Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/6FD5A3C8B26711EC970004D75A40D577.roa
File:                     6FD5A3C8B26711EC970004D75A40D577.roa (raw, json)
Hash identifier:          v8kl82yXbSznMCQyAj+l+Jsz5QEp63hrKVfJ2bGcgn0=
Subject key identifier:   92:93:C2:8B:D1:EA:96:57:E1:60:25:7F:98:55:A5:B4:01:85:D6:78
Certificate issuer:       /CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
Certificate serial:       30
Authority key identifier: F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/6FD5A3C8B26711EC970004D75A40D577.roa
Signing time:             Sat 02 Apr 2022 09:29:47 +0000
ROA not before:           Sat 02 Apr 2022 09:29:44 +0000
ROA not after:            Wed 31 Jan 2024 09:29:44 +0000
asID:                     328964
IP address blocks:        2c0f:4880::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
        Validity
            Not Before: Apr  2 09:29:44 2022 GMT
            Not After : Jan 31 09:29:44 2024 GMT
        Subject: CN=6248178b-b1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:8e:99:91:86:3d:01:cb:db:df:e7:d0:b4:
                    d6:89:56:ed:f8:58:7d:c1:92:1f:29:01:a8:bd:a5:
                    e1:fa:e8:1f:d1:96:33:b9:8f:a4:72:4d:da:69:85:
                    3f:50:ba:ee:f4:87:64:da:17:ab:d0:54:84:48:41:
                    ee:75:66:cd:de:69:87:21:96:ce:bf:1b:5e:35:ec:
                    1a:ac:45:a8:ef:67:0f:12:9b:3e:f5:5a:41:64:93:
                    4c:ac:1f:85:96:d3:9b:8e:fa:af:0b:c0:c0:5b:00:
                    fa:16:96:06:42:cd:d5:d1:19:68:0e:e5:b8:58:bc:
                    19:5a:53:a1:9b:9f:84:96:e4:ce:58:e3:49:d0:ab:
                    50:b6:78:ab:07:d6:e6:33:92:40:64:f5:0a:99:c5:
                    e6:b7:4e:98:ff:59:5d:96:b8:38:d6:88:c3:dd:65:
                    54:47:90:7c:21:7a:2a:b4:1a:8f:b1:c5:c7:c3:c8:
                    05:16:13:bb:bd:3b:4c:33:d9:10:c7:16:9a:8d:85:
                    5a:ac:15:5c:87:ea:5e:aa:41:4c:6c:b3:52:97:b9:
                    d4:2b:b6:7a:7b:74:c0:a6:f9:3e:6e:16:ea:cf:1f:
                    f4:32:8e:1d:fb:b1:06:a6:ef:49:18:5a:59:54:99:
                    25:1e:7b:af:2d:f2:6f:11:71:f3:9c:23:be:86:16:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:93:C2:8B:D1:EA:96:57:E1:60:25:7F:98:55:A5:B4:01:85:D6:78
            X509v3 Authority Key Identifier:
                keyid:F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/6FD5A3C8B26711EC970004D75A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:4880::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:52:1c:84:aa:27:97:b9:14:37:d8:69:4e:46:5c:65:0c:
         35:a4:f2:ab:9d:51:2f:a8:7f:16:28:0e:90:14:cf:9e:bd:2a:
         09:6c:5d:d5:c5:2a:fb:04:2e:53:95:f7:88:cb:5b:77:6a:4d:
         c1:67:9f:f9:0e:ee:ab:21:d1:4e:22:7b:37:28:ca:6e:5d:d2:
         14:48:0c:66:c6:2c:f1:a6:10:fa:a7:bc:25:e6:b4:38:16:8c:
         ee:36:62:61:2e:0a:9e:0e:3a:b0:59:50:19:72:5c:37:9b:1e:
         3f:74:db:e9:45:93:31:81:46:7a:7b:51:81:2a:1b:77:13:e7:
         31:e4:ed:f0:fa:da:ac:9b:e8:6d:00:49:85:a8:18:57:03:07:
         c6:f5:64:58:fc:cc:9e:6f:8b:3f:03:85:ad:b8:49:e4:02:59:
         3e:52:ac:f4:0f:07:91:48:92:ab:67:5a:41:f6:95:a2:95:bd:
         ad:6f:cf:9a:fa:7b:6a:29:75:8f:fa:73:bf:3f:bc:70:b6:ed:
         74:81:56:83:46:68:89:64:a2:e4:04:05:36:c1:c0:ef:63:7b:
         37:9b:74:13:4f:f2:e3:9a:5c:9f:e5:79:40:5c:84:34:4d:05:
         9f:9f:09:54:da:55:08:31:50:24:89:6d:cd:62:c2:9d:95:7d:
         8e:7f:d4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----