Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/ABD11286DDE011EDA73ACBA12F6D8C1D.roa
File:                     ABD11286DDE011EDA73ACBA12F6D8C1D.roa (raw, json)
Hash identifier:          CrSZVkLn2mG+v90N9rYKKKXC6NyGXT2ZyjgvWgDINzw=
Subject key identifier:   AA:E3:2F:CB:EE:61:7C:7D:EE:75:FA:6F:93:A4:CD:3F:24:E6:CE:93
Certificate issuer:       /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial:       02
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/ABD11286DDE011EDA73ACBA12F6D8C1D.roa
Signing time:             Tue 18 Apr 2023 12:00:54 +0000
ROA not before:           Tue 18 Apr 2023 12:00:44 +0000
ROA not after:            Mon 18 Apr 2033 12:00:44 +0000
asID:                     19711
IP address blocks:        41.84.224.0/19 maxlen: 19
                          41.215.144.0/20 maxlen: 20
                          154.119.96.0/19 maxlen: 19
                          2001:4338::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
        Validity
            Not Before: Apr 18 12:00:44 2023 GMT
            Not After : Apr 18 12:00:44 2033 GMT
        Subject: CN=643e8676-88b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:69:9a:bd:39:2f:65:23:4b:ec:50:29:0b:
                    24:ef:51:61:05:ed:17:dd:7b:93:e8:da:82:cf:73:
                    56:ad:31:92:7a:94:ac:f0:ea:c4:60:f5:d3:92:16:
                    11:4c:9b:b2:f0:06:8a:29:5f:53:62:57:6e:08:85:
                    4a:cd:50:96:88:10:c0:d1:d5:3d:62:3c:a2:28:ed:
                    33:b1:0f:3b:41:cc:01:ca:47:01:d8:ab:2e:c6:55:
                    38:bf:3e:56:21:4c:40:f2:29:82:e8:8d:6b:f2:2c:
                    80:a0:92:a8:13:9e:db:ac:2b:35:f2:8b:f1:56:7e:
                    d5:cb:aa:3c:8b:d5:a7:e4:4e:0d:11:5e:7b:81:ad:
                    b8:87:b0:13:d5:21:cd:64:82:23:44:7a:80:bb:d2:
                    53:de:f4:e5:0d:a2:a0:ff:9f:c3:32:8c:9a:26:52:
                    72:9f:2f:10:94:7d:fa:7b:42:70:41:89:19:c5:49:
                    5d:17:da:07:38:d6:2f:17:86:c5:81:83:ce:20:ef:
                    84:01:f6:db:3b:e6:96:69:bd:c7:93:aa:0b:8d:f3:
                    9b:fc:ce:e7:1c:e8:91:47:ff:37:98:9e:cd:a4:a0:
                    43:d8:79:4d:7d:6b:83:60:1c:8a:e6:8c:50:50:15:
                    16:03:2b:bc:2c:55:79:83:b4:f4:6e:f3:af:cc:c4:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E3:2F:CB:EE:61:7C:7D:EE:75:FA:6F:93:A4:CD:3F:24:E6:CE:93
            X509v3 Authority Key Identifier:
                keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/ABD11286DDE011EDA73ACBA12F6D8C1D.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.84.224.0/19
                  41.215.144.0/20
                  154.119.96.0/19
                IPv6:
                  2001:4338::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:76:57:78:3f:bf:33:f9:b0:83:f2:c4:c7:47:56:da:0e:06:
         41:8d:1d:c5:f4:7f:6d:03:bb:2a:4a:82:be:79:c3:ae:38:a5:
         e5:25:90:7a:c7:f3:27:79:c2:2f:59:81:ff:1e:0b:b6:e5:d8:
         f7:f0:df:92:0f:c2:e3:9e:95:8c:15:7c:4a:04:76:6d:1f:0e:
         1c:6f:13:a4:ed:e5:21:06:cc:ee:56:2d:f4:4f:c7:94:9d:7e:
         b1:63:89:69:40:63:9b:ff:88:d8:89:71:2b:c2:12:2b:09:44:
         37:5e:6a:cc:74:96:2d:87:17:fd:90:ef:f2:e6:05:06:71:ed:
         8f:4f:a1:29:53:6e:06:bb:35:af:0f:fc:6e:ef:6d:83:31:4d:
         f5:5a:6d:a1:f6:62:f1:c0:fa:7c:58:79:77:80:77:8f:6c:0f:
         f4:90:90:3e:95:0b:44:25:27:80:d1:65:9b:ce:8b:f2:82:de:
         96:9f:5b:b5:79:2f:18:6a:eb:b9:2c:11:e0:8c:80:92:a3:ae:
         9e:96:33:8f:5d:a7:59:49:1a:9f:86:85:b1:76:e7:9c:f9:d1:
         1e:5d:0f:b5:77:7e:67:ca:3a:d2:49:c1:3d:22:b8:7c:08:2a:
         ca:d4:46:2f:89:6f:5d:4f:96:8b:97:56:0d:eb:75:fa:81:35:
         8f:de:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----