Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/8934CD38BEBF11EE8014BF64775412E6.roa
File:                     8934CD38BEBF11EE8014BF64775412E6.roa (raw, json)
Hash identifier:          dqe7u44tUGqexzW0DVb7gBdRWsDExDfrz+FWztsc1fQ=
Subject key identifier:   D8:CA:43:41:8D:D6:07:A4:68:A4:A7:25:33:B5:76:87:35:9D:D0:71
Certificate issuer:       /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial:       67
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/8934CD38BEBF11EE8014BF64775412E6.roa
Signing time:             Mon 29 Jan 2024 16:00:35 +0000
ROA not before:           Mon 29 Jan 2024 16:00:31 +0000
ROA not after:            Thu 29 Jan 2026 16:00:31 +0000
asID:                     37073
IP address blocks:        41.216.149.0/24 maxlen: 24
                          41.216.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 17:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
        Validity
            Not Before: Jan 29 16:00:31 2024 GMT
            Not After : Jan 29 16:00:31 2026 GMT
        Subject: CN=65b7cba2-5c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:f4:4f:16:5c:e3:96:9c:bc:3b:41:43:a4:
                    2a:8f:4a:f3:8d:62:f1:ba:88:b9:0c:5f:43:e9:b7:
                    8a:dd:e2:98:bd:20:dc:a8:ee:d9:22:9d:74:e9:da:
                    c3:89:7f:99:34:50:8e:e3:d3:44:9d:f4:01:82:05:
                    b5:a6:17:6c:3b:e6:f6:b9:fb:8c:c1:62:a9:2f:03:
                    26:32:41:fb:68:05:b7:d4:bc:2c:ae:61:d0:4d:6b:
                    52:51:07:cf:80:42:60:f6:aa:dd:7f:5a:1a:1a:4a:
                    9d:47:c7:d0:84:74:f8:1e:7c:3d:7b:70:69:7d:93:
                    12:9f:6a:bd:82:48:bc:39:54:c0:1b:96:36:b3:cf:
                    cf:41:6a:31:8d:1d:40:7a:04:61:3c:d7:ac:85:7b:
                    49:31:c5:47:e0:40:97:a8:53:e8:b4:54:23:99:77:
                    91:99:9d:0b:7d:b3:28:79:c3:ea:7a:7a:fc:fa:5f:
                    e4:97:b5:4e:ee:35:15:03:b9:39:a2:90:a1:16:ce:
                    1f:40:53:5d:87:68:a9:94:c1:bb:0e:3c:ee:de:a0:
                    d3:80:11:95:5d:03:76:a4:f4:4d:eb:c2:ea:dc:3f:
                    95:23:7c:00:d9:1f:b5:22:98:35:22:ff:7a:72:9c:
                    7f:3c:c0:b7:e1:94:f8:c2:f1:cc:fd:03:b3:34:15:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CA:43:41:8D:D6:07:A4:68:A4:A7:25:33:B5:76:87:35:9D:D0:71
            X509v3 Authority Key Identifier:
                keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/8934CD38BEBF11EE8014BF64775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.149.0/24
                  41.216.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:85:44:f4:e1:f4:00:fa:da:6b:c3:5e:b9:61:11:78:cd:75:
         4f:e7:76:2c:4f:ff:bb:1a:10:3d:d6:5e:d4:09:7d:77:ab:ca:
         1b:0a:cf:67:a3:c6:bf:2f:c9:5c:f7:09:82:5c:2e:e0:4d:ef:
         ae:f0:fc:15:fb:90:97:da:72:c2:28:df:42:8d:13:e7:6c:be:
         fb:5c:b7:f2:27:75:1a:02:25:50:5c:cd:25:14:6c:4f:ae:bb:
         89:a5:25:ae:5f:b3:29:31:24:fc:60:8f:ce:73:98:9b:ce:44:
         04:82:1f:48:c9:ad:62:62:c1:ee:9e:99:94:6d:39:06:63:b0:
         23:7c:2d:a0:e1:1e:e6:dd:2c:fb:dc:eb:3b:4e:a2:20:1c:97:
         ae:41:c0:4e:08:81:18:5c:6e:a2:b3:ff:04:b9:56:f1:a6:4d:
         23:0d:ad:8f:17:22:21:77:bd:53:40:fa:9c:0a:66:7c:01:6b:
         b4:3b:3e:3e:bb:35:72:35:67:23:67:c4:58:49:3d:9e:65:dd:
         16:10:2b:11:68:d7:89:72:2b:8e:f7:7e:1a:e5:e4:a4:84:96:
         56:b1:cf:5e:d4:52:bb:d6:d4:8a:11:16:3e:af:fe:1e:93:c8:
         59:f9:73:6e:a5:70:e9:37:af:84:11:c1:c8:37:14:96:91:62:
         83:79:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----