Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E7EED7C0CF0E11EDAFAEE4F1F1222468.roa
File:                     E7EED7C0CF0E11EDAFAEE4F1F1222468.roa (raw, json)
Hash identifier:          y+Ctq0VndE52bFA4HekEKGZxQUdMni0hewW6C7qhQFM=
Subject key identifier:   D0:0F:21:3A:88:D1:40:4E:17:73:3E:84:A7:84:D6:D6:A2:E6:D0:4B
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0A56
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E7EED7C0CF0E11EDAFAEE4F1F1222468.roa
Signing time:             Thu 30 Mar 2023 15:24:05 +0000
ROA not before:           Thu 30 Mar 2023 15:24:01 +0000
ROA not after:            Sat 30 Mar 2024 15:24:01 +0000
asID:                     204765
IP address blocks:        161.123.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2646 (0xa56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 30 15:24:01 2023 GMT
            Not After : Mar 30 15:24:01 2024 GMT
        Subject: CN=6425a995-5e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:92:96:7c:b9:f4:0e:5b:f9:ff:57:67:fb:
                    bb:5c:f9:5e:8b:8b:99:89:19:d5:ec:d9:b5:a9:f4:
                    dd:7b:d6:68:49:39:56:c6:42:09:35:dd:bc:76:e2:
                    70:dc:33:24:07:d1:76:7e:ca:0c:98:40:5d:3a:45:
                    47:de:b0:0e:8e:fa:46:eb:f7:22:2c:a7:82:49:92:
                    fe:f4:17:cd:b8:70:60:e9:10:8a:db:e9:ae:5d:a0:
                    11:ec:b7:2a:9c:75:a1:b1:6a:43:de:29:8c:32:73:
                    ab:0c:50:7a:e0:6d:f0:d4:b3:23:63:5b:bb:c0:ae:
                    de:47:f1:da:26:a0:3d:92:e8:b2:63:35:67:0b:3a:
                    62:4e:1d:04:f3:68:33:03:a8:bc:c4:ab:97:54:d3:
                    c3:b7:6f:09:10:61:e7:48:ae:bb:ca:ae:de:f6:a6:
                    32:5e:d4:94:35:0f:4c:62:f1:d2:a1:ac:d1:8a:48:
                    a1:40:af:db:3f:90:e9:59:9d:c6:13:e5:6f:2d:46:
                    86:8a:3d:59:3b:a5:c6:9e:43:6c:4c:d4:1e:2f:29:
                    26:d7:c8:a9:61:cc:9b:7c:af:0e:73:e8:3f:09:d1:
                    52:c6:90:7c:89:a2:2b:3a:90:b9:6a:46:06:b5:35:
                    ec:e1:a3:b6:08:4c:8c:8c:73:e4:8e:b1:b7:78:ed:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0F:21:3A:88:D1:40:4E:17:73:3E:84:A7:84:D6:D6:A2:E6:D0:4B
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E7EED7C0CF0E11EDAFAEE4F1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:85:0f:a8:bc:41:ee:42:b5:bd:5d:fc:69:bf:75:05:34:95:
         1e:62:7b:0a:a1:1a:e2:9f:f5:28:33:18:38:59:81:b6:17:61:
         75:c7:0d:e7:82:5f:4a:50:1c:c8:92:73:1b:4b:ba:3a:4e:6d:
         28:dd:af:03:26:06:34:a4:b2:73:98:78:37:fe:78:9c:98:de:
         af:b6:ca:ec:c8:03:18:10:41:17:5b:e7:87:12:f3:2f:3a:c4:
         9f:bf:81:94:b4:0f:7b:f2:a7:ea:86:5f:2a:e9:8f:41:2f:b0:
         1a:e9:66:de:24:36:af:8e:ed:27:aa:6a:78:52:10:75:3a:28:
         f4:c0:26:6d:d8:6f:07:89:50:dd:8d:86:6a:ff:50:03:90:74:
         dc:30:cf:dd:00:cc:ca:bb:79:10:ba:92:49:57:f1:8a:f3:26:
         8b:2e:a3:13:28:cc:92:22:68:5b:9a:37:34:1b:86:7e:48:c9:
         a7:66:4e:ab:d1:13:3a:de:13:3d:a3:3f:a6:83:d3:35:4a:34:
         49:12:c2:dc:40:c0:7b:83:16:79:a5:12:9f:76:30:60:a3:7c:
         e1:fd:1f:04:4a:e4:4d:cc:15:3a:ad:86:16:a0:7b:91:ef:bc:
         0e:4b:f1:70:59:d4:73:74:92:f6:74:6a:60:44:e7:cc:ce:23:
         cf:9f:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----