Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/486996B8D27611EBB35D0D14F8AEA228.roa
File:                     486996B8D27611EBB35D0D14F8AEA228.roa (raw, json)
Hash identifier:          ZrF//KrB0RDQ6TEyzOaSpWUDLXjFygkf/vFx+xz5dIY=
Subject key identifier:   9C:3D:8E:CA:A0:79:A3:56:F9:DB:8D:0D:D1:EB:B1:44:56:CF:36:0B
Certificate issuer:       /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial:       073D
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/486996B8D27611EBB35D0D14F8AEA228.roa
Signing time:             Mon 21 Jun 2021 09:51:43 +0000
ROA not before:           Wed 23 Jun 2021 09:51:38 +0000
ROA not after:            Wed 25 Jun 2025 09:51:38 +0000
asID:                     11845
IP address blocks:        2c0f:fd58::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853 (0x73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
        Validity
            Not Before: Jun 23 09:51:38 2021 GMT
            Not After : Jun 25 09:51:38 2025 GMT
        Subject: CN=60d0612f-c60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:38:f4:d6:07:84:2f:ec:ef:c0:c1:68:e3:
                    2e:63:3a:f0:01:6b:77:62:f6:6a:00:69:b6:fb:98:
                    af:33:26:41:e6:8b:c5:f8:74:45:7e:2c:27:71:70:
                    e3:18:89:98:4b:fb:86:fc:d9:d7:fd:68:58:c5:f1:
                    00:86:32:47:09:d2:d4:7a:17:c6:d1:7e:2b:4e:00:
                    35:fd:93:10:02:cb:8f:6e:49:44:7f:d7:18:27:c9:
                    a2:64:05:b7:be:ad:a0:a6:6c:ea:f6:bb:18:75:28:
                    47:ac:b5:06:a7:90:dd:99:21:1e:9a:f4:48:31:0d:
                    c8:5a:27:39:ae:c9:9b:f2:5c:3c:d6:17:21:41:f6:
                    f9:d9:81:04:e2:dd:9d:d5:4b:d1:13:27:57:4b:fb:
                    8d:51:9d:25:da:77:2c:84:27:34:ef:db:fb:fa:9b:
                    56:cd:62:d6:5d:e7:ef:85:a1:bb:23:41:0e:e6:e3:
                    5c:fc:06:18:78:b2:3e:85:e3:4d:4b:6b:4b:95:0b:
                    0e:3a:43:09:37:0f:ce:f3:8d:ff:66:74:06:31:6f:
                    f4:47:5e:91:53:c3:3d:87:04:cf:71:01:bc:a7:33:
                    a3:7f:5b:37:80:c1:d7:a0:e6:80:16:8f:6c:92:b7:
                    f1:bd:a7:9f:4b:9c:6e:e7:3c:cd:41:7f:ae:c3:26:
                    37:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3D:8E:CA:A0:79:A3:56:F9:DB:8D:0D:D1:EB:B1:44:56:CF:36:0B
            X509v3 Authority Key Identifier:
                keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/486996B8D27611EBB35D0D14F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fd58::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:4c:a6:63:57:f3:dd:21:83:a2:d0:ab:09:4f:49:1f:ff:01:
         6c:66:eb:3b:5f:04:7e:ec:6f:81:79:32:5d:b7:6f:a4:1a:e8:
         c0:cb:a5:a8:42:c0:a2:60:1c:8c:b3:3a:1b:89:e0:da:ee:8b:
         eb:3c:35:b2:1c:c2:fa:20:5e:4d:a3:e2:dc:c3:17:56:14:88:
         2c:d4:87:23:04:bf:b3:89:46:2d:b3:c9:48:90:b5:57:b6:6b:
         a8:4e:a7:16:74:86:15:4f:26:11:6d:64:86:b3:ef:d5:76:fa:
         72:cd:9b:e6:a9:69:31:26:fa:93:a6:66:a9:6e:c1:e2:fc:be:
         c3:fc:0a:e8:8f:77:b8:41:30:c6:47:e0:3f:e2:79:4e:4b:1f:
         9f:ff:ab:5e:49:b1:c8:f3:89:d3:8b:bc:5b:b1:7d:ea:c2:4c:
         80:bd:bf:21:55:e7:3c:4e:22:4e:76:48:3b:de:f6:ec:c3:2a:
         a4:c0:d0:84:ac:b4:0c:60:49:f5:10:d8:18:99:25:a1:ae:16:
         73:c3:3d:c8:6c:9e:b0:8a:fe:a7:43:4c:7e:8f:eb:26:c0:51:
         97:5b:0b:99:7d:8e:27:8d:dc:de:d2:2c:64:06:d0:87:3c:ed:
         9b:8a:a3:b0:ec:d4:44:73:3a:c1:79:cf:e1:69:66:91:e6:a8:
         03:64:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----