Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8A4F27AA3D8211EDBCEB46B5F1222468.roa
File:                     8A4F27AA3D8211EDBCEB46B5F1222468.roa (raw, json)
Hash identifier:          PNuVce+IGWNU3WW7QcVyZSMiCccceF39f3LeezPOz7s=
Subject key identifier:   9D:7B:00:AE:D3:0F:E6:D9:2B:DE:7D:11:40:92:00:E0:45:2A:EC:F8
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       088B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8A4F27AA3D8211EDBCEB46B5F1222468.roa
Signing time:             Mon 26 Sep 2022 10:03:59 +0000
ROA not before:           Mon 26 Sep 2022 10:03:56 +0000
ROA not after:            Tue 26 Sep 2023 10:03:56 +0000
asID:                     203999
IP address blocks:        161.123.200.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187 (0x88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 10:03:56 2022 GMT
            Not After : Sep 26 10:03:56 2023 GMT
        Subject: CN=6331790f-89eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:22:ce:ec:a1:c5:99:69:9b:70:a7:5a:c9:
                    20:35:33:c7:ae:bc:4d:e6:3f:0b:42:6c:3e:06:92:
                    d8:9d:b0:30:1c:53:55:d2:7d:ce:f9:39:ea:a2:6e:
                    da:00:e3:f1:5b:0b:fc:13:48:fa:84:f3:3a:54:44:
                    21:20:bf:bb:ca:cc:f3:1f:55:dd:47:fe:d6:04:01:
                    79:86:11:8f:17:07:49:9b:d6:d2:4a:1b:4d:e8:10:
                    d3:23:11:c8:7e:17:e3:89:3c:c9:ae:66:75:50:1c:
                    86:31:0b:31:7f:d4:fb:1c:bc:e6:79:32:f9:f3:f8:
                    b0:c3:27:d0:18:c6:f7:54:d6:5b:1f:d7:3f:ca:27:
                    1f:39:8e:18:99:a4:0f:fb:3b:08:5f:0c:b4:a5:01:
                    a0:1c:77:f1:14:48:a7:fd:fb:b2:cf:33:07:65:59:
                    ea:3f:9d:21:f2:67:9c:f6:ab:48:4f:09:cd:66:f8:
                    17:3a:89:e7:2a:0d:94:0e:4b:7e:78:5f:2d:70:0c:
                    85:f2:74:7b:8e:10:5d:d1:49:0f:31:7c:89:72:4a:
                    b3:7b:f3:53:0c:a6:f1:bc:17:84:65:cc:fb:f0:86:
                    f7:fc:b1:3d:86:b1:2f:a6:8d:00:5b:54:5b:22:a6:
                    1f:81:91:6a:75:df:69:3f:9a:b4:3f:6d:67:8c:76:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7B:00:AE:D3:0F:E6:D9:2B:DE:7D:11:40:92:00:E0:45:2A:EC:F8
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8A4F27AA3D8211EDBCEB46B5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:a7:27:54:53:9a:01:2c:31:2e:ae:28:05:30:a3:c0:54:76:
         15:b5:b8:63:c0:d9:4e:25:be:31:8f:cc:ee:b4:f2:8e:ad:68:
         3c:7b:45:3a:93:d5:7e:5f:5c:ae:39:3d:7d:e4:80:7b:de:67:
         b8:f1:f6:bf:bf:e6:c4:85:65:63:ac:43:a4:39:45:65:5a:47:
         fb:87:67:0d:a5:65:54:29:20:21:6c:0b:ad:db:8a:86:00:55:
         d6:82:e5:b7:7c:b8:f6:22:db:11:6f:3e:76:2c:87:72:26:68:
         fe:20:d4:2d:02:39:a5:f4:1c:8f:8b:3d:01:ee:64:f1:2f:4a:
         e9:b4:42:27:0d:b6:16:d8:7e:5e:ee:e2:1b:1a:df:d0:10:99:
         61:af:08:de:aa:ec:fa:c0:12:cf:b1:a7:ae:4e:7f:08:a1:0e:
         be:f1:1c:b5:9d:d4:ec:64:87:3c:bb:7e:4c:a5:f2:9c:e7:7d:
         75:39:bd:21:3c:a0:20:9d:65:ad:bd:ee:f8:4c:dc:95:9c:37:
         7d:66:cf:8b:a2:8b:ca:3e:bb:10:b3:8e:a7:c3:33:14:4e:36:
         3f:06:d7:16:74:af:61:1c:5c:2b:29:ec:7b:24:09:ed:c0:a8:
         fd:50:04:76:8d:13:52:2d:f5:7b:97:3d:55:33:39:71:c8:6a:
         cf:96:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----