Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/36A5EDE4543011EEAF507B284AD9E6FC.roa
File:                     36A5EDE4543011EEAF507B284AD9E6FC.roa (raw, json)
Hash identifier:          btYPwX6z+Tf7HrmrDn2grAjG9NOj+RzNbXoeqt6pz9U=
Subject key identifier:   0A:19:03:84:3F:43:AA:D9:78:7B:22:B0:AB:5B:6E:A3:4C:C6:84:91
Certificate issuer:       /CN=F3682B3AAF/serialNumber=870C8E8FD43B42C5B51562D9B8944A84E43D3632
Certificate serial:       55
Authority key identifier: 87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/36A5EDE4543011EEAF507B284AD9E6FC.roa
Signing time:             Sat 16 Sep 2023 01:27:35 +0000
ROA not before:           Sat 16 Sep 2023 01:27:30 +0000
ROA not after:            Mon 30 Sep 2024 01:27:30 +0000
asID:                     329276
IP address blocks:        102.212.60.0/22 maxlen: 24
                          2c0f:c40::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 15:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B3AAF/serialNumber=870C8E8FD43B42C5B51562D9B8944A84E43D3632
        Validity
            Not Before: Sep 16 01:27:30 2023 GMT
            Not After : Sep 30 01:27:30 2024 GMT
        Subject: CN=65050487-15d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:af:95:7e:52:8c:76:d3:a7:0a:15:1b:c7:
                    06:6a:ea:a5:92:f9:be:eb:b2:51:08:3e:1f:03:0c:
                    36:a0:a1:a5:2e:25:4d:2a:d4:8a:ba:b4:e4:c9:d9:
                    54:1b:aa:c6:f8:b5:2b:b6:1b:ad:02:4d:69:05:45:
                    be:a0:7c:17:ab:84:1d:24:95:cb:07:74:ae:79:41:
                    dd:23:16:18:0d:59:dc:1a:a1:5b:4f:d6:60:b6:11:
                    2f:25:13:5c:64:28:2e:55:dd:91:f4:f2:6b:8a:e2:
                    ed:70:ee:d0:92:24:6e:df:ce:4c:c2:fe:0c:da:53:
                    32:02:29:98:74:06:30:6a:19:ab:f1:37:89:1f:5e:
                    4f:47:0c:a0:1b:d3:71:7f:73:0f:5f:f4:27:84:6f:
                    f7:c7:07:2b:74:0c:84:d6:05:bf:6a:3b:42:24:3d:
                    89:b4:63:e2:3e:2f:36:69:5e:34:4e:bf:5a:e4:88:
                    5c:73:53:2f:69:ed:8c:c6:79:ee:ac:2f:13:b7:03:
                    e9:46:1e:89:fa:2d:87:6e:c4:14:91:ef:15:72:4f:
                    dd:e8:d1:d9:67:41:c2:22:07:cf:f5:6c:4a:36:7c:
                    42:02:4d:5c:5e:31:21:23:6d:13:b5:c3:5c:89:94:
                    27:eb:85:0d:b6:24:86:76:55:1e:75:be:db:1b:e7:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:19:03:84:3F:43:AA:D9:78:7B:22:B0:AB:5B:6E:A3:4C:C6:84:91
            X509v3 Authority Key Identifier:
                keyid:87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/36A5EDE4543011EEAF507B284AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.60.0/22
                IPv6:
                  2c0f:c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:de:fc:b8:fb:b5:96:a9:70:3f:fd:f1:f5:6f:b1:4d:1c:d1:
         ce:d4:d8:f4:62:5d:94:1e:2d:6c:7d:b2:5a:57:ac:d1:52:24:
         6c:93:34:a0:31:91:cc:e1:7d:46:7d:00:7c:53:39:74:f0:1b:
         81:73:1f:4d:45:c6:f7:02:94:ba:8b:f0:63:13:fd:9f:64:f1:
         74:99:fd:66:9b:d5:1a:ab:fb:ff:f9:47:c2:3c:ab:d3:56:cb:
         ee:d8:40:53:8b:45:f2:fc:94:12:c9:f5:08:cd:ba:0b:ba:03:
         fd:00:c5:f7:09:94:4d:87:29:4a:c8:0e:b6:1c:c1:b4:22:a3:
         d5:8f:a4:75:f9:f3:ee:09:05:05:ed:fb:37:9b:36:95:80:99:
         77:2b:09:9f:b4:05:39:22:b3:6e:cc:3e:40:d2:e9:93:69:5d:
         ba:68:1d:ff:3f:25:d0:a3:c6:45:75:09:37:53:6c:d4:32:d2:
         96:c5:1f:1e:dd:e1:cf:07:5e:44:16:06:d3:7f:9f:4a:10:7c:
         99:0e:f0:98:42:f6:6e:55:b8:d6:3c:f1:14:7d:ef:0c:fd:84:
         ef:b5:9e:cf:57:a8:c1:ee:81:95:9d:56:50:7c:17:02:bc:37:
         fc:1f:36:49:3d:e8:c9:c7:ed:13:21:4e:cf:47:d3:a5:1e:78:
         3b:7b:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----