Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67974C90D18C11EC8AF16998F1222468.roa
File:                     67974C90D18C11EC8AF16998F1222468.roa (raw, json)
Hash identifier:          qVYksRwAoVJYIIFAjDwImOGQsRhyYUL7Ibq0gY8zC1Q=
Subject key identifier:   FB:6E:10:A2:CE:5C:C7:89:9C:3E:23:56:87:2D:0C:7B:89:46:A5:4B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1641
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67974C90D18C11EC8AF16998F1222468.roa
Signing time:             Thu 12 May 2022 00:42:31 +0000
ROA not before:           Thu 12 May 2022 00:00:25 +0000
ROA not after:            Wed 31 May 2023 00:00:25 +0000
asID:                     141677
IP address blocks:        154.91.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5697 (0x1641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 12 00:00:25 2022 GMT
            Not After : May 31 00:00:25 2023 GMT
        Subject: CN=627c57f7-cbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:7a:37:d2:52:a2:79:5a:ce:63:45:a0:7d:
                    f4:5e:a3:45:43:11:aa:ec:e8:95:2b:47:f5:98:a1:
                    40:88:7a:f6:ac:4f:1e:2d:5f:99:3f:e6:1d:22:e4:
                    66:a0:a2:e3:32:83:4c:34:5e:8d:5c:5d:aa:5a:06:
                    73:a6:33:94:a5:0d:51:fa:b1:d0:ca:64:40:f4:15:
                    d3:d1:75:67:02:95:72:c7:05:9f:e7:af:a9:5a:60:
                    fd:07:45:62:2a:fd:93:4e:ce:a9:c3:5a:ab:48:3c:
                    98:8a:52:98:0f:7c:87:9e:2e:83:08:b7:c0:c7:5a:
                    00:d4:28:a5:79:05:2d:74:a4:7e:90:02:14:c7:de:
                    49:e9:aa:b5:80:6a:00:bd:80:fb:ff:45:fb:0a:06:
                    95:a1:bd:c6:8c:ce:97:f7:d9:4e:e1:59:47:75:0e:
                    19:a1:2b:ce:04:8c:23:cb:17:f7:d6:25:7a:b1:4a:
                    7f:5e:05:1b:aa:1a:48:56:7c:ee:01:79:60:f5:23:
                    2f:e1:80:51:c7:1c:cf:2f:ff:9d:a7:a5:0e:27:ca:
                    01:85:bd:8c:cf:49:0e:b5:09:9e:0a:ee:f6:23:86:
                    7c:87:d5:a2:b8:08:3b:6b:74:d7:ea:fd:47:86:dc:
                    03:7c:e4:48:06:b4:e3:ce:84:3a:ec:06:18:01:6a:
                    39:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FB:6E:10:A2:CE:5C:C7:89:9C:3E:23:56:87:2D:0C:7B:89:46:A5:4B
            X509v3 Authority Key Identifier: 
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67974C90D18C11EC8AF16998F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:13:ee:8e:d2:55:0e:c3:70:f7:95:56:7c:24:54:d0:26:7b:
         11:95:f8:e5:d0:66:e3:5b:77:87:68:62:94:cf:7c:fe:18:1c:
         32:21:66:bd:a7:1c:9a:ba:ee:fd:df:4e:f4:08:d5:ed:33:48:
         69:a0:c9:53:a2:ad:f9:b0:4d:b0:70:83:38:29:80:86:76:4b:
         88:6b:62:e2:80:ed:ee:fa:7f:8a:b3:ca:dc:82:97:53:c5:37:
         b5:e5:49:c4:12:96:53:87:10:ae:e6:61:07:b8:46:9b:6c:4b:
         12:81:6e:b5:5a:db:5a:c2:2a:28:55:b4:4b:b0:ae:a2:81:c2:
         39:44:85:63:35:42:dc:1a:0d:05:df:1c:d7:f0:96:dd:b0:90:
         07:d3:5b:f6:88:04:da:3b:3b:d6:b9:b1:46:dd:33:e9:7e:b5:
         d4:4d:24:6f:f1:b4:0c:3f:7a:da:7e:8d:94:84:b6:2c:ba:f4:
         62:ab:bd:a4:52:2a:94:e9:6f:38:19:34:5a:82:16:a8:55:ef:
         ae:30:9d:13:ed:b2:83:59:4c:7e:78:d4:02:be:59:3f:27:79:
         e3:49:26:05:b0:26:72:23:61:f2:29:be:6d:3e:4b:06:59:e1:
         be:ba:a8:39:29:af:05:3e:53:6c:c9:5d:9a:b3:e6:fd:b8:08:
         72:09:b8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 10 10:28:43 2023 by rpki-client on console-fra.rpki-client.org