Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BB9198DAC30F11EDA50C0D7DF1222468.roa
File:                     BB9198DAC30F11EDA50C0D7DF1222468.roa (raw, json)
Hash identifier:          XFjKsfxhzaTmKHowQNocPIP5wyFQ1kxHNGnsrqhfs9o=
Subject key identifier:   57:1A:8A:07:3A:60:75:B3:7E:6E:1F:12:7E:2E:74:20:DE:76:35:4F
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0A05
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BB9198DAC30F11EDA50C0D7DF1222468.roa
Signing time:             Wed 15 Mar 2023 08:59:46 +0000
ROA not before:           Wed 15 Mar 2023 08:59:42 +0000
ROA not after:            Fri 15 Mar 2024 08:59:42 +0000
asID:                     61290
IP address blocks:        161.123.102.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565 (0xa05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 15 08:59:42 2023 GMT
            Not After : Mar 15 08:59:42 2024 GMT
        Subject: CN=64118902-6ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bd:36:38:4e:f3:29:a9:35:5d:fb:96:c6:75:
                    8e:14:da:e5:48:6c:6d:f3:2d:12:47:1b:2c:e8:f9:
                    f5:01:9a:62:39:ab:09:9f:f8:dd:db:5c:1d:a3:6c:
                    5b:a0:15:7f:54:4c:68:90:3e:8b:14:44:e6:54:4f:
                    cb:8d:e6:b4:c4:16:a5:12:d4:22:85:34:b7:68:f4:
                    77:31:72:11:5d:22:6f:e6:91:67:07:9f:88:b7:25:
                    b5:3f:60:17:a8:73:53:3a:bb:93:ee:23:4a:e9:7e:
                    e9:7d:72:5e:2f:fe:7f:06:16:30:c0:b2:40:a2:17:
                    5d:d5:31:59:0d:d4:2c:61:a4:87:47:2f:df:bc:63:
                    07:65:a9:2d:ab:4b:9e:2e:28:2c:75:b1:2c:7c:af:
                    39:e2:b8:9d:b9:7e:e8:17:d6:ba:08:0a:5c:b4:c6:
                    3c:dc:59:0b:ed:b3:40:c4:d0:20:31:bd:5f:17:11:
                    51:f2:64:d1:8a:22:a3:b2:b5:35:6f:f8:25:89:c3:
                    f8:12:b5:df:9c:f5:77:50:3a:78:e6:1d:58:a9:2d:
                    fb:9a:c5:84:4c:89:fd:55:fa:12:97:2f:5c:14:db:
                    15:e7:67:0c:dc:93:ee:46:f9:90:6a:49:ce:ce:9f:
                    57:d5:63:26:f4:78:ca:67:aa:46:61:8f:e6:e7:83:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1A:8A:07:3A:60:75:B3:7E:6E:1F:12:7E:2E:74:20:DE:76:35:4F
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BB9198DAC30F11EDA50C0D7DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:da:f9:a2:17:b2:b9:08:66:f5:26:af:29:58:23:2d:ed:f0:
         04:eb:7d:62:f2:00:0b:3f:85:6e:e3:06:c5:cd:cf:87:3a:2a:
         6b:35:99:26:48:d7:a3:0d:b5:fd:c2:89:97:02:f5:e6:c1:c6:
         6e:f3:4d:b7:45:db:5f:64:da:62:07:78:97:f8:f2:93:4b:77:
         86:57:42:3e:ee:c5:d0:fc:2c:46:2d:94:ee:3e:05:b5:18:8d:
         7a:8e:8c:13:9f:92:ac:f6:5a:86:0c:71:6c:47:3a:57:22:62:
         9d:b2:61:a5:24:85:ac:37:f5:80:65:75:c1:da:6b:6c:5f:86:
         06:ca:ed:48:cb:e3:c0:b8:eb:e5:4f:5f:73:16:16:c2:35:79:
         48:35:f2:17:f0:69:b9:55:2f:b2:4a:c3:68:23:ab:70:10:c6:
         a9:79:a7:15:b6:db:bc:01:8e:a2:de:10:88:cb:05:ce:66:a9:
         09:49:3c:f3:76:98:c1:4a:73:82:1c:ca:b2:0a:d2:34:40:ae:
         85:f7:5a:be:e3:9c:e6:ee:ee:1f:41:77:16:69:03:11:ea:28:
         63:41:66:88:ba:14:f2:75:6d:49:ef:d7:2f:77:da:28:97:46:
         d0:62:ab:be:4b:02:5a:3c:4f:23:0d:87:fe:45:02:8d:19:9f:
         c2:45:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----