Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/27EF84589AC211EEABBE141AD25BE465.roa
File:                     27EF84589AC211EEABBE141AD25BE465.roa (raw, json)
Hash identifier:          vTHCErNTc/wR6w140rIpDnApH5+4dt5dHZ1qtV2eJfA=
Subject key identifier:   7E:B0:A3:97:31:B2:9F:F1:9F:73:D0:2D:89:A2:C9:A0:2C:84:60:1D
Certificate issuer:       /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial:       03DC
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/27EF84589AC211EEABBE141AD25BE465.roa
Signing time:             Thu 14 Dec 2023 20:48:38 +0000
ROA not before:           Thu 14 Dec 2023 20:48:34 +0000
ROA not after:            Sat 31 Dec 2033 20:48:34 +0000
asID:                     328528
IP address blocks:        102.36.160.0/22 maxlen: 22
                          102.218.100.0/23 maxlen: 23
                          102.218.102.0/24 maxlen: 24
                          102.220.212.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
        Validity
            Not Before: Dec 14 20:48:34 2023 GMT
            Not After : Dec 31 20:48:34 2033 GMT
        Subject: CN=657b6a26-4de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:b2:de:fc:33:39:f5:d1:07:58:51:06:ee:
                    ea:ff:42:ff:5e:4a:1f:3f:fd:b2:06:01:81:d3:74:
                    f9:c2:d3:d4:b7:27:35:38:f8:ba:54:fa:5a:8c:78:
                    82:61:c1:f9:19:a9:34:2b:63:f3:15:d2:a2:e7:32:
                    94:96:0b:1d:a2:e3:77:c4:b2:84:da:9b:1c:ad:eb:
                    78:43:ab:86:27:9a:1a:6f:ae:5a:cf:5c:93:e5:04:
                    b1:68:21:13:05:99:5e:49:f1:9d:90:0f:8e:0c:62:
                    bc:b2:80:d6:d6:39:0d:ba:0c:03:25:16:02:51:5a:
                    d5:92:f0:f5:38:2a:f1:aa:8e:be:66:d6:8a:ac:70:
                    c9:e7:74:40:53:53:bb:b2:e6:92:4b:80:f6:7e:1f:
                    19:8b:99:de:73:4a:c8:cf:21:a0:65:a2:6f:6a:48:
                    c7:07:7a:3f:28:c3:94:da:b5:eb:46:76:62:79:68:
                    6e:f8:75:96:00:ba:0c:72:de:8c:bb:00:6e:8f:ed:
                    3f:8e:93:c2:37:fe:08:3d:21:04:d5:16:d0:a5:ed:
                    f3:45:a2:f0:80:ef:4d:a5:51:d3:9d:e5:43:ff:70:
                    62:c6:f5:f6:22:ec:c1:f1:96:dc:3a:e2:2f:e5:96:
                    14:0c:54:3f:e0:fc:ce:2c:96:c3:87:0b:ed:1c:f0:
                    04:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B0:A3:97:31:B2:9F:F1:9F:73:D0:2D:89:A2:C9:A0:2C:84:60:1D
            X509v3 Authority Key Identifier:
                keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/27EF84589AC211EEABBE141AD25BE465.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.160.0/22
                  102.218.100.0-102.218.102.255
                  102.220.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:aa:5b:81:0a:a3:86:eb:49:7c:e6:49:6a:5e:72:9b:21:83:
         2b:cf:f5:f4:33:16:42:a3:a6:87:2c:c1:80:ef:5a:3d:93:70:
         a6:e5:1f:14:4b:b8:e3:4a:88:44:55:4d:55:ca:d7:65:c8:ba:
         c7:26:87:a6:ac:b8:e4:f3:82:03:1d:8c:59:b3:9e:4e:91:c9:
         26:7d:c9:a0:cd:c8:5d:b3:2e:f3:bf:dc:3c:b5:d6:4d:fa:81:
         0a:c1:23:de:75:6e:83:fe:8c:92:a2:fb:8a:3a:87:d3:2d:82:
         2d:d2:c7:d4:46:f4:55:dc:ab:4b:80:6b:3e:e0:e9:e3:fa:0b:
         02:c4:1b:69:66:0e:4b:13:67:1e:1e:62:c1:45:34:39:f8:71:
         0e:50:6e:4b:1f:ad:84:f9:47:9d:7c:fc:1d:4d:4b:7f:99:a4:
         c8:3b:8a:59:8a:0c:b6:7c:ae:d3:d2:19:cc:f4:78:d4:d5:c1:
         56:ff:44:e0:1d:ea:80:fa:7a:32:70:30:6f:48:a6:96:f9:cf:
         b4:f3:c2:cf:82:86:4c:eb:97:e9:bf:80:c9:15:1e:6d:78:8c:
         11:14:14:65:f5:d7:28:56:22:30:a9:bd:69:fb:ed:8c:d8:a5:
         a4:84:b3:65:ac:11:94:d9:83:71:12:f9:22:58:51:d3:55:90:
         d7:4b:47:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----