Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/2C691CD0901211ED8EA222A0F1222468.roa
File:                     2C691CD0901211ED8EA222A0F1222468.roa (raw, json)
Hash identifier:          iMXq6hMOrthl16eWB1Vob45UPaDv+4UyD4PPTYrRs64=
Subject key identifier:   77:EF:A1:6A:CD:F2:0B:48:3E:07:C3:D6:F4:08:D1:75:E6:F0:AB:E1
Certificate issuer:       /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial:       08
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/2C691CD0901211ED8EA222A0F1222468.roa
Signing time:             Mon 09 Jan 2023 11:38:45 +0000
ROA not before:           Mon 09 Jan 2023 11:38:34 +0000
ROA not after:            Sat 01 Jan 2033 11:38:34 +0000
asID:                     24757
IP address blocks:        2c0f:f348::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
        Validity
            Not Before: Jan  9 11:38:34 2023 GMT
            Not After : Jan  1 11:38:34 2033 GMT
        Subject: CN=63bbfcc5-81e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:42:77:3d:8f:54:e2:9d:df:e6:6f:5e:f9:
                    c0:4f:51:18:c4:97:7c:83:ce:69:f2:14:0f:e7:d9:
                    d6:29:d7:f2:46:ba:2b:84:8c:43:b7:f6:e2:89:7c:
                    34:7f:83:ec:2d:a1:4c:ae:a1:ee:1d:ff:f3:aa:30:
                    d0:30:2a:7e:ec:8a:38:4f:8e:f8:aa:f2:ef:72:91:
                    a7:cc:a8:f4:ee:32:e2:e9:d3:be:64:db:c6:4b:28:
                    9d:83:92:b7:f5:84:01:34:20:b4:7b:10:7f:38:82:
                    c6:fd:19:4e:c7:f6:a7:ea:ff:64:41:00:d6:51:5f:
                    86:7d:84:59:3f:13:8b:ed:26:10:ad:c2:ec:2f:61:
                    02:a9:e3:25:35:88:37:63:86:f8:9a:33:b2:e0:ec:
                    d9:0e:af:5e:72:4a:a4:28:17:e0:56:21:8a:3b:d1:
                    3e:83:54:d7:b3:4a:f2:69:26:f6:52:a8:a9:9b:32:
                    40:db:86:04:2f:8c:d2:49:37:09:ef:af:8c:fc:83:
                    5b:92:60:ff:06:19:74:7f:27:0c:b9:57:7c:55:a1:
                    14:ce:d1:da:25:4b:46:ce:f4:8d:5c:42:cd:0f:05:
                    e3:a5:b0:f6:0e:92:e5:e3:eb:9f:f8:33:fe:0e:33:
                    ff:a8:91:c3:2e:5d:64:cb:ac:6b:8c:6a:f6:cb:dd:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EF:A1:6A:CD:F2:0B:48:3E:07:C3:D6:F4:08:D1:75:E6:F0:AB:E1
            X509v3 Authority Key Identifier:
                keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/2C691CD0901211ED8EA222A0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f348::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:30:4d:38:24:37:49:a9:2d:95:61:51:90:3a:6d:74:db:9d:
         0c:d3:a3:e4:7d:d7:e4:65:0c:bb:95:f2:7f:b0:11:0f:e0:0b:
         0e:44:d0:16:1e:d1:21:63:d3:82:ac:03:49:e5:23:e7:ff:88:
         7c:99:ac:22:09:e2:54:35:75:d9:94:42:5c:f4:06:45:59:1d:
         59:12:ae:95:e8:ed:6f:c1:a8:52:a0:18:11:71:6e:dc:74:b0:
         44:4e:11:3f:93:b0:6d:89:89:fa:97:44:1a:b0:cb:3c:34:a9:
         0d:3d:8a:e6:63:11:c2:99:fe:70:16:d1:d8:c3:3c:df:b7:ee:
         cd:ee:ad:da:48:c6:0c:0e:21:8a:dd:d0:0f:c0:2f:0b:9b:9f:
         e5:d8:3d:d3:5d:fb:37:45:62:b8:29:26:ee:d0:db:1d:fc:77:
         ba:44:f8:ce:2b:34:7d:d3:f0:dd:84:75:45:c8:70:b6:ad:e3:
         e6:9a:44:e7:46:bd:dd:69:14:0e:86:59:86:21:94:65:25:f7:
         cf:2f:40:9d:02:b2:34:91:e2:c9:20:ad:ba:9a:66:bc:96:16:
         30:56:58:d9:59:33:45:6a:15:d7:4d:1e:91:1d:bf:5d:1a:28:
         ab:1f:79:85:2f:8a:2b:28:70:b8:da:64:0e:0d:a3:79:c4:23:
         cb:03:21:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----