Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F918681E46C311ED969B88A7F1222468.roa
File:                     F918681E46C311ED969B88A7F1222468.roa (raw, json)
Hash identifier:          yFnXNWK+z7ia+06CCDhF29dapx5Q1fUoQrM+muSpL+E=
Subject key identifier:   05:B7:61:0D:C4:FE:D7:5B:14:3A:0F:26:6B:06:98:95:E0:B6:59:A6
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       09EC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F918681E46C311ED969B88A7F1222468.roa
Signing time:             Sat 08 Oct 2022 04:45:03 +0000
ROA not before:           Sat 08 Oct 2022 04:45:00 +0000
ROA not after:            Wed 09 Oct 2024 04:45:00 +0000
asID:                     174
IP address blocks:        154.16.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2540 (0x9ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  8 04:45:00 2022 GMT
            Not After : Oct  9 04:45:00 2024 GMT
        Subject: CN=6341004f-a60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:cd:43:ab:fe:5b:f4:84:8d:34:b1:34:da:
                    51:bd:f9:b0:a5:98:14:4b:23:dc:22:85:e3:a1:cd:
                    66:4e:cb:b1:55:bc:58:9d:22:be:9c:ba:b5:be:28:
                    f0:f1:64:60:81:f4:90:2b:4b:17:95:8f:e3:36:12:
                    3d:df:5b:ec:19:51:2c:40:6f:9b:68:98:dc:c0:05:
                    ce:c0:27:96:38:3d:0d:0f:75:0b:b6:8b:a5:c9:6f:
                    cf:a2:ff:ee:5e:3a:62:f2:1c:5e:04:1b:8c:19:79:
                    01:20:fa:0d:9d:61:ad:5a:20:03:89:93:bf:1c:98:
                    8a:5f:ce:3c:df:32:20:ea:37:31:7a:c9:32:6f:e0:
                    ae:c0:48:bf:cc:0c:7a:4d:4f:05:d6:c1:59:93:9d:
                    45:aa:c7:95:7b:17:d3:de:a9:b1:42:c0:85:01:bb:
                    34:65:53:07:bb:72:fb:87:6e:6b:c5:cc:52:b0:79:
                    29:b6:be:7b:26:c2:31:ae:91:75:88:27:de:12:c5:
                    b6:a7:80:88:37:1f:40:a9:2a:9d:cc:5b:e2:c9:a6:
                    3a:3a:d1:f4:1b:2c:fd:12:3b:fc:10:bd:73:5f:2a:
                    92:e7:c4:af:84:17:ab:55:02:b4:8f:fe:c7:23:7e:
                    a7:92:d5:4a:3c:77:3f:59:7b:f9:4c:f9:a8:25:3d:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B7:61:0D:C4:FE:D7:5B:14:3A:0F:26:6B:06:98:95:E0:B6:59:A6
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F918681E46C311ED969B88A7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:f9:2b:dc:ec:4f:e4:96:58:fe:c5:c4:a8:a7:57:67:94:14:
         6a:e5:c6:51:0d:ff:86:d9:17:cf:2d:30:5f:02:cf:60:c7:4d:
         5e:9c:b0:2d:42:6f:70:7b:a4:0d:db:f5:1f:50:c9:c0:e1:e0:
         f2:3d:97:67:01:ee:13:be:62:d2:72:b1:6b:6b:7b:82:23:45:
         9a:cd:98:8e:1e:30:2e:81:ce:9a:4e:0b:e4:49:b4:29:ea:cd:
         fa:8a:b9:c1:18:64:39:8f:79:40:36:31:b6:c9:92:dc:d7:3c:
         4c:fc:fc:02:8f:a7:3f:fa:bc:1c:7f:8b:8a:8c:c2:23:1b:b6:
         2a:f7:ad:65:4d:c4:41:fe:ca:f6:b9:b3:97:0f:03:00:e0:d2:
         49:88:5a:2c:bc:91:ba:11:e4:7a:10:ff:b0:0a:79:3b:bf:3f:
         d0:c6:f1:bf:f5:d8:0b:89:60:5e:c3:e9:43:d5:8c:92:6b:7d:
         80:47:5a:51:98:27:93:7c:4f:80:12:00:51:c7:81:cb:49:4c:
         57:f7:8d:14:31:a6:80:a1:de:31:3b:03:d5:48:a8:71:e2:24:
         5c:19:c7:7d:48:8c:4e:46:69:e7:a1:23:fc:7d:1d:dd:95:32:
         61:d9:af:af:fa:10:69:1c:a2:62:f6:3f:38:f4:b8:53:82:d5:
         bf:1b:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-ams.rpki-client.org