Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4380A18C3CCD11EEA85B5F364AD9E6FC.roa
File:                     4380A18C3CCD11EEA85B5F364AD9E6FC.roa (raw, json)
Hash identifier:          WtUSidB4O0CPNzQNgFYfs0ZgTtAo39Y8mT1Aii+ohq4=
Subject key identifier:   74:33:37:4C:3C:47:7E:20:51:6B:22:47:50:92:22:E7:4F:30:AD:49
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       016A
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4380A18C3CCD11EEA85B5F364AD9E6FC.roa
Signing time:             Thu 17 Aug 2023 07:11:19 +0000
ROA not before:           Thu 17 Aug 2023 07:11:16 +0000
ROA not after:            Thu 10 Aug 2028 07:11:16 +0000
asID:                     4809
IP address blocks:        154.72.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
        Validity
            Not Before: Aug 17 07:11:16 2023 GMT
            Not After : Aug 10 07:11:16 2028 GMT
        Subject: CN=64ddc817-9b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:1a:53:7a:4f:a7:e6:71:1b:fd:81:0f:d2:
                    c8:83:56:13:0d:8b:c0:45:36:f6:ff:17:a9:c2:10:
                    22:4a:c3:ff:c4:d7:26:bd:0f:47:86:32:52:e8:1a:
                    be:d2:ba:a3:55:61:36:10:1a:10:dd:2f:4c:8c:eb:
                    f4:e3:7c:b3:1e:dd:38:55:7c:d2:53:3e:6a:8a:c3:
                    5b:50:e7:0f:19:78:06:df:97:54:19:9b:4b:2e:3e:
                    9d:59:7d:de:f7:2b:2f:ff:81:f1:f3:e3:50:22:7d:
                    0f:9e:4e:63:0b:a3:fb:aa:59:e3:a8:f7:fc:b8:ab:
                    45:9e:c9:bd:a8:c9:ba:40:a5:ab:cd:63:be:f2:51:
                    d6:e2:8a:f0:e9:4e:80:10:5c:2c:eb:7c:bf:62:37:
                    87:41:6b:01:f3:a3:f1:2f:b6:37:d6:4f:2d:22:e9:
                    cf:49:86:ec:fd:38:02:dc:e1:aa:38:21:7d:fa:c2:
                    45:13:5f:63:db:35:e8:25:b4:2f:f8:6c:52:9d:75:
                    0c:da:64:39:11:90:e0:03:be:8b:1f:89:ea:d5:74:
                    cc:78:f1:28:13:46:0a:65:5b:cf:81:6f:ff:f7:ec:
                    7f:f1:2f:1c:50:31:ed:70:96:37:4c:df:11:88:6c:
                    30:06:d0:0a:4f:97:34:f3:fd:bc:5b:7f:84:3b:e1:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:33:37:4C:3C:47:7E:20:51:6B:22:47:50:92:22:E7:4F:30:AD:49
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4380A18C3CCD11EEA85B5F364AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.72.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:1d:44:f3:e8:eb:67:dd:59:4b:8d:65:2a:de:5f:d8:9c:2b:
         24:54:06:6d:b5:b5:df:93:af:7e:57:51:e4:58:21:f7:65:d8:
         91:83:6e:4d:9d:90:5f:85:bf:c7:08:fb:78:30:eb:a2:6b:11:
         fe:52:41:4c:56:75:d3:79:25:f8:45:00:60:77:ee:38:80:4c:
         63:fd:aa:a7:2b:fa:93:42:08:e5:1b:90:ab:bb:bc:02:83:55:
         f3:66:ae:92:38:7c:7b:89:1d:bc:91:72:88:4f:b6:91:3d:c5:
         de:95:6f:09:18:4b:25:7d:3e:cf:cf:9d:f7:7d:39:5b:8c:63:
         ba:e5:b8:7b:3c:b7:3e:86:89:f1:90:79:3d:bf:72:00:20:08:
         02:23:2a:90:15:e3:6c:cb:a0:03:9e:2b:86:67:9a:79:e9:59:
         2a:08:2f:3c:51:3b:25:e8:0a:ee:25:74:4e:93:fc:fe:85:52:
         71:e2:a9:64:a2:be:d5:40:6a:e9:b9:5b:03:0e:ca:03:dd:5a:
         7f:b3:46:96:40:77:9f:81:cf:c6:6c:c2:ff:17:1e:39:ea:37:
         6f:32:ed:6e:04:1f:f3:e8:f0:d2:cc:12:7f:d4:03:68:2e:4f:
         04:ab:c7:bb:1a:f3:48:90:71:5f:c5:eb:5b:d8:20:f5:96:5a:
         2a:ab:76:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 06:16:42 2023 by rpki-client on console-ams.rpki-client.org