Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9631520E7FB11ECBB3532D8F1222468.roa
File:                     F9631520E7FB11ECBB3532D8F1222468.roa (raw, json)
Hash identifier:          i9Fm9xgR2o6XY/X2IUAnIkkR7/BvmcmhM4puPDtWZn8=
Subject key identifier:   59:E2:12:3A:E7:E6:F3:65:5D:EC:E2:01:31:C4:79:34:FC:58:66:77
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       088C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9631520E7FB11ECBB3532D8F1222468.roa
Signing time:             Thu 09 Jun 2022 13:56:35 +0000
ROA not before:           Thu 09 Jun 2022 13:56:31 +0000
ROA not after:            Sun 09 Jun 2024 13:56:31 +0000
asID:                     40676
IP address blocks:        154.16.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 02 Sep 2023 07:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun  9 13:56:31 2022 GMT
            Not After : Jun  9 13:56:31 2024 GMT
        Subject: CN=62a1fc13-093b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:17:11:b6:64:2e:63:e4:58:8b:b0:06:0f:
                    ce:b9:07:ef:0c:6b:0e:ec:3d:a8:2a:59:c1:02:d9:
                    66:0d:a0:52:e4:b3:13:21:51:0a:0e:6f:b0:27:8e:
                    1d:4b:16:cc:8d:dd:2e:42:4c:d4:55:75:b7:14:11:
                    c5:c8:87:b3:bb:c2:d8:c5:a9:b9:0a:87:9f:52:f9:
                    35:e9:7d:76:b9:b4:2f:ba:18:89:b7:66:13:ca:75:
                    b2:eb:c3:8b:71:a1:31:b5:4b:79:38:86:a5:37:52:
                    c7:fc:fa:c3:46:c6:fd:aa:a6:49:0c:90:1a:f6:97:
                    22:28:62:4e:9c:c6:a4:83:61:72:b5:d2:b1:e8:33:
                    21:63:29:94:64:b8:99:85:6d:a2:55:0b:0f:59:94:
                    fe:5a:b6:82:a2:6a:d3:ce:ff:87:69:64:d9:06:42:
                    38:96:1f:6f:19:f7:e1:7e:98:b3:9d:92:fc:62:56:
                    a3:17:5c:f5:c3:84:33:5a:63:d0:e0:94:cf:80:25:
                    b8:45:a8:ac:28:a2:d9:d6:75:0f:9e:1a:6b:3e:2d:
                    2d:fd:62:b1:bd:7c:d8:53:d8:41:44:5f:6c:cc:89:
                    96:28:95:21:50:d2:44:ae:ac:76:63:90:6b:4b:77:
                    b9:b5:2a:44:c8:d5:31:c7:09:33:e5:88:19:71:a5:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E2:12:3A:E7:E6:F3:65:5D:EC:E2:01:31:C4:79:34:FC:58:66:77
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9631520E7FB11ECBB3532D8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a8:b1:0a:9d:d8:c3:e0:3c:f8:1c:9d:62:10:b3:53:da:05:
         45:92:52:d1:8b:2a:8a:66:38:0d:7a:27:fd:a6:4c:9a:a7:32:
         27:f3:f3:86:9f:20:d7:17:8b:db:62:71:f8:a2:8e:dc:9c:d8:
         1b:0e:53:03:ab:eb:96:ce:45:5c:1c:a1:6a:1c:c9:d3:1b:3e:
         80:29:d7:4f:7d:bc:4e:6d:22:0a:85:5c:5c:67:47:4c:b3:22:
         01:d1:37:cf:17:e1:e5:d4:c8:25:33:64:38:0f:96:14:99:5f:
         95:58:19:51:c8:de:f7:13:74:ed:82:72:57:37:dd:78:13:05:
         0a:e2:9f:a5:31:f6:58:29:f6:9b:f2:cf:58:20:d3:38:7e:2e:
         e0:33:08:82:72:c6:5d:28:d0:5e:cd:b6:68:59:da:11:95:ec:
         79:6d:85:83:bc:ef:84:bf:64:13:0b:9d:e4:a5:f2:13:27:27:
         b5:e3:e1:86:5a:33:44:b3:86:d8:35:72:5e:4a:1f:13:38:a5:
         f7:e9:c9:8a:29:a2:c6:7c:49:9c:d2:c1:aa:35:f5:03:c0:d8:
         58:de:29:16:77:be:00:d6:a3:08:c6:2a:42:59:b9:8c:0f:b0:
         8a:80:70:61:68:9f:27:7c:72:26:e5:05:3a:02:d3:46:6f:08:
         18:f3:0e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:41 2024 by rpki-client on console-ams.rpki-client.org