Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/B13901DE724911EBB9A16F5AF8AEA228.roa
File:                     B13901DE724911EBB9A16F5AF8AEA228.roa (raw, json)
Hash identifier:          VnKmvUjjIKYK7b8Sx8OzQlYdN9yN9bLfNUizGQf7gHA=
Subject key identifier:   71:9C:19:44:5A:1B:C3:CA:9C:A3:72:03:3A:78:D1:D0:70:4A:2F:2E
Certificate issuer:       /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial:       0A
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/B13901DE724911EBB9A16F5AF8AEA228.roa
Signing time:             Fri 19 Feb 2021 00:30:40 +0000
ROA not before:           Fri 19 Feb 2021 00:00:33 +0000
ROA not after:            Wed 19 Feb 2025 00:00:33 +0000
asID:                     328799
IP address blocks:        154.70.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
        Validity
            Not Before: Feb 19 00:00:33 2021 GMT
            Not After : Feb 19 00:00:33 2025 GMT
        Subject: CN=602f06b0-b5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:03:32:bf:52:a0:46:3a:98:33:08:65:35:
                    37:41:df:09:32:0b:9a:ce:7d:40:5f:a6:62:83:e2:
                    f5:16:0f:72:a8:4b:0e:61:46:d1:df:ab:f3:1d:41:
                    e1:2c:68:b9:54:21:ab:43:80:34:d7:e7:a6:db:74:
                    3c:c4:2a:92:39:6b:08:b8:e2:28:3c:e2:a6:73:14:
                    0b:a1:ec:5c:12:00:38:d4:ec:e3:9d:f9:7a:50:0b:
                    f6:b2:40:49:6d:39:8c:15:96:4e:9d:e0:7d:6b:1d:
                    5e:a5:ec:bd:7c:f2:eb:ee:4d:b7:18:29:88:6d:e0:
                    1f:a9:c2:bc:1c:79:60:d0:6d:49:d0:7b:14:00:7c:
                    32:ab:3d:cf:bb:21:c2:88:17:58:5a:eb:49:dc:f5:
                    43:ae:71:b0:ef:02:b1:86:7a:be:69:57:be:7e:4f:
                    b5:bb:38:03:7e:7e:92:e4:8a:b0:97:84:23:92:40:
                    e0:0b:b3:13:d1:28:2f:fb:1c:48:42:0d:e7:be:fd:
                    88:61:3b:5d:5b:11:8e:7d:4b:5c:4e:bc:15:4a:c9:
                    8c:6e:75:c1:54:ef:48:7c:28:ad:a6:c2:a4:3b:22:
                    e1:e2:8e:95:46:48:46:e8:a2:a6:5c:8e:03:c7:40:
                    98:83:f9:c7:cc:ac:19:72:c8:a4:d7:97:d2:e3:f1:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9C:19:44:5A:1B:C3:CA:9C:A3:72:03:3A:78:D1:D0:70:4A:2F:2E
            X509v3 Authority Key Identifier:
                keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/B13901DE724911EBB9A16F5AF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.70.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:98:c9:f5:44:89:9b:f4:24:85:24:60:90:c2:46:68:60:b6:
         18:02:a1:01:b0:11:0a:9b:9e:0e:76:cd:84:68:c5:23:32:84:
         d8:55:40:07:41:26:dc:e1:05:4f:58:ff:ba:cb:51:d0:56:b7:
         c2:bc:db:58:5c:a0:72:d0:da:c8:2b:1c:d0:07:4a:75:99:54:
         79:50:f9:2e:2f:67:6e:50:71:d1:2d:27:f0:07:2b:e4:d3:20:
         8d:6a:8d:6f:15:ce:61:a2:2d:e0:5d:e8:b4:57:54:3c:e9:50:
         21:04:06:1f:8c:b2:51:28:27:75:cc:33:50:18:ab:34:1a:a0:
         0b:28:fc:a8:c7:09:d8:51:fd:f5:1e:74:33:02:c5:9a:80:f8:
         15:97:66:6a:b2:a4:d0:7f:fc:a5:81:29:b6:96:7c:80:6c:09:
         42:ab:9d:56:24:cd:0c:b1:a3:6c:46:82:dc:57:f6:67:1d:12:
         90:27:fe:f8:e9:11:54:ba:07:fd:a7:80:da:74:3b:58:f9:ed:
         a2:fc:df:34:7f:35:2b:e9:81:c1:a9:d1:19:f2:fa:0c:ef:f1:
         dd:fb:8f:3b:a9:c4:a5:6d:85:ad:85:ff:9a:7a:09:cd:46:58:
         1e:ee:7d:e0:6c:cb:45:34:0d:3b:87:24:27:d1:6d:66:a4:c0:
         17:e6:6a:f0
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
OTNFMkFGMTEwLwYDVQQFEyhBOEExQUYwMkY5NkMxQkE5MkQ5M0E1MjJDQUJFOUVE
OEU1Mjk1MTUzMB4XDTIxMDIxOTAwMDAzM1oXDTI1MDIxOTAwMDAzM1owGDEWMBQG
A1UEAxMNNjAyZjA2YjAtYjVlYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALxKAzK/UqBGOpgzCGU1N0HfCTILms59QF+mYoPi9RYPcqhLDmFG0d+r8x1B
4SxouVQhq0OANNfnptt0PMQqkjlrCLjiKDzipnMUC6HsXBIAONTs4535elAL9rJA
SW05jBWWTp3gfWsdXqXsvXzy6+5NtxgpiG3gH6nCvBx5YNBtSdB7FAB8Mqs9z7sh
wogXWFrrSdz1Q65xsO8CsYZ6vmlXvn5Ptbs4A35+kuSKsJeEI5JA4AuzE9EoL/sc
SEIN5779iGE7XVsRjn1LXE68FUrJjG51wVTvSHworabCpDsi4eKOlUZIRuiiplyO
A8dAmIP5x8ysGXLIpNeX0uPxbD8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRxnBlE
WhvDypyjcgM6eNHQcEovLjAfBgNVHSMEGDAWgBSooa8C+WwbqS2TpSLKvp7Y5SlR
UzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDkzRTIvQ0QwRENDMTA2RkRDMTFFQjlGRjc3QjU4RjhBRUEyMjgvcUtHdkF2
bHNHNmt0azZVaXlyNmUyT1VwVVZNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcUtHdkF2bHNHNmt0azZVaXlyNmUyT1VwVVZNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDkzRTIvQ0QwRENDMTA2RkRDMTFFQjlGRjc3QjU4RjhB
RUEyMjgvQjEzOTAxREU3MjQ5MTFFQkI5QTE2RjVBRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJpGyTANBgkqhkiG9w0BAQsF
AAOCAQEAnpjJ9USJm/QkhSRgkMJGaGC2GAKhAbARCpueDnbNhGjFIzKE2FVAB0Em
3OEFT1j/ustR0Fa3wrzbWFygctDayCsc0AdKdZlUeVD5Li9nblBx0S0n8Acr5NMg
jWqNbxXOYaIt4F3otFdUPOlQIQQGH4yyUSgndcwzUBirNBqgCyj8qMcJ2FH99R50
MwLFmoD4FZdmarKk0H/8pYEptpZ8gGwJQqudViTNDLGjbEaC3Ff2Zx0SkCf++OkR
VLoH/aeA2nQ7WPntovzfNH81K+mBwanRGfL6DO/x3fuPO6nEpW2FrYX/mnoJzUZY
Hu594GzLRTQNO4ckJ9FtZqTAF+Zq8A==
-----END CERTIFICATE-----