Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/168F9DF0289111ED86108096F1222468.roa
File:                     168F9DF0289111ED86108096F1222468.roa (raw, json)
Hash identifier:          ZEASyqI48qHyvGHxUZIu3HMUqWvvo/45/mWBDq9Z35M=
Subject key identifier:   35:05:24:E9:42:0D:81:F4:AE:E1:97:93:88:54:8D:F2:AE:A3:67:A2
Certificate issuer:       /CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
Certificate serial:       02
Authority key identifier: 82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/168F9DF0289111ED86108096F1222468.roa
Signing time:             Tue 30 Aug 2022 18:25:13 +0000
ROA not before:           Tue 30 Aug 2022 18:25:08 +0000
ROA not after:            Sun 29 Aug 2032 18:25:08 +0000
asID:                     328111
IP address blocks:        102.216.168.0/22 maxlen: 22
                          2c0f:eab0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
        Validity
            Not Before: Aug 30 18:25:08 2022 GMT
            Not After : Aug 29 18:25:08 2032 GMT
        Subject: CN=630e5609-ddf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:00:4f:fa:db:1d:97:11:82:72:71:18:eb:
                    62:7f:64:a4:0c:84:b6:c9:c5:7e:89:e0:41:86:72:
                    6e:f7:9c:7b:3f:07:b2:e4:6c:98:0d:df:0a:74:4d:
                    1c:c4:24:bb:f9:8f:3a:ef:b6:30:f9:cb:f4:9d:d0:
                    2e:02:5f:91:d8:aa:80:37:a3:41:fe:5f:e5:a5:af:
                    9a:9d:d3:02:9d:fd:be:1c:a9:fd:4d:00:d5:c8:32:
                    fc:16:5b:b0:bc:94:c9:20:c4:23:e7:74:24:c3:d8:
                    da:35:f1:ba:09:29:b3:2f:91:ef:59:1c:cb:ad:52:
                    6b:78:2f:48:69:f4:f3:2d:a3:df:dd:b1:8c:c3:7b:
                    c3:77:a7:09:ba:e1:62:91:4a:16:a2:c4:31:de:4e:
                    00:50:a3:85:cc:b3:78:97:c1:77:02:80:7a:d6:28:
                    f7:44:6a:16:ad:b3:b3:ca:db:a7:d0:27:a8:aa:14:
                    38:ab:fd:76:8f:d0:22:0d:8c:14:2f:34:50:35:e3:
                    92:2e:41:30:f6:6b:93:eb:54:dc:5d:44:e8:ee:a3:
                    cb:e4:fa:6a:ed:6f:48:73:82:9c:e6:49:60:ac:a2:
                    38:d9:6e:42:89:26:5f:d6:5d:a0:2a:3f:76:12:72:
                    01:3b:82:d0:dc:3a:88:b3:4e:bf:ba:bb:aa:1e:d7:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:05:24:E9:42:0D:81:F4:AE:E1:97:93:88:54:8D:F2:AE:A3:67:A2
            X509v3 Authority Key Identifier:
                keyid:82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/168F9DF0289111ED86108096F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.168.0/22
                IPv6:
                  2c0f:eab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:a4:6a:42:c0:98:23:ff:24:44:8e:cf:11:99:b8:13:9d:54:
         bd:16:0c:74:03:c1:d4:dc:2f:6c:3f:34:98:9b:1a:8a:b5:5f:
         96:13:d0:c4:14:62:98:62:95:08:00:7c:46:66:b7:60:47:3d:
         67:5e:9c:95:cd:14:42:c0:d3:f3:1f:1b:8c:e5:d6:bc:29:4b:
         fd:45:4c:1e:4f:38:42:c7:f1:d1:b7:1b:2c:ce:71:8d:38:ec:
         61:92:20:39:8a:3b:b6:13:ff:ff:6a:8b:0b:4f:39:53:e0:75:
         68:18:85:82:34:a5:ee:22:6f:7c:c3:7e:49:28:7c:a4:56:57:
         d3:78:67:37:89:cd:85:09:92:d9:8c:d6:7e:12:d4:44:11:34:
         c4:91:b5:99:b3:90:d2:4b:bf:fe:55:44:37:fc:8b:ea:c8:6b:
         1b:f8:11:2b:ef:32:69:dd:de:02:b7:07:ed:60:83:ff:1a:75:
         b6:ba:76:72:42:db:0f:00:05:05:27:47:c2:51:1a:79:4d:c1:
         da:9f:e5:3d:dd:a2:70:b7:77:e3:49:0b:66:e2:0c:a3:db:6a:
         44:f4:d7:9b:13:b6:70:10:44:9b:a4:b3:d5:db:a0:cc:cc:54:
         29:ec:f0:6b:b9:44:07:0a:01:bc:aa:8b:bc:56:ca:1f:9f:07:
         9e:34:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----