Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/85F23B2EC78111EC8F65958DF1222468.roa
File:                     85F23B2EC78111EC8F65958DF1222468.roa (raw, json)
Hash identifier:          C3jFhwf8AGCtoThXdlA4MJRbvhegznfb4eghvdqGkT4=
Subject key identifier:   F6:E6:BC:4C:3A:A9:E7:D7:53:D4:28:D2:E3:5A:46:E4:28:DD:62:1E
Certificate issuer:       /CN=F364E2C5AF/serialNumber=27D35642EC5430E95376A57D531C20CABA384CCC
Certificate serial:       02
Authority key identifier: 27:D3:56:42:EC:54:30:E9:53:76:A5:7D:53:1C:20:CA:BA:38:4C:CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/85F23B2EC78111EC8F65958DF1222468.roa
Signing time:             Fri 29 Apr 2022 05:59:25 +0000
ROA not before:           Fri 29 Apr 2022 05:59:22 +0000
ROA not after:            Fri 29 Apr 2039 05:59:22 +0000
asID:                     329028
IP address blocks:        102.216.72.0/22 maxlen: 22
                          2c0f:4480::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 29 Apr 2022 10:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E2C5AF/serialNumber=27D35642EC5430E95376A57D531C20CABA384CCC
        Validity
            Not Before: Apr 29 05:59:22 2022 GMT
            Not After : Apr 29 05:59:22 2039 GMT
        Subject: CN=626b7ebd-0c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:15:22:47:09:9e:f4:25:5d:e7:0a:0e:89:
                    09:7b:72:82:44:18:19:d8:55:b9:d0:f1:82:b5:df:
                    6e:b1:84:c2:35:5a:b6:de:b7:95:d9:9d:4a:e1:cb:
                    8b:6b:98:07:5c:f0:6d:71:e4:14:32:ab:4f:89:19:
                    b9:c7:b3:ff:03:da:25:3a:e8:9e:f4:b0:02:6f:fc:
                    4e:be:a7:d8:2f:14:73:b9:4f:3a:c7:87:75:6f:f4:
                    c0:bb:68:ba:e5:35:62:b1:e1:f3:3d:8d:20:f4:55:
                    d4:2b:44:9d:83:cb:5a:43:7d:e5:99:64:8d:8a:02:
                    bc:f4:28:8e:98:cf:22:17:22:1a:98:0e:09:a6:8b:
                    e1:f0:a7:5c:c7:6b:d5:c1:8c:22:f7:a9:4c:c7:7f:
                    e3:4d:74:62:65:0c:af:ab:81:31:ed:52:19:28:d9:
                    2c:4a:d7:39:90:4d:9a:f5:23:4f:50:a1:b0:4b:e3:
                    61:0d:fc:fc:d3:91:c9:43:a9:13:2e:2a:71:b3:68:
                    bf:53:64:4d:c3:2b:cf:a0:a2:47:aa:e5:f7:7b:c9:
                    29:57:98:96:f5:37:77:1c:de:db:20:3e:a9:1a:82:
                    2a:54:1b:2b:5a:ec:b6:94:28:ee:ab:38:9f:94:f5:
                    ae:22:18:e3:91:f5:e4:cd:04:d4:d8:c9:7e:c3:8f:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E6:BC:4C:3A:A9:E7:D7:53:D4:28:D2:E3:5A:46:E4:28:DD:62:1E
            X509v3 Authority Key Identifier:
                keyid:27:D3:56:42:EC:54:30:E9:53:76:A5:7D:53:1C:20:CA:BA:38:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/85F23B2EC78111EC8F65958DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.72.0/22
