Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/4A71DD843C0111EEB627F24A4AD9E6FC.roa
File:                     4A71DD843C0111EEB627F24A4AD9E6FC.roa (raw, json)
Hash identifier:          YuGB60qPlkaIsSspJ9wVdCCUQEICw4m533KngRr2NaE=
Subject key identifier:   33:FC:AE:FF:1B:51:F9:03:5A:4C:70:5D:E7:18:12:DC:0B:FC:FF:C4
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       04CB
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/4A71DD843C0111EEB627F24A4AD9E6FC.roa
Signing time:             Wed 16 Aug 2023 06:51:14 +0000
ROA not before:           Thu 31 Aug 2023 06:51:08 +0000
ROA not after:            Wed 31 Aug 2033 06:51:08 +0000
asID:                     20011
IP address blocks:        41.132.0.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: Aug 31 06:51:08 2023 GMT
            Not After : Aug 31 06:51:08 2033 GMT
        Subject: CN=64dc71e2-2a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:b6:98:e5:a9:99:23:09:f4:79:54:75:28:
                    05:a6:c2:75:34:d9:d1:f3:f2:21:d2:e4:f9:bf:3f:
                    45:36:ce:97:cf:d0:b0:56:b6:88:d2:f4:67:12:38:
                    50:c7:ba:91:67:e6:5a:b8:7d:71:7c:c9:be:c7:88:
                    7d:e9:a2:6f:8d:84:5a:93:d8:63:bb:fb:eb:fb:a4:
                    e4:54:a3:7f:99:4b:d4:95:a0:e4:e2:91:49:4f:64:
                    bf:ab:2a:3a:88:32:6f:38:58:27:5d:c1:de:8b:d1:
                    be:17:2f:17:6e:1e:bf:60:56:ef:a0:4d:d5:0c:db:
                    69:ff:24:92:9f:e9:6d:af:f0:e2:e2:82:4d:17:f5:
                    48:cd:0e:20:f1:86:42:5d:52:40:70:b8:bf:15:ca:
                    ba:75:75:e8:cf:c6:88:00:da:16:e6:d1:bc:a7:ee:
                    7e:9e:c5:a6:1b:f8:20:5b:b1:97:69:e9:c5:ee:43:
                    b9:56:34:0c:f9:0c:8c:73:0a:b5:4c:55:7e:1e:99:
                    36:01:8b:41:74:e6:df:d4:49:59:4a:6f:2c:85:7b:
                    f2:52:f1:c5:c9:97:72:7b:78:3c:84:3e:ec:80:75:
                    3c:b4:24:7b:c4:a9:7e:71:8d:7a:cb:db:11:85:5d:
                    17:4c:81:4d:82:6b:65:04:09:0b:69:f6:a3:75:90:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FC:AE:FF:1B:51:F9:03:5A:4C:70:5D:E7:18:12:DC:0B:FC:FF:C4
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/4A71DD843C0111EEB627F24A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.132.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:03:b2:4a:24:64:d0:f9:42:27:53:eb:ac:82:56:55:09:
         b0:c1:82:2e:ea:94:76:68:30:fa:25:76:f3:f2:0e:39:6e:2a:
         28:3a:1c:32:c2:ed:a7:f7:ae:83:d8:98:8c:5f:69:1c:fd:ec:
         60:13:31:88:6a:95:62:45:d8:06:d3:11:72:ab:a8:10:5c:69:
         c2:b2:52:f7:0d:b9:d5:36:7a:56:41:ce:39:fa:dc:fa:34:cf:
         94:6d:9f:8d:10:4c:f1:91:af:4e:60:97:e1:53:90:f4:33:55:
         48:ca:d5:14:04:f0:c4:aa:f8:af:7a:6d:65:0e:79:e0:e2:60:
         ee:8b:73:85:3e:0b:42:2a:2f:99:55:c1:95:de:a8:ab:26:9a:
         ef:35:13:31:84:e4:28:e5:82:01:98:ed:06:0b:79:09:26:71:
         55:42:bc:dd:8b:71:cd:7e:64:42:6f:ff:06:a8:55:9b:fb:3e:
         58:e4:d3:69:a7:57:12:71:68:aa:a2:20:76:de:a8:9d:95:83:
         45:77:65:1a:4c:79:a0:20:8e:08:bf:c8:45:ea:56:03:8d:71:
         ff:6d:f3:3b:41:7c:22:60:f6:29:99:3f:7d:6d:22:96:a9:31:
         01:a2:28:32:ca:56:96:60:47:b0:ae:be:6b:e7:28:55:0a:9a:
         e6:d1:72:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----