Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/E5960D0035AC11ED9F29FDE1F1222468.roa
File:                     E5960D0035AC11ED9F29FDE1F1222468.roa (raw, json)
Hash identifier:          DUkFkmjPr4fOLSDXKWXB4GcsiLmnNuCA93I6DlUYzXw=
Subject key identifier:   5A:06:50:17:D8:A1:0B:93:F3:03:81:76:B3:4D:47:8C:30:69:4C:67
Certificate issuer:       /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial:       15
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/E5960D0035AC11ED9F29FDE1F1222468.roa
Signing time:             Fri 16 Sep 2022 10:47:02 +0000
ROA not before:           Fri 16 Sep 2022 10:46:58 +0000
ROA not after:            Thu 16 Sep 2032 10:46:58 +0000
asID:                     329063
IP address blocks:        102.215.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
        Validity
            Not Before: Sep 16 10:46:58 2022 GMT
            Not After : Sep 16 10:46:58 2032 GMT
        Subject: CN=63245426-50af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:a5:04:dc:c9:05:08:35:1d:8a:4d:c7:1a:
                    99:11:b1:1b:51:dc:0f:0f:d5:a5:ca:45:76:1d:4e:
                    98:ec:cf:93:9a:3c:ec:54:19:34:8e:3f:be:d1:98:
                    bd:fb:e3:9e:ce:9f:21:94:1b:16:8c:ff:d9:26:43:
                    8b:c8:c0:cc:7d:ad:73:1d:70:30:cb:16:b5:fc:8e:
                    82:43:be:76:7b:bc:3c:30:b1:97:de:d3:bf:85:c9:
                    fa:b4:5b:c6:57:c8:06:c9:5b:4d:a7:7e:07:75:33:
                    09:57:95:ce:d6:ec:77:74:f6:13:83:6e:41:bc:a6:
                    b2:8d:18:23:0e:f5:8b:5b:ba:7d:bf:8a:21:dc:4a:
                    6f:6e:e9:5c:57:03:29:bb:db:e6:be:60:ec:d8:4e:
                    4a:a4:6a:fa:e3:a7:26:02:bd:2f:c5:bb:5c:32:6d:
                    bd:58:a4:6f:d7:fb:e3:08:cc:cd:8d:4a:5e:1c:1b:
                    b4:04:ed:7f:39:8d:3d:f2:57:f4:d8:4b:43:3e:b2:
                    cb:60:f8:55:34:d0:a4:8f:54:73:d8:00:6f:00:80:
                    be:15:8c:af:4b:94:a4:dc:c3:38:fe:fd:b3:83:d4:
                    a5:7e:59:fe:34:f8:a7:a8:2f:99:07:55:77:bc:11:
                    cb:ec:12:fb:71:a3:47:e9:b8:cf:7a:34:65:01:03:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:06:50:17:D8:A1:0B:93:F3:03:81:76:B3:4D:47:8C:30:69:4C:67
            X509v3 Authority Key Identifier:
                keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/E5960D0035AC11ED9F29FDE1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:f4:88:2c:20:e3:cb:b4:e0:f4:4a:86:ce:a4:6b:93:8a:9b:
         58:7b:4b:bd:1d:14:9c:44:74:23:4d:82:6d:b3:b0:2e:73:17:
         64:51:e0:5f:df:57:e0:86:19:f7:24:1d:3f:5d:a4:e5:50:26:
         ee:94:67:08:79:24:d1:2f:89:3c:f8:64:2c:0e:d1:77:98:d4:
         bc:eb:72:8b:e2:fd:b6:7d:3d:2f:4e:c0:2c:2c:18:89:bc:57:
         81:5b:03:72:ff:f2:d1:c8:3d:e1:c0:98:cd:b0:c2:a7:47:e4:
         8d:f8:c5:27:e3:a2:01:a9:14:03:8a:85:38:f1:e2:12:d1:a3:
         2d:ff:35:f2:0f:99:ea:66:1a:2e:e8:39:f7:16:10:50:f6:fd:
         31:52:64:b4:98:4c:db:8b:12:e1:62:50:68:e8:72:ac:8a:4b:
         f4:5b:87:f9:82:ee:c1:62:2e:9b:58:3b:ed:a1:27:20:28:9d:
         44:11:c9:47:d7:35:5d:45:9e:9e:a4:68:e4:0c:49:21:cf:cc:
         5c:e7:db:18:b8:93:43:e0:6b:50:29:9e:d1:b7:f3:e8:be:77:
         b4:f9:b4:0c:13:75:ea:3a:6b:82:d6:2d:fc:ef:75:aa:68:22:
         a0:d3:d3:4a:f6:fb:52:87:48:44:78:c9:59:41:77:9a:f3:8e:
         0f:5d:31:d9
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBFTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NEQxREFGMTEwLwYDVQQFEygyNzc5M0QyMTVGMDg4MDVEQjhEMEJBODkyRDMzNkYy
OUFCN0JCMDVCMB4XDTIyMDkxNjEwNDY1OFoXDTMyMDkxNjEwNDY1OFowGDEWMBQG
A1UEAwwNNjMyNDU0MjYtNTBhZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMcapQTcyQUINR2KTccamRGxG1HcDw/VpcpFdh1OmOzPk5o87FQZNI4/vtGY
vfvjns6fIZQbFoz/2SZDi8jAzH2tcx1wMMsWtfyOgkO+dnu8PDCxl97Tv4XJ+rRb
xlfIBslbTad+B3UzCVeVztbsd3T2E4NuQbymso0YIw71i1u6fb+KIdxKb27pXFcD
Kbvb5r5g7NhOSqRq+uOnJgK9L8W7XDJtvVikb9f74wjMzY1KXhwbtATtfzmNPfJX
9NhLQz6yy2D4VTTQpI9Uc9gAbwCAvhWMr0uUpNzDOP79s4PUpX5Z/jT4p6gvmQdV
d7wRy+wS+3GjR+m4z3o0ZQEDd6UCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRaBlAX
2KELk/MDgXazTUeMMGlMZzAfBgNVHSMEGDAWgBQneT0hXwiAXbjQuoktM28pq3uw
WzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTREMUQvNThDRjMwRTQyOTI4MTFFRDhFNjhFOEY4RjEyMjI0NjgvSjNrOUlW
OElnRjI0MExxSkxUTnZLYXQ3c0ZzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSjNrOUlWOElnRjI0MExxSkxUTnZLYXQ3c0ZzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTREMUQvNThDRjMwRTQyOTI4MTFFRDhFNjhFOEY4RjEy
MjI0NjgvRTU5NjBEMDAzNUFDMTFFRDlGMjlGREUxRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbXhDANBgkqhkiG9w0BAQsF
AAOCAQEAqvSILCDjy7Tg9EqGzqRrk4qbWHtLvR0UnER0I02CbbOwLnMXZFHgX99X
4IYZ9yQdP12k5VAm7pRnCHkk0S+JPPhkLA7Rd5jUvOtyi+L9tn09L07ALCwYibxX
gVsDcv/y0cg94cCYzbDCp0fkjfjFJ+OiAakUA4qFOPHiEtGjLf818g+Z6mYaLug5
9xYQUPb9MVJktJhM24sS4WJQaOhyrIpL9FuH+YLuwWIum1g77aEnICidRBHJR9c1
XUWenqRo5AxJIc/MXOfbGLiTQ+BrUCme0bfz6L53tPm0DBN16jprgtYt/O91qmgi
oNPTSvb7UodIRHjJWUF3mvOOD10x2Q==
-----END CERTIFICATE-----