Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E3D2A52E3D7B11ED8335BBA3F1222468.roa
File:                     E3D2A52E3D7B11ED8335BBA3F1222468.roa (raw, json)
Hash identifier:          RrDjmo1ExT/jBCiuxQesFZJTzH3IeHq97i6fllR8d8c=
Subject key identifier:   8B:C2:80:DE:4F:5E:6D:66:B6:16:FA:45:E7:D9:D5:EC:2B:C8:F8:CD
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0847
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E3D2A52E3D7B11ED8335BBA3F1222468.roa
Signing time:             Mon 26 Sep 2022 09:16:23 +0000
ROA not before:           Mon 26 Sep 2022 09:16:19 +0000
ROA not after:            Tue 26 Sep 2023 09:16:19 +0000
asID:                     203999
IP address blocks:        161.123.2.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119 (0x847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 09:16:19 2022 GMT
            Not After : Sep 26 09:16:19 2023 GMT
        Subject: CN=63316de7-0d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:44:c5:b6:e5:2d:0c:4c:50:26:63:72:f3:ad:
                    68:e9:83:b1:65:44:7f:a7:a1:29:3d:4b:c5:56:31:
                    c6:12:4a:0f:ed:38:da:b3:3e:d9:41:72:49:52:73:
                    ee:c4:94:3b:71:4f:fd:1e:0f:0a:79:06:8c:12:45:
                    07:3e:3e:d5:ea:1b:6f:33:e0:d5:71:60:bd:c7:2d:
                    3e:fb:fe:2d:c0:8e:d8:1a:3f:44:a1:c3:98:af:c5:
                    cf:8a:5b:ec:9d:af:9f:d2:73:4a:a9:de:fa:3e:ee:
                    f0:e1:e5:1e:4c:47:6d:30:72:71:e1:ca:4e:53:5c:
                    63:62:fc:2d:f1:2b:e3:07:e0:03:fd:69:43:51:5a:
                    65:38:1c:3b:31:23:ce:de:a3:20:0c:22:82:bf:06:
                    ff:c7:a6:a0:b8:f0:98:3c:32:57:35:e6:d8:d8:0e:
                    d4:bd:93:97:24:9f:2a:32:cc:ac:50:21:b9:77:be:
                    00:c8:e8:be:cf:c1:91:ce:91:99:09:ec:a4:5a:8c:
                    66:ff:fa:fd:99:83:e3:43:2f:31:41:ce:b9:ee:2b:
                    43:d0:bc:75:f3:25:8e:ba:33:93:77:df:ae:da:24:
                    78:09:af:cb:39:17:ae:09:da:8f:23:eb:38:80:07:
                    2f:40:5b:4b:bf:a7:30:6d:30:82:e0:74:03:e3:cc:
                    34:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C2:80:DE:4F:5E:6D:66:B6:16:FA:45:E7:D9:D5:EC:2B:C8:F8:CD
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E3D2A52E3D7B11ED8335BBA3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:aa:00:58:37:09:74:31:5a:91:70:6e:ea:00:71:cc:78:1d:
         3c:1f:99:43:67:a9:73:c4:35:ea:b3:07:79:0e:90:59:fc:d3:
         62:e5:9c:d5:69:76:35:f3:e8:aa:32:fa:ee:32:95:43:06:f0:
         de:f6:8e:76:87:00:ae:8b:6d:cc:0a:c9:59:43:2e:25:d0:dd:
         21:60:0d:70:9a:2e:9f:be:90:d7:d4:4c:82:5b:db:b7:c0:4f:
         69:1a:a5:76:45:0a:79:fd:ea:a9:ab:00:ea:cc:e4:d2:19:ca:
         3a:2c:6a:45:4e:d2:e7:9d:c1:6e:10:b6:13:f0:e3:be:18:39:
         0c:5f:4b:ad:4c:4d:b9:1f:1d:53:f5:52:9c:ad:02:b8:fb:6c:
         69:cc:d4:98:5a:cf:45:6c:6a:cc:71:7a:62:ed:d3:8f:f3:7b:
         0e:a6:13:71:c3:d7:1b:3e:85:92:dc:07:cd:94:f4:ff:c1:75:
         09:91:d0:cc:8e:44:80:6f:b0:78:e1:52:58:00:26:a4:27:e8:
         67:4d:71:32:57:17:70:d4:27:13:8c:9c:e5:bc:1b:1f:e5:48:
         fb:7e:62:dd:c1:91:bf:28:a0:69:ca:ca:04:15:51:e4:84:94:
         67:21:22:81:f1:22:64:ac:0b:5a:10:3f:3e:be:bd:32:95:fc:
         52:95:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----