Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/A4D1283044EE11EDA43AB4E0F1222468.roa
File:                     A4D1283044EE11EDA43AB4E0F1222468.roa (raw, json)
Hash identifier:          c8uvClIvVYoG88laCw+Y77GQzUlS4/VxnDmW87O6u6o=
Subject key identifier:   DC:58:98:45:59:CC:0E:8C:14:9D:AC:8B:A7:8D:49:42:71:50:C6:15
Certificate issuer:       /CN=F3657687AF/serialNumber=6A3123D3DA8BBC118D3C0042F47993B316F64C77
Certificate serial:       02
Authority key identifier: 6A:31:23:D3:DA:8B:BC:11:8D:3C:00:42:F4:79:93:B3:16:F6:4C:77
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ajEj09qLvBGNPABC9HmTsxb2THc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/A4D1283044EE11EDA43AB4E0F1222468.roa
Signing time:             Wed 05 Oct 2022 20:45:28 +0000
ROA not before:           Wed 05 Oct 2022 20:45:24 +0000
ROA not after:            Sat 05 Oct 2024 20:45:24 +0000
asID:                     329073
IP address blocks:        102.215.144.0/22 maxlen: 22
                          2c0f:1e80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3657687AF/serialNumber=6A3123D3DA8BBC118D3C0042F47993B316F64C77
        Validity
            Not Before: Oct  5 20:45:24 2022 GMT
            Not After : Oct  5 20:45:24 2024 GMT
        Subject: CN=633dece7-935c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:1b:ce:8d:ca:ca:08:24:ec:1a:a4:42:30:
                    a1:0e:31:78:e8:fa:18:0b:a6:12:2b:0d:2d:ef:c3:
                    23:a6:87:5d:47:35:dc:5a:b8:46:be:46:57:00:24:
                    11:db:10:86:7d:f6:24:1b:8c:01:e8:31:5e:a7:16:
                    3d:1a:5d:9e:70:1c:04:c9:cf:5a:1e:bc:61:b7:e1:
                    26:e7:0f:39:98:ca:45:ef:20:e0:28:b4:f8:fd:37:
                    70:07:62:45:3c:0c:cc:5a:7f:32:16:1f:db:0f:54:
                    21:f7:82:d2:97:34:bd:8a:eb:b7:1a:09:38:94:b2:
                    d0:cb:78:4f:07:28:87:b3:70:52:aa:2b:f5:1c:94:
                    6f:cb:b3:0d:77:29:97:90:91:88:d4:2f:37:45:82:
                    b8:e2:f8:8b:c0:c0:3c:0e:3d:9b:2d:7d:55:ff:f5:
                    a4:95:17:67:ed:03:30:ff:1d:57:40:51:5f:73:cf:
                    6c:86:43:70:17:14:ef:51:00:75:64:3a:3d:9d:1f:
                    de:da:63:8f:f8:b4:f8:84:6e:9e:79:5c:c8:e0:e8:
                    d8:d3:e3:6d:15:94:54:90:8d:59:32:0e:66:85:00:
                    06:95:71:a8:6f:75:1e:cc:c4:99:70:3f:56:87:74:
                    62:6c:b8:02:0c:cd:61:b1:46:3b:a7:df:2e:0c:01:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:58:98:45:59:CC:0E:8C:14:9D:AC:8B:A7:8D:49:42:71:50:C6:15
            X509v3 Authority Key Identifier:
                keyid:6A:31:23:D3:DA:8B:BC:11:8D:3C:00:42:F4:79:93:B3:16:F6:4C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/ajEj09qLvBGNPABC9HmTsxb2THc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ajEj09qLvBGNPABC9HmTsxb2THc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/A4D1283044EE11EDA43AB4E0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.144.0/22
