Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/4340B140A0F311EFAF740971762E951A.roa
File:                     4340B140A0F311EFAF740971762E951A.roa (raw, json)
Hash identifier:          d4+M74fRkquC/wdzWaawjLfwpOWC3dns9gXdEQA2h7k=
Subject key identifier:   25:F8:D0:74:05:34:03:10:4D:66:6C:92:EA:8B:07:D2:EE:25:46:FE
Certificate issuer:       /CN=F36580B0AF/serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
Certificate serial:       01CF
Authority key identifier: 83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/4340B140A0F311EFAF740971762E951A.roa
Signing time:             Tue 12 Nov 2024 12:40:14 +0000
ROA not before:           Tue 12 Nov 2024 12:40:10 +0000
ROA not after:            Sun 12 Nov 2034 12:40:10 +0000
asID:                     327992
IP address blocks:        2c0f:eea0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 13 Nov 2024 09:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36580B0AF/serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
        Validity
            Not Before: Nov 12 12:40:10 2024 GMT
            Not After : Nov 12 12:40:10 2034 GMT
        Subject: CN=67334cae-4dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:67:a7:8b:99:38:1c:32:e2:22:27:a4:df:c0:
                    19:08:a6:e3:ad:e3:12:72:3c:77:46:d0:c8:41:fb:
                    f6:3e:c0:31:fe:0b:3f:44:e8:e9:cd:10:97:20:75:
                    e3:0a:c7:94:ed:b2:45:32:34:09:e8:0b:50:fc:20:
                    f9:78:e4:46:57:f6:74:46:ee:12:35:9e:78:ff:ae:
                    20:38:81:f7:01:6f:1c:02:d8:04:c8:b6:c3:fc:9a:
                    65:20:c3:94:d8:00:25:f6:2c:34:0e:c5:43:2e:d0:
                    13:af:b2:0b:42:18:9a:ff:5b:5b:97:7f:eb:9e:bd:
                    56:39:38:77:cf:20:dd:05:2a:db:9c:8e:3f:bc:7e:
                    19:d0:b5:af:75:87:5c:9f:92:54:60:72:4a:f7:dd:
                    c5:6b:0e:79:02:bf:95:f5:ae:47:43:01:82:55:e3:
                    02:96:2c:9d:60:6a:10:6f:fe:2f:9a:7c:17:69:72:
                    8f:2e:53:3f:d0:b7:5b:ce:91:20:ed:0f:84:d7:0b:
                    c7:dc:4f:f4:d4:87:d1:ac:a6:a0:2d:c8:e8:0e:e8:
                    f1:7c:12:d7:d5:45:cf:74:87:23:7b:ae:81:61:8e:
                    f1:bd:e1:8d:22:23:99:1a:14:3c:f9:48:11:a5:9a:
                    d9:04:d8:3a:78:36:3e:49:d7:4f:6c:1a:22:ca:b3:
                    47:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F8:D0:74:05:34:03:10:4D:66:6C:92:EA:8B:07:D2:EE:25:46:FE
            X509v3 Authority Key Identifier:
                keyid:83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/4340B140A0F311EFAF740971762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:eea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:b0:b5:4c:4d:93:b0:b4:04:40:e9:f6:a1:29:5e:bf:a5:4b:
         4d:be:64:59:59:c4:52:50:3a:6a:5f:58:c2:35:2d:0e:b5:8e:
         95:9b:cf:53:b2:de:36:d6:78:37:42:44:64:a5:7d:ab:76:eb:
         11:11:40:4a:72:87:5a:15:98:c7:32:62:df:b5:fa:4f:04:7d:
         75:c6:6e:77:b4:3f:11:80:20:de:ab:1c:df:71:1a:ba:b8:0a:
         70:a1:71:4d:e2:cd:c8:1b:f6:c6:5c:82:33:42:b8:b8:fb:06:
         47:80:92:5a:74:92:d0:e9:ec:1b:87:93:95:0e:c9:7d:db:3e:
         aa:6d:34:25:b8:13:28:57:ce:83:a8:54:9d:a5:f3:13:a9:61:
         10:34:77:c8:98:90:5d:f5:23:6a:28:fa:d7:44:32:06:b8:01:
         61:14:64:01:b5:4a:a9:ca:f4:c3:11:66:3e:83:cf:ca:37:d9:
         16:4e:db:36:d1:21:fd:43:11:6a:2f:e3:4a:8c:81:e9:4e:c8:
         62:ea:b6:91:1a:e7:03:cc:d5:64:5a:3c:60:18:86:00:45:74:
         59:d1:14:07:86:e9:2d:c2:6f:59:05:33:d5:4f:0d:21:75:40:
         93:03:74:30:dd:0e:90:ba:7a:a5:a2:eb:0e:ac:f5:b9:10:81:
         31:59:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----