Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD5CD03057B511EEBADB98644AD9E6FC.roa
File:                     CD5CD03057B511EEBADB98644AD9E6FC.roa (raw, json)
Hash identifier:          OdeSmAFTloqsT9PK13jtWcwwtz8sCBqdBIU34IcBz3s=
Subject key identifier:   B2:2F:0C:41:7E:EF:01:AC:DF:4A:8D:38:25:72:75:64:79:B0:59:E0
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1253
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD5CD03057B511EEBADB98644AD9E6FC.roa
Signing time:             Wed 20 Sep 2023 13:01:24 +0000
ROA not before:           Wed 20 Sep 2023 13:01:21 +0000
ROA not after:            Wed 25 Sep 2024 13:01:21 +0000
asID:                     213060
IP address blocks:        154.16.100.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4691 (0x1253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 20 13:01:21 2023 GMT
            Not After : Sep 25 13:01:21 2024 GMT
        Subject: CN=650aed24-0632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:bc:d8:e4:b2:30:c5:93:6e:f1:38:a7:1a:
                    aa:f3:31:6a:fa:99:54:1b:d9:0d:4f:e3:f1:e3:31:
                    91:13:bd:5f:46:89:05:a6:59:5e:18:4d:93:ce:5a:
                    bb:cc:26:64:3a:68:25:d7:d8:4f:8a:f5:8b:0e:12:
                    97:2c:b1:52:a6:b4:bf:85:cf:22:3d:5f:fa:90:16:
                    84:5f:a7:72:0b:31:c2:14:27:60:3c:79:4f:1e:4a:
                    3d:fb:de:cf:fa:b5:ae:b1:11:56:82:08:6f:d2:82:
                    83:d2:26:b1:b5:01:fa:84:a7:20:8e:4e:cf:ad:57:
                    ca:2c:02:b1:10:8f:69:1d:58:6e:5a:8b:61:b0:e1:
                    68:8f:21:6c:fe:f0:af:bc:3a:3f:79:0e:13:c1:13:
                    40:43:78:d8:6d:1d:e5:f7:cc:02:76:1e:a8:66:63:
                    85:41:f1:8a:62:6a:b2:57:71:a0:01:e0:d9:13:22:
                    de:e8:73:ed:63:be:4e:16:37:a6:03:bc:fa:58:29:
                    04:39:24:f1:aa:21:dd:4c:a9:aa:a3:80:2c:1d:e6:
                    7b:8c:1d:96:f6:91:84:76:08:9f:34:22:a6:db:fd:
                    57:02:c6:6d:e9:ef:31:d4:83:61:cf:a0:a8:33:01:
                    78:67:e5:f2:29:50:27:0f:23:5d:18:a5:eb:d2:09:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2F:0C:41:7E:EF:01:AC:DF:4A:8D:38:25:72:75:64:79:B0:59:E0
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD5CD03057B511EEBADB98644AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:14:bf:7a:a5:69:33:ce:c9:b0:6d:00:43:7b:7f:14:70:
         bc:0d:57:7d:9c:9f:f6:94:e6:66:04:79:37:08:3d:26:93:d0:
         6e:d5:89:da:80:95:bd:0a:95:16:b9:96:47:9a:1d:2d:30:f5:
         c5:e8:ff:1d:2b:1d:d3:0c:cd:29:af:08:74:48:e4:d2:fe:0b:
         7a:78:87:8e:d7:99:6b:4b:63:70:5d:c9:55:6b:b6:a0:87:f0:
         98:e3:fa:83:9f:2b:d2:16:5f:d3:c7:f2:4c:49:6c:a4:f1:4d:
         f5:2f:82:88:63:b1:1c:16:8a:5d:fe:87:66:5d:bf:66:87:fa:
         cb:27:d5:7a:01:b9:97:83:ac:42:82:bc:71:d6:a9:86:83:2e:
         2e:5c:2f:ee:f3:c4:75:3f:8c:cf:ba:07:26:75:a8:a5:f7:0d:
         9a:73:c6:fa:43:8e:4e:ea:8b:82:d4:34:ab:90:d1:ee:85:0c:
         2b:a9:4e:d0:4b:83:ea:19:3c:e2:83:2e:e1:b5:7d:19:76:1c:
         0d:f1:18:37:4e:e6:2b:65:d9:99:c3:5e:4d:ea:6f:c9:54:2e:
         fb:e7:81:e7:b7:88:a3:69:7c:b0:a9:83:f0:e7:dd:d4:06:2f:
         ab:bd:f0:77:12:33:91:74:6d:2b:89:97:5f:51:f4:20:df:6a:
         35:9f:c9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----