                IPv6:
                  2c0f:4480::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:ab:e4:e0:28:7a:7f:ab:4f:c0:dd:00:44:5f:9a:66:06:5c:
         3c:9e:3b:20:f7:56:86:ab:9b:6c:0c:e4:18:38:7e:d9:40:8c:
         08:92:f1:99:49:68:64:f5:e0:d4:34:20:7f:62:d6:50:e9:46:
         95:17:13:d3:f3:bf:8c:87:07:c5:85:0f:07:42:02:53:90:cc:
         aa:55:3f:d5:e0:2f:95:c9:8e:b5:dd:70:0d:95:3f:67:af:b4:
         63:cf:5d:2f:71:85:b5:51:97:b9:d2:dd:c3:af:d6:53:59:39:
         9a:5c:46:bb:3d:eb:19:3b:e5:91:85:d5:d6:ed:86:da:59:ca:
         e3:4a:34:5a:e9:e6:91:b2:9d:21:49:37:3d:15:f9:bb:4d:b5:
         0e:f3:ee:95:8a:e6:4a:69:f5:d5:a6:32:a2:32:8a:83:12:ee:
         4f:72:80:d5:8a:25:7a:e5:59:13:a6:30:f9:e1:ae:91:10:cc:
         0e:d0:86:da:3d:da:ca:8c:46:22:cc:bb:17:b7:cc:6b:56:d6:
         2c:cd:ab:0d:ef:55:27:f0:ce:ae:df:82:6a:fb:ed:61:c8:9d:
         69:9d:f2:1b:ac:4e:18:c9:ba:7c:f7:4b:7e:40:79:23:93:11:
         d5:d1:f8:ba:c7:c6:e8:d1:c8:cf:02:56:3a:00:b7:0a:02:b4:
         3d:cc:1f:cc
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY0
RTJDNUFGMTEwLwYDVQQFEygyN0QzNTY0MkVDNTQzMEU5NTM3NkE1N0Q1MzFDMjBD
QUJBMzg0Q0NDMB4XDTIyMDQyOTA1NTkyMloXDTM5MDQyOTA1NTkyMlowGDEWMBQG
A1UEAwwNNjI2YjdlYmQtMGM1ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM4hFSJHCZ70JV3nCg6JCXtygkQYGdhVudDxgrXfbrGEwjVatt63ldmdSuHL
i2uYB1zwbXHkFDKrT4kZucez/wPaJTronvSwAm/8Tr6n2C8Uc7lPOseHdW/0wLto
uuU1YrHh8z2NIPRV1CtEnYPLWkN95ZlkjYoCvPQojpjPIhciGpgOCaaL4fCnXMdr
1cGMIvepTMd/4010YmUMr6uBMe1SGSjZLErXOZBNmvUjT1ChsEvjYQ38/NORyUOp
Ey4qcbNov1NkTcMrz6CiR6rl93vJKVeYlvU3dxze2yA+qRqCKlQbK1rstpQo7qs4
n5T1riIY45H15M0E1NjJfsOP0TsCAwEAAaOCArQwggKwMB0GA1UdDgQWBBT25rxM
Oqnn11PUKNLjWkbkKN1iHjAfBgNVHSMEGDAWgBQn01ZC7FQw6VN2pX1THCDKujhM
zDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NEUyQzUvRkJGMjNFN0VDNzgwMTFFQzk4MjlEMzhCRjEyMjI0NjgvSjlOV1F1
eFVNT2xUZHFWOVV4d2d5cm80VE13LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSjlOV1F1eFVNT2xUZHFWOVV4d2d5cm80VE13LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEUyQzUvRkJGMjNFN0VDNzgwMTFFQzk4MjlEMzhCRjEy
MjI0NjgvODVGMjNCMkVDNzgxMTFFQzhGNjU5NThERjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbYSDANBAIAAjAHAwUALA9E
gDANBgkqhkiG9w0BAQsFAAOCAQEAg6vk4Ch6f6tPwN0ARF+aZgZcPJ47IPdWhqub
bAzkGDh+2UCMCJLxmUloZPXg1DQgf2LWUOlGlRcT0/O/jIcHxYUPB0ICU5DMqlU/
1eAvlcmOtd1wDZU/Z6+0Y89dL3GFtVGXudLdw6/WU1k5mlxGuz3rGTvlkYXV1u2G
2lnK40o0WunmkbKdIUk3PRX5u021DvPulYrmSmn11aYyojKKgxLuT3KA1YoleuVZ
E6Yw+eGukRDMDtCG2j3ayoxGIsy7F7fMa1bWLM2rDe9VJ/DOrt+CavvtYcidaZ3y
G6xOGMm6fPdLfkB5I5MR1dH4usfG6NHIzwJWOgC3CgK0PcwfzA==
-----END CERTIFICATE-----