Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/50BFA078D7AA11EE9C28D47E775412E6.roa
File:                     50BFA078D7AA11EE9C28D47E775412E6.roa (raw, json)
Hash identifier:          90alFCc7+jBAgZyU8ooAtrN1Ut+kOpLUR3CJw7XK9J4=
Subject key identifier:   F8:1E:5A:1D:C8:7B:CA:DE:6C:14:B0:F9:87:F5:A1:02:FF:40:FB:1E
Certificate issuer:       /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial:       059A
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/50BFA078D7AA11EE9C28D47E775412E6.roa
Signing time:             Fri 01 Mar 2024 09:01:39 +0000
ROA not before:           Fri 01 Mar 2024 09:01:36 +0000
ROA not after:            Sun 01 Mar 2026 09:01:36 +0000
asID:                     327705
IP address blocks:        196.220.128.0/19 maxlen: 20
                          2001:43f8:9f0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 14:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
        Validity
            Not Before: Mar  1 09:01:36 2024 GMT
            Not After : Mar  1 09:01:36 2026 GMT
        Subject: CN=65e19973-9bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:a3:61:ee:51:28:f5:a1:5f:ef:46:a8:ff:
                    f2:39:e8:e2:73:9e:cb:27:82:a1:b6:08:bd:aa:a4:
                    35:dc:da:af:db:52:f7:35:20:26:c0:72:6a:33:c6:
                    18:8f:e4:e8:1e:dc:23:92:a8:82:7d:7d:97:77:b1:
                    1f:21:50:58:36:72:36:24:aa:a3:3f:36:ee:db:f4:
                    56:e7:a0:e5:9f:6a:45:0c:65:61:2d:7e:5a:c9:48:
                    68:54:16:aa:b1:f3:c8:47:6c:d2:f9:56:77:c6:0b:
                    b6:78:77:1f:c6:60:9d:11:7d:35:8a:2e:c1:01:00:
                    35:ad:66:71:40:86:75:fb:f2:82:91:7c:b9:b5:14:
                    13:ca:51:65:a2:77:a8:45:cd:75:54:fe:25:ed:d9:
                    e9:65:3f:6e:46:19:86:2d:7e:6e:31:e0:63:e3:ae:
                    d8:d2:8d:9e:b1:96:c0:f6:9e:ff:6d:c6:56:d5:b1:
                    7b:f8:ff:5a:41:c7:45:ee:99:46:ed:b9:2e:e8:49:
                    10:22:d9:d0:19:8b:26:14:42:4a:98:68:03:d3:73:
                    e3:b0:20:bb:6b:22:93:80:53:23:bc:59:86:1f:18:
                    f6:e4:c2:3a:68:da:d2:51:df:42:a4:6d:b9:3f:c8:
                    43:e3:b3:cf:19:09:dd:f1:02:6b:07:9d:26:3d:c5:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1E:5A:1D:C8:7B:CA:DE:6C:14:B0:F9:87:F5:A1:02:FF:40:FB:1E
            X509v3 Authority Key Identifier:
                keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/50BFA078D7AA11EE9C28D47E775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.220.128.0/19
                IPv6:
