Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/C60E9F12D17B11EE815AA4C5775412E6.roa
File:                     C60E9F12D17B11EE815AA4C5775412E6.roa (raw, json)
Hash identifier:          5YXTBSw7uzdx3vRUA+gQh5qR5NxHkOoXC7p9EbcWemI=
Subject key identifier:   70:DC:8C:78:28:9A:07:E1:41:8B:10:1A:EA:D6:66:AF:B0:E8:31:53
Certificate issuer:       /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial:       1C
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/C60E9F12D17B11EE815AA4C5775412E6.roa
Signing time:             Thu 22 Feb 2024 12:13:23 +0000
ROA not before:           Thu 22 Feb 2024 12:13:19 +0000
ROA not after:            Tue 28 Feb 2034 12:13:19 +0000
asID:                     329391
IP address blocks:        102.210.8.0/22 maxlen: 24
                          2c0f:2b40::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 12:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
        Validity
            Not Before: Feb 22 12:13:19 2024 GMT
            Not After : Feb 28 12:13:19 2034 GMT
        Subject: CN=65d73a63-0691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:15:df:58:a3:91:5d:48:bf:91:9f:4f:34:
                    df:33:ce:2a:57:96:65:20:36:05:55:b5:ed:72:43:
                    6d:c6:bf:83:eb:90:b5:ac:1e:f2:54:c6:e8:8f:81:
                    01:95:27:db:17:55:e4:da:c2:61:44:7f:00:23:e5:
                    bc:08:61:b6:d3:dc:bd:69:d3:39:ee:bf:a9:1f:89:
                    aa:f5:2a:5c:6e:02:8a:c8:d7:1f:87:b6:ee:4e:8f:
                    53:30:e2:cd:a7:78:82:3c:7a:f5:fa:09:73:df:60:
                    6b:29:ed:4c:f8:13:7f:3e:a2:d7:f0:bf:7b:b1:0c:
                    53:d4:59:7b:ed:80:4d:49:b3:28:53:83:67:93:4b:
                    e7:e0:63:e9:9f:c1:a2:15:1f:31:7c:8e:38:7f:14:
                    ba:41:46:8a:fb:b5:95:5c:2b:92:11:3b:fa:2a:07:
                    b3:e0:9d:3d:cf:15:fe:7a:8d:72:78:48:d3:09:11:
                    7c:c2:cb:47:a6:12:08:50:21:78:d4:07:84:01:cc:
                    4c:4d:71:8d:51:a4:49:8d:73:61:bd:ed:31:d9:91:
                    6c:3f:5e:53:a9:8b:9f:3f:98:ab:33:5c:71:2f:98:
                    88:0a:0b:49:27:72:63:08:27:b7:a9:3e:b9:17:49:
                    bf:3d:69:75:d8:1f:d6:c1:b5:30:40:9e:5c:42:e5:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DC:8C:78:28:9A:07:E1:41:8B:10:1A:EA:D6:66:AF:B0:E8:31:53
            X509v3 Authority Key Identifier:
                keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/C60E9F12D17B11EE815AA4C5775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.8.0/22
                IPv6:
                  2c0f:2b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:91:d6:b3:ed:38:2d:dd:78:7b:d5:86:1a:58:35:2a:ec:0a:
         26:59:8c:f7:4a:7a:bb:a0:3e:54:2d:c0:dc:69:36:64:7b:23:
         04:3e:16:5e:25:5c:a5:45:e8:b6:6d:86:56:69:b2:71:52:cc:
         f0:19:cb:b8:b1:c5:56:8a:59:45:ac:94:73:22:4f:7b:00:e7:
         57:2a:16:e4:46:43:e7:73:df:1e:b8:ab:ee:fc:f5:0e:2a:cd:
         fd:46:5e:71:1a:ce:ad:17:c6:40:2b:d6:bd:02:c2:02:2f:fa:
         40:f3:2e:fb:7c:98:53:94:cb:31:74:3e:08:37:63:97:72:c6:
         11:69:f7:86:5b:7e:43:c7:c2:b1:11:61:0b:79:c9:a3:98:c6:
         52:c0:8d:6d:be:0d:b5:c9:4d:49:72:b7:fe:6d:69:af:1a:21:
         0c:fd:15:f6:a6:83:a8:93:18:64:6a:25:c0:3a:a1:1d:84:06:
         35:d2:4f:02:7d:10:9d:80:47:ea:57:e2:58:bd:6e:fe:dd:a6:
         e8:ae:d6:bb:e6:2f:a0:f3:d8:ba:03:c4:7d:db:4f:ec:11:d1:
         2b:04:5a:71:72:57:82:37:81:4f:a5:0c:f5:29:32:40:7e:c7:
         64:27:27:33:22:78:ff:1c:b4:3f:82:0a:9c:28:f3:66:2b:72:
         e2:4e:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----