                IPv6:
                  2c0f:1e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:2f:55:60:e3:08:79:a1:09:fc:85:09:67:8f:50:e6:7b:e0:
         de:ab:86:65:96:99:87:21:b8:c7:2a:5e:18:1e:6b:71:84:12:
         64:08:98:ee:a7:9a:ad:d6:f7:98:01:b9:ab:f1:bc:40:c9:56:
         5f:90:0f:0e:01:a3:74:2e:b4:d2:91:f9:c0:89:0e:c2:f3:6f:
         e0:9c:09:3b:0f:06:19:28:b5:eb:db:ab:e9:6a:c5:68:74:7b:
         09:f6:b1:10:79:9b:ae:e2:01:18:66:4e:f7:dd:6e:c8:88:aa:
         2b:95:51:fe:34:7a:4d:d1:d2:4a:6f:96:ef:30:83:76:5c:d5:
         48:3d:eb:b9:92:12:4d:46:dd:43:83:5f:59:0d:d9:ed:fb:78:
         11:da:46:01:f1:fd:76:a1:96:53:88:92:09:57:e3:ea:f0:36:
         34:34:31:38:96:0e:2f:53:9a:38:96:ea:89:a3:02:12:0e:8f:
         ff:e7:a2:71:01:14:a8:ce:c7:5e:18:bd:23:38:c4:57:d0:85:
         37:86:95:50:79:47:38:e4:f4:3d:fd:ec:8e:29:2a:c1:ca:8a:
         24:51:0f:c4:e0:83:91:52:4b:0b:39:9b:44:38:ce:6e:17:4a:
         8c:7a:5d:86:df:18:45:7d:7c:c8:87:7f:20:d3:73:34:4c:bf:
         a6:b5:8d:4d
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY1
NzY4N0FGMTEwLwYDVQQFEyg2QTMxMjNEM0RBOEJCQzExOEQzQzAwNDJGNDc5OTNC
MzE2RjY0Qzc3MB4XDTIyMTAwNTIwNDUyNFoXDTI0MTAwNTIwNDUyNFowGDEWMBQG
A1UEAwwNNjMzZGVjZTctOTM1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANYdG86NysoIJOwapEIwoQ4xeOj6GAumEisNLe/DI6aHXUc13Fq4Rr5GVwAk
EdsQhn32JBuMAegxXqcWPRpdnnAcBMnPWh68YbfhJucPOZjKRe8g4Ci0+P03cAdi
RTwMzFp/MhYf2w9UIfeC0pc0vYrrtxoJOJSy0Mt4Twcoh7NwUqor9RyUb8uzDXcp
l5CRiNQvN0WCuOL4i8DAPA49my19Vf/1pJUXZ+0DMP8dV0BRX3PPbIZDcBcU71EA
dWQ6PZ0f3tpjj/i0+IRunnlcyODo2NPjbRWUVJCNWTIOZoUABpVxqG91HszEmXA/
Vod0Ymy4AgzNYbFGO6ffLgwBI7ECAwEAAaOCArQwggKwMB0GA1UdDgQWBBTcWJhF
WcwOjBSdrIunjUlCcVDGFTAfBgNVHSMEGDAWgBRqMSPT2ou8EY08AEL0eZOzFvZM
dzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTc2ODcvMENEQzI2M0M0NEVBMTFFRDg4MDFDNUQ1RjEyMjI0NjgvYWpFajA5
cUx2QkdOUEFCQzlIbVRzeGIyVEhjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYWpFajA5cUx2QkdOUEFCQzlIbVRzeGIyVEhjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTc2ODcvMENEQzI2M0M0NEVBMTFFRDg4MDFDNUQ1RjEy
MjI0NjgvQTREMTI4MzA0NEVFMTFFREE0M0FCNEUwRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbXkDANBAIAAjAHAwUALA8e
gDANBgkqhkiG9w0BAQsFAAOCAQEAby9VYOMIeaEJ/IUJZ49Q5nvg3quGZZaZhyG4
xypeGB5rcYQSZAiY7qeardb3mAG5q/G8QMlWX5APDgGjdC600pH5wIkOwvNv4JwJ
Ow8GGSi169ur6WrFaHR7CfaxEHmbruIBGGZO991uyIiqK5VR/jR6TdHSSm+W7zCD
dlzVSD3ruZISTUbdQ4NfWQ3Z7ft4EdpGAfH9dqGWU4iSCVfj6vA2NDQxOJYOL1Oa
OJbqiaMCEg6P/+eicQEUqM7HXhi9IzjEV9CFN4aVUHlHOOT0Pf3sjikqwcqKJFEP
xOCDkVJLCzmbRDjObhdKjHpdht8YRX18yId/INNzNEy/prWNTQ==
-----END CERTIFICATE-----