Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D86944C8EA8A11E9A6FA7081F8AEA228.roa
File:                     D86944C8EA8A11E9A6FA7081F8AEA228.roa (raw, json)
Hash identifier:          9TGH5b7HzhRD7Ra3Igc19qe+FOIl2raCI4iT6jElMNs=
Subject key identifier:   0A:9D:B8:23:F1:F7:28:D2:16:B9:FF:AE:DD:B5:04:C8:0F:63:CC:53
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       A1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D86944C8EA8A11E9A6FA7081F8AEA228.roa
Signing time:             Wed 09 Oct 2019 11:49:27 +0000
ROA not before:           Wed 09 Oct 2019 11:49:23 +0000
ROA not after:            Tue 09 Oct 2029 11:49:23 +0000
asID:                     61317
IP address blocks:        102.165.33.0/24 maxlen: 24
                          102.165.34.0/24 maxlen: 24
                          102.165.35.0/24 maxlen: 24
                          102.165.36.0/24 maxlen: 24
                          102.165.37.0/24 maxlen: 24
                          102.165.38.0/24 maxlen: 24
                          102.165.39.0/24 maxlen: 24
                          102.165.48.0/24 maxlen: 24
                          102.165.49.0/24 maxlen: 24
                          102.165.50.0/24 maxlen: 24
                          102.165.51.0/24 maxlen: 24
                          102.165.52.0/24 maxlen: 24
                          102.165.53.0/24 maxlen: 24
                          102.165.54.0/24 maxlen: 24
                          102.165.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  9 11:49:23 2019 GMT
            Not After : Oct  9 11:49:23 2029 GMT
        Subject: CN=5d9dc947-7387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:c5:63:df:49:cf:af:3f:ba:f2:da:52:ed:
                    d9:41:f8:1c:72:3c:09:0d:63:db:69:ff:79:f6:5c:
                    0f:58:97:c4:ff:12:f7:19:ac:f6:e9:d3:73:27:cb:
                    f6:04:10:cf:dc:f3:c9:1b:07:d5:df:9e:47:62:82:
                    ec:02:f3:34:11:61:ab:fe:27:b3:6a:02:13:5d:30:
                    2a:e4:20:c5:f7:d0:d4:ca:8e:81:e4:42:1a:96:5e:
                    f6:30:29:ef:33:7d:94:e3:df:87:e3:9d:4d:3b:fa:
                    54:dd:3f:44:42:2d:7f:bf:52:f1:2f:59:6d:1a:f5:
                    b0:53:83:2a:29:97:d9:9d:57:42:38:bf:c8:d5:6f:
                    9f:4c:98:17:e4:7a:0a:b4:8b:15:6f:62:14:5d:b1:
                    64:d9:84:96:07:38:1f:7c:4a:90:e0:4c:36:a6:ec:
                    af:95:dc:47:e5:1c:b5:f0:01:fe:2c:b3:78:7d:6b:
                    35:00:a4:94:66:7e:37:e6:d9:71:58:3b:10:3f:e3:
                    83:e0:cf:53:8c:c8:63:ca:cc:d4:6d:01:d3:5d:8d:
                    20:ac:5f:01:94:97:bc:32:bf:28:ac:29:71:db:4d:
                    90:83:38:98:b2:71:9e:1e:b5:90:97:26:34:ce:20:
                    30:b0:91:a9:c6:14:f8:52:01:c6:56:3c:0c:c6:90:
                    27:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9D:B8:23:F1:F7:28:D2:16:B9:FF:AE:DD:B5:04:C8:0F:63:CC:53
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D86944C8EA8A11E9A6FA7081F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.33.0-102.165.39.255
                  102.165.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:a9:e8:0a:24:f4:44:20:bd:aa:a3:be:ae:02:23:ab:7b:99:
         00:d6:79:24:0a:2e:54:55:c1:c0:33:08:77:15:81:b0:7d:6b:
         da:01:9e:57:7c:d4:0c:5f:73:5f:fe:72:cf:3d:e2:5b:ed:b7:
         aa:b2:cc:04:f0:75:14:5e:e5:ee:2b:bf:cb:53:7b:92:a5:95:
         6e:57:ab:73:bf:39:a5:a2:39:09:81:bb:5b:14:27:e2:52:69:
         d1:b4:0f:a2:bb:3c:6a:e6:43:67:bc:8e:6d:be:11:55:94:4f:
         37:6d:db:6f:a2:99:f2:19:f2:62:90:a8:b3:d8:b7:be:64:bf:
         e9:22:2b:a3:98:3a:71:99:32:95:2b:a2:32:4e:5d:64:3a:1c:
         6d:88:a9:fe:7f:0d:32:60:51:f6:5e:30:fb:28:0a:a9:36:a7:
         1f:25:81:75:b8:99:e5:b3:db:d7:5b:23:60:8b:46:c4:3c:32:
         e5:5f:8f:f5:ea:ed:a1:c8:c2:06:24:dd:34:b3:7a:de:73:a2:
         42:95:00:54:5d:3e:e3:c7:14:79:8e:cd:8e:f9:9e:ed:0a:56:
         58:16:9c:f0:f3:7d:f8:36:93:4c:3c:98:40:e4:95:e3:22:21:
         78:5e:47:24:d4:93:5e:ef:da:b3:61:60:94:5b:21:82:81:f6:
         11:49:d5:d1
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0xOTEwMDkxMTQ5MjNaFw0yOTEwMDkxMTQ5MjNaMBgxFjAU
BgNVBAMTDTVkOWRjOTQ3LTczODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIDcVj30nPrz+68tpS7dlB+BxyPAkNY9tp/3n2XA9Yl8T/EvcZrPbp03Mn
y/YEEM/c88kbB9XfnkdiguwC8zQRYav+J7NqAhNdMCrkIMX30NTKjoHkQhqWXvYw
Ke8zfZTj34fjnU07+lTdP0RCLX+/UvEvWW0a9bBTgyopl9mdV0I4v8jVb59MmBfk
egq0ixVvYhRdsWTZhJYHOB98SpDgTDam7K+V3EflHLXwAf4ss3h9azUApJRmfjfm
2XFYOxA/44Pgz1OMyGPKzNRtAdNdjSCsXwGUl7wyvyisKXHbTZCDOJiycZ4etZCX
JjTOIDCwkanGFPhSAcZWPAzGkCcNAgMBAAGjggJ8MIICeDAdBgNVHQ4EFgQUCp24
I/H3KNIWuf+u3bUEyA9jzFMwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0Q4Njk0NEM4RUE4QTExRTlBNkZBNzA4MUY4QUVBMjI4LnJvYTAtBggr
BgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQAZqUhAwQDZqUgAwQDZqUwMA0GCSqG
SIb3DQEBCwUAA4IBAQAzqegKJPREIL2qo76uAiOre5kA1nkkCi5UVcHAMwh3FYGw
fWvaAZ5XfNQMX3Nf/nLPPeJb7beqsswE8HUUXuXuK7/LU3uSpZVuV6tzvzmlojkJ
gbtbFCfiUmnRtA+iuzxq5kNnvI5tvhFVlE83bdtvopnyGfJikKiz2Le+ZL/pIiuj
mDpxmTKVK6IyTl1kOhxtiKn+fw0yYFH2XjD7KAqpNqcfJYF1uJnls9vXWyNgi0bE
PDLlX4/16u2hyMIGJN00s3rec6JClQBUXT7jxxR5js2O+Z7tClZYFpzw8334NpNM
PJhA5JXjIiF4Xkck1JNe79qzYWCUWyGCgfYRSdXR
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org