Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/C2504588B12011EC829224945A40D577.roa
File:                     C2504588B12011EC829224945A40D577.roa (raw, json)
Hash identifier:          E3kJSx1TfElXJU5nIIfdGcHAuXGkQ1o67XpX0bAf2/w=
Subject key identifier:   0A:2B:E3:0A:FE:9B:39:A2:E4:6D:9A:4C:4B:2A:D4:25:A3:33:A8:23
Certificate issuer:       /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial:       0220
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/C2504588B12011EC829224945A40D577.roa
Signing time:             Thu 31 Mar 2022 18:31:20 +0000
ROA not before:           Thu 31 Mar 2022 18:31:16 +0000
ROA not after:            Mon 31 Mar 2025 18:31:16 +0000
asID:                     328748
IP address blocks:        102.216.156.0/22 maxlen: 22
                          2c0f:e9f0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 09 Jan 2023 21:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
        Validity
            Not Before: Mar 31 18:31:16 2022 GMT
            Not After : Mar 31 18:31:16 2025 GMT
        Subject: CN=6245f378-091c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:0e:7e:d2:80:25:d8:f8:2b:40:9b:3c:34:
                    dc:7d:e6:73:00:f0:06:5d:fc:d7:86:15:36:36:65:
                    9e:4c:00:c8:df:51:b6:8b:fa:ef:64:32:59:fd:c5:
                    48:92:41:c7:68:29:77:af:84:51:be:16:23:e4:df:
                    b8:f6:d7:f5:3e:40:d0:3e:e1:88:03:75:e2:78:d3:
                    c7:d0:d7:14:aa:9d:fa:72:e4:04:fc:e7:95:1d:02:
                    92:cc:be:cd:a1:a2:51:d4:9f:68:b7:21:29:14:6b:
                    a2:96:f0:ca:c4:5d:84:40:cf:ec:76:95:a5:d0:7c:
                    1d:72:a9:b4:5c:7f:69:1c:d9:be:30:6f:de:e6:73:
                    71:97:7b:dd:34:35:6c:ae:c5:93:b6:bf:f0:8f:61:
                    d1:74:66:01:39:16:a8:18:5f:78:b8:20:05:79:6c:
                    1a:0b:eb:ba:23:a9:de:ff:ec:6a:57:97:95:f7:85:
                    6d:9e:7a:21:40:6d:d3:17:49:e8:fd:ca:40:c0:b0:
                    73:c5:fb:3f:12:9f:12:29:94:96:ce:44:f1:cd:02:
                    1d:6c:ec:e4:50:fb:71:b0:06:6e:96:69:a4:c8:65:
                    9c:52:40:80:6f:30:40:63:1a:54:75:13:93:d8:1f:
                    54:9e:37:8f:72:13:61:80:c8:12:c8:cf:7f:62:ee:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2B:E3:0A:FE:9B:39:A2:E4:6D:9A:4C:4B:2A:D4:25:A3:33:A8:23
            X509v3 Authority Key Identifier:
                keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/C2504588B12011EC829224945A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.156.0/22
                IPv6:
                  2c0f:e9f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:0e:ad:82:c6:9c:01:cd:46:a3:6a:67:7a:88:d1:f4:5a:01:
         4d:40:48:df:34:25:0b:81:3b:9f:9a:d8:c7:a1:39:0b:0a:1a:
         85:29:d8:d9:af:a0:3a:2b:65:46:df:a8:b3:3f:85:e4:f5:4c:
         a9:2c:08:87:81:df:ee:d0:ad:ee:a7:c3:52:2f:cb:f7:5a:80:
         5e:d4:9b:91:bf:16:2f:7e:9e:34:b7:14:d6:7e:fb:8d:2c:a2:
         2e:27:9f:0e:3b:75:3f:a8:62:e7:ac:4f:b7:82:6f:d6:df:ae:
         bc:68:4e:9a:9e:1d:4a:a2:42:84:83:49:a9:a2:32:f2:17:5f:
         fe:0d:38:9e:65:62:ec:16:89:fe:b3:c1:2d:57:9c:76:84:59:
         01:ca:69:da:d2:d1:f9:70:f1:69:a2:b9:d7:1a:37:04:8d:83:
         3d:d1:2d:71:73:b0:32:05:38:7c:2e:7c:5c:bd:71:d4:03:d3:
         3a:c2:8d:86:3a:61:0a:d1:22:b3:5a:ce:6d:36:17:f4:4d:e1:
         57:eb:29:83:b0:8e:39:63:77:bd:e9:b1:ba:51:21:0b:76:ad:
         7b:45:ca:e2:b7:73:45:53:d0:84:d3:1d:28:db:7c:eb:17:39:
         5a:d9:43:17:96:02:99:6a:92:22:e8:79:75:90:02:26:74:88:
         5e:48:f2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----