:FA:8B:DD:B3:C7:6C:38:7A:25
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0CB4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F223ECD4B8F811ED93ADC7F6F1222468.roa
Signing time:             Thu 02 Mar 2023 12:51:27 +0000
ROA not before:           Thu 02 Mar 2023 12:51:24 +0000
ROA not after:            Sat 01 Mar 2025 12:51:24 +0000
asID:                     61317
IP address blocks:        154.16.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3252 (0xcb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Mar  2 12:51:24 2023 GMT
            Not After : Mar  1 12:51:24 2025 GMT
        Subject: CN=64009bcf-f015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:45:63:53:10:e6:95:0e:3d:25:86:96:a4:
                    d8:29:16:3e:7d:c0:30:6b:b9:84:a5:10:d5:e5:e4:
                    5d:0b:ab:e1:b0:d6:e3:6f:61:e0:3e:f8:56:b5:cd:
                    7b:1b:6b:86:81:ab:67:86:ca:7a:5f:e4:f1:0b:b1:
                    2a:09:a3:c7:b9:8d:6f:36:92:a2:a0:42:3b:c1:e1:
                    a0:46:3e:1f:e2:0a:8e:5c:b2:9c:cb:d6:57:8a:63:
                    f9:53:9e:8f:23:4a:d2:15:1c:02:6f:cc:08:d7:6c:
                    4a:46:1e:e9:50:dd:f2:a1:af:ec:98:1a:90:8b:28:
                    bb:5f:0c:91:6c:a1:3e:a1:c3:10:51:86:eb:29:58:
                    9c:bd:56:78:0a:3c:78:02:ae:ae:3e:21:c0:65:57:
                    80:d5:ac:e3:96:f0:85:1f:58:ce:38:f3:56:4e:b2:
                    ba:21:9f:4a:3d:f9:39:e9:aa:22:20:a5:c4:bb:93:
                    4a:37:8d:50:a3:9c:25:6d:fe:d0:9a:f5:47:f1:0f:
                    e9:8b:b9:94:d5:64:d8:08:17:7f:00:1b:86:1b:d7:
                    a3:5a:63:13:78:4e:4f:91:69:85:25:81:54:3c:a4:
                    27:92:8b:b1:07:2d:df:77:12:36:22:c6:d4:08:3f:
                    da:4a:b5:44:cc:ed:cc:c7:9c:8e:eb:da:87:19:f6:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:11:52:55:2D:84:8A:87:7F:D0:A6:FA:8B:DD:B3:C7:6C:38:7A:25
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F223ECD4B8F811ED93ADC7F6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:9c:bd:74:35:1e:a6:ed:84:d3:bb:1a:72:ba:7d:f6:ff:
         da:7d:04:c0:7a:d7:6f:2a:d5:09:13:4a:b4:be:cf:0a:23:d6:
         9e:bc:c2:ff:60:f9:f7:52:ba:b9:7a:4c:cd:1f:ac:ef:43:77:
         d8:5b:d3:8f:f9:48:8c:b6:bd:b3:88:68:f1:8b:a7:c4:23:2b:
         d9:e3:24:9e:a7:51:d5:9b:44:49:c5:6a:8d:8a:e3:9e:2d:6f:
         9a:03:5e:49:2a:dc:eb:95:94:25:df:58:72:65:39:d5:fd:7e:
         df:b9:d4:45:88:6f:25:e3:18:af:63:d9:aa:e5:72:2b:4f:ac:
         55:6a:96:aa:ab:73:22:d3:c9:6d:6c:cb:35:02:ae:f5:dc:c5:
         ad:a2:e5:cb:6f:67:d0:e8:5f:39:51:3e:c4:f5:f6:a4:ed:ff:
         df:1c:44:57:c6:40:a5:ca:03:cc:74:ec:70:68:da:0f:37:73:
         e3:50:4a:aa:8d:0e:81:66:63:76:e6:9a:0d:7e:58:6f:6f:a5:
         3a:fe:88:11:33:c6:93:b9:87:9f:19:08:03:81:04:e4:72:10:
         21:12:e0:fa:bb:ce:54:82:e3:d5:19:f9:0c:c0:42:ed:52:9e:
         31:92:ee:a4:c0:3e:ff:28:31:5a:8a:9c:fd:68:66:0e:21:3b:
         9a:9e:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org