Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBF7191E06B111EEA02BB6714AD9E6FC.roa
File:                     FBF7191E06B111EEA02BB6714AD9E6FC.roa (raw, json)
Hash identifier:          vVbP7wheC8X/fcjzMW1M2bbE/ZGJq8mgvPYgAhGzg2g=
Subject key identifier:   D0:44:C1:D0:ED:44:EC:C3:0C:F9:CE:00:F7:62:D3:46:AA:4D:40:96
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0F0F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBF7191E06B111EEA02BB6714AD9E6FC.roa
Signing time:             Fri 09 Jun 2023 10:40:00 +0000
ROA not before:           Fri 09 Jun 2023 10:39:55 +0000
ROA not after:            Tue 10 Jun 2025 10:39:55 +0000
asID:                     200482
IP address blocks:        154.16.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3855 (0xf0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun  9 10:39:55 2023 GMT
            Not After : Jun 10 10:39:55 2025 GMT
        Subject: CN=64830180-61b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:63:f0:e0:28:40:f3:76:f5:01:3e:ed:6a:a1:
                    f7:fd:2f:8d:b9:1f:1f:cb:33:eb:da:6f:95:b3:39:
                    b4:35:a2:10:5d:b4:d5:56:93:b5:73:cf:6a:c7:09:
                    1c:b8:91:3c:a8:90:5a:83:86:17:fc:ac:94:82:16:
                    77:a6:14:6e:6b:a6:13:77:fa:28:44:9b:b8:0d:c6:
                    b6:74:3d:fa:2f:e0:9d:58:a2:ee:81:c9:67:5b:02:
                    aa:2f:6a:b1:54:d9:10:29:69:2f:b2:d0:54:80:69:
                    88:57:0a:d3:e1:32:dd:c8:3a:72:27:d2:5a:03:0b:
                    5e:31:03:17:44:a6:ca:19:1c:0c:aa:b6:47:7e:69:
                    0c:6c:d1:bf:2f:30:1d:2a:f8:2f:4f:3d:51:53:3b:
                    36:5a:f6:01:c7:01:04:25:20:ce:fb:76:4a:a8:0d:
                    1c:84:4d:18:f6:19:cc:8d:f1:d0:58:81:bf:cc:e4:
                    92:2a:a7:28:aa:9f:04:51:a3:fb:2b:f5:26:7a:53:
                    89:b2:10:99:52:a2:68:e9:1f:7f:c0:9f:a4:0a:99:
                    be:8e:ee:14:9a:3d:18:e3:64:8d:8f:e5:04:ce:5e:
                    d6:f6:6b:0a:91:96:e1:f8:a5:bd:62:18:90:e4:e4:
                    75:4d:72:80:de:2a:c5:ef:c5:a5:b0:d9:ef:d8:f2:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:44:C1:D0:ED:44:EC:C3:0C:F9:CE:00:F7:62:D3:46:AA:4D:40:96
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBF7191E06B111EEA02BB6714AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:24:b6:16:73:49:ec:1e:f9:f3:e0:ac:d1:fe:af:b2:e2:bb:
         b0:ea:6e:3f:f9:44:e0:36:7e:60:bc:81:43:26:f1:0c:52:f8:
         ca:ac:9e:4e:b2:c1:fb:05:c9:45:17:c4:ac:58:ad:5f:35:70:
         06:f1:1a:10:ec:25:09:00:9e:7e:d6:d2:a1:b7:6c:92:68:e4:
         27:f1:b9:15:2d:af:30:86:65:20:7a:35:e3:58:a4:f2:83:53:
         79:66:a5:88:b4:ee:57:c0:58:46:bf:d5:e5:f5:a0:10:fe:75:
         1c:25:d4:72:e7:3f:b3:c3:66:d6:ec:b0:bd:37:a7:a8:27:74:
         4c:ed:0c:87:f5:31:56:b2:2f:d3:73:b2:63:dc:bd:f8:44:bb:
         0f:3c:05:03:20:b4:14:03:b8:9d:c0:dc:f1:d8:b7:32:58:f1:
         76:e3:75:21:cd:75:e2:7a:b2:4d:35:4a:19:7e:88:bb:d3:36:
         08:69:aa:d5:c3:bb:e1:ae:b5:81:47:8e:b9:ed:92:c1:5e:f5:
         28:e4:73:60:b0:66:ba:a0:21:57:01:65:2d:29:1c:42:2c:ee:
         ac:f1:b3:a1:25:0c:0c:df:00:d8:a4:79:69:70:14:54:51:24:
         2b:bc:b9:a2:b1:29:ea:3d:e9:40:b3:6e:2f:9a:a2:98:c4:85:
         2d:e1:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-ams.rpki-client.org