                  2001:43f8:9f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:03:ca:2b:17:5a:9c:3c:08:d2:df:ef:dd:f3:cf:cd:df:58:
         bb:55:a2:60:56:ae:43:a7:ba:82:f8:af:22:63:8a:e9:dc:0a:
         82:5b:26:76:8f:a9:11:b3:a6:17:94:d8:5c:27:ce:9b:cf:a8:
         d5:13:5f:6d:59:ff:74:8d:9f:e4:26:ea:43:0c:94:fc:7d:9f:
         c4:95:82:18:b7:10:e1:cd:24:87:d6:4b:fd:c6:81:32:58:25:
         f7:ff:a4:60:fb:60:25:7d:2e:4f:67:ae:73:c5:0a:f5:58:e2:
         e6:af:85:1e:f3:91:3b:01:37:72:e0:04:c4:93:2b:6c:ab:d0:
         3e:e4:52:93:a7:2e:13:11:26:76:a1:1e:0e:09:1e:ca:9f:7c:
         71:cf:b7:87:a0:61:38:6e:88:fc:71:86:24:29:9c:13:c4:32:
         1c:3d:d4:23:2f:54:f5:ad:e0:f5:b7:dc:02:ce:b0:1f:92:ea:
         d3:e6:c4:ec:bb:5a:b7:ff:c6:7a:de:78:1f:5b:12:f0:5f:8f:
         c4:a5:61:e4:99:6a:e9:8e:61:10:06:77:90:e7:2b:70:c2:a4:
         68:5c:5b:39:fd:ca:85:cb:47:e9:44:42:bf:0d:08:0b:c1:64:
         38:2a:a6:eb:61:a5:eb:09:62:af:67:1d:0a:a5:2c:6d:ec:18:
         6c:39:8f:84
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICBZowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU1MDFBRjExMC8GA1UEBRMoMEJCQTQwRjU1MERFNDlFRUM1NzI5MTcxMjRFRTAw
OEEyNEM0NEQwRjAeFw0yNDAzMDEwOTAxMzZaFw0yNjAzMDEwOTAxMzZaMBgxFjAU
BgNVBAMTDTY1ZTE5OTczLTliZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsGqNh7lEo9aFf70ao//I56OJznssngqG2CL2qpDXc2q/bUvc1ICbAcmoz
xhiP5Oge3COSqIJ9fZd3sR8hUFg2cjYkqqM/Nu7b9FbnoOWfakUMZWEtflrJSGhU
Fqqx88hHbNL5VnfGC7Z4dx/GYJ0RfTWKLsEBADWtZnFAhnX78oKRfLm1FBPKUWWi
d6hFzXVU/iXt2ellP25GGYYtfm4x4GPjrtjSjZ6xlsD2nv9txlbVsXv4/1pBx0Xu
mUbtuS7oSRAi2dAZiyYUQkqYaAPTc+OwILtrIpOAUyO8WYYfGPbkwjpo2tJR30Kk
bbk/yEPjs88ZCd3xAmsHnSY9xTitAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQU+B5a
Hch7yt5sFLD5h/WhAv9A+x4wHwYDVR0jBBgwFoAUC7pA9VDeSe7FcpFxJO4AiiTE
TQ8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NTAxLzlDREZDNzM4OTE1MTExRUFBNUE3MzA0NEY4QUVBMjI4L0M3cEE5
VkRlU2U3RmNwRnhKTzRBaWlURVRROC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0M3cEE5VkRlU2U3RmNwRnhKTzRBaWlURVRROC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ1NTAxLzlDREZDNzM4OTE1MTExRUFBNUE3MzA0NEY4
QUVBMjI4LzUwQkZBMDc4RDdBQTExRUU5QzI4RDQ3RTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAXE3IAwDwQCAAIwCQMHACAB
Q/gJ8DANBgkqhkiG9w0BAQsFAAOCAQEAQQPKKxdanDwI0t/v3fPPzd9Yu1WiYFau
Q6e6gvivImOK6dwKglsmdo+pEbOmF5TYXCfOm8+o1RNfbVn/dI2f5CbqQwyU/H2f
xJWCGLcQ4c0kh9ZL/caBMlgl9/+kYPtgJX0uT2euc8UK9Vji5q+FHvOROwE3cuAE
xJMrbKvQPuRSk6cuExEmdqEeDgkeyp98cc+3h6BhOG6I/HGGJCmcE8QyHD3UIy9U
9a3g9bfcAs6wH5Lq0+bE7Ltat//Get54H1sS8F+PxKVh5Jlq6Y5hEAZ3kOcrcMKk
aFxbOf3KhctH6URCvw0IC8FkOCqm62Gl6wlir2cdCqUsbewYbDmPhA==
-----END CERTIFICATE-----