Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8A3D08D8EBCD11EC8BF16F7DF1222468.roa
File:                     8A3D08D8EBCD11EC8BF16F7DF1222468.roa (raw, json)
Hash identifier:          BtJmVZSD5qSEU7TE9o7iKym0gsBDeHNvk7nfnWHC8As=
Subject key identifier:   24:CA:76:03:D2:19:BE:CC:26:ED:FA:4D:DA:F6:99:C3:23:D8:DC:54
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       0144
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8A3D08D8EBCD11EC8BF16F7DF1222468.roa
Signing time:             Tue 14 Jun 2022 10:34:16 +0000
ROA not before:           Tue 14 Jun 2022 10:34:12 +0000
ROA not after:            Fri 14 Jun 2030 10:34:12 +0000
asID:                     328992
IP address blocks:        102.216.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Jun 14 10:34:12 2022 GMT
            Not After : Jun 14 10:34:12 2030 GMT
        Subject: CN=62a86428-87fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:29:69:0f:0c:39:b9:10:35:b2:42:04:91:
                    2d:73:06:42:20:9e:ca:da:4e:17:11:84:40:b3:2e:
                    55:83:ee:62:8c:a3:48:65:46:4c:fd:0a:65:8c:60:
                    93:ee:eb:c9:c2:68:f6:00:86:58:99:ad:9e:93:58:
                    7c:a8:fe:19:d4:d4:ca:b3:50:cc:49:d3:ed:fa:f4:
                    b2:ca:2c:ec:55:da:71:dc:0d:52:14:b7:d0:a1:2b:
                    a2:d9:22:3b:1d:39:b3:3d:81:79:75:ee:7c:d0:71:
                    73:56:4c:58:6a:6d:fa:6a:50:30:86:5a:d8:9d:1d:
                    b9:7c:84:18:fc:60:c6:49:10:3b:ef:9e:9c:08:a9:
                    28:77:7a:51:81:bd:57:4f:c1:cf:8a:63:ea:87:dd:
                    21:9b:35:d5:e6:17:24:ba:af:81:f6:bc:d8:4e:44:
                    32:63:cd:5a:90:e9:a2:eb:24:81:a7:93:9d:66:03:
                    94:76:99:d0:b9:29:6e:3f:00:1e:28:e1:50:31:77:
                    63:11:3a:64:73:31:76:21:80:60:8f:0f:e3:7f:85:
                    bf:94:8a:7b:64:da:7f:66:a9:bb:76:a1:2d:9d:be:
                    f5:41:8b:b2:c7:08:3e:62:ec:5b:71:17:8c:78:2b:
                    16:5a:27:20:d3:a9:e7:02:3f:f8:3b:68:2b:05:82:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CA:76:03:D2:19:BE:CC:26:ED:FA:4D:DA:F6:99:C3:23:D8:DC:54
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8A3D08D8EBCD11EC8BF16F7DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:95:94:2d:a3:bc:ce:fe:c6:d2:db:cf:eb:c8:36:23:3a:a5:
         91:77:b7:f9:40:79:74:27:3f:9f:46:ef:91:36:4f:79:a3:04:
         c5:a7:ef:aa:0e:e4:3a:2e:e4:4e:f1:c0:03:d3:2c:bb:cd:dc:
         f5:83:1d:1c:17:75:58:f1:a0:f2:0d:cf:7b:47:b7:47:28:93:
         35:91:a5:87:4a:00:80:27:61:9f:37:52:c3:3e:2d:6e:2d:85:
         23:4e:29:90:a3:0c:80:99:44:b8:09:d8:96:1c:6d:e3:23:09:
         f3:46:32:3c:7b:e1:5d:53:33:b0:a6:9b:97:44:bc:c2:44:2c:
         04:9e:0d:91:e6:9f:4e:92:d1:b5:55:56:df:3e:56:0e:30:a3:
         ce:8c:e9:49:62:41:22:ca:eb:19:d7:ca:66:5d:57:17:08:63:
         42:b1:f3:ee:72:0c:dc:17:7a:ed:d1:ab:09:da:af:70:51:24:
         09:f2:9b:35:e8:b2:ad:e0:56:87:89:e2:30:52:39:16:e7:cd:
         3c:61:21:ac:31:df:35:56:90:1a:89:19:d4:81:50:fc:2f:e6:
         da:47:a4:60:7a:bf:68:9d:92:58:f7:06:e6:6d:26:50:6f:ef:
         4a:f6:3b:50:01:b5:40:94:e4:b0:8d:fe:71:e4:9a:40:24:d6:
         5f:9a:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----