Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/02BCAE5C2D0F11EE8633B97A4AD9E6FC.roa
File:                     02BCAE5C2D0F11EE8633B97A4AD9E6FC.roa (raw, json)
Hash identifier:          08JRtmz6A5YbBJIg5Pg/7psNJf9H7hg6vVOET2uSIes=
Subject key identifier:   4D:5A:AB:9D:38:F4:69:BB:D6:9E:D4:96:3D:B4:B9:88:59:E5:41:7D
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       10E5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/02BCAE5C2D0F11EE8633B97A4AD9E6FC.roa
Signing time:             Fri 28 Jul 2023 06:21:39 +0000
ROA not before:           Fri 28 Jul 2023 06:21:36 +0000
ROA not after:            Mon 28 Jul 2025 06:21:36 +0000
asID:                     834
IP address blocks:        154.16.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4325 (0x10e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jul 28 06:21:36 2023 GMT
            Not After : Jul 28 06:21:36 2025 GMT
        Subject: CN=64c35e73-7af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:c5:95:0c:b7:74:87:d3:ac:60:1e:61:19:
                    f2:5c:4e:b2:de:11:1a:9c:5b:07:b4:79:d0:56:94:
                    db:68:e7:e2:ae:d1:3b:78:30:95:8a:75:a5:70:04:
                    66:23:08:a2:4b:86:e1:05:61:9b:e4:77:66:61:84:
                    68:b8:8c:1d:fe:8d:be:3b:15:94:82:8e:ae:1f:fc:
                    18:22:63:3b:99:c2:35:b7:5f:3c:65:34:04:85:93:
                    95:53:89:23:84:6e:f4:e8:e8:b2:c2:cc:fb:00:12:
                    a6:e0:3f:9b:72:97:2a:09:37:b0:c6:0f:f8:b5:5a:
                    46:73:68:7d:b7:e9:1f:88:68:ac:f4:6d:95:b2:eb:
                    b1:97:21:fd:44:b5:44:59:c3:6b:5f:47:dd:06:f1:
                    92:8a:e6:8f:f7:44:00:3f:72:58:02:c0:6f:7f:9c:
                    2a:71:d4:20:b4:5f:e1:ba:39:03:24:9c:71:54:b8:
                    ad:47:f5:c7:39:bd:1e:2e:fe:7a:a2:24:88:d4:3f:
                    91:4a:9d:5d:03:74:d1:e6:f9:a9:a5:07:7d:23:97:
                    6a:b0:81:79:a9:11:9c:b4:be:7b:3e:1a:61:e1:a6:
                    96:e8:29:9e:56:82:2b:4b:da:c2:d9:82:ea:f3:0a:
                    43:21:2a:a1:f9:62:a2:38:bb:18:c8:e8:55:d9:ee:
                    7c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5A:AB:9D:38:F4:69:BB:D6:9E:D4:96:3D:B4:B9:88:59:E5:41:7D
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/02BCAE5C2D0F11EE8633B97A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:13:ad:0b:b8:44:69:1a:03:82:05:19:d5:84:09:87:7d:5b:
         8c:5e:54:2e:32:f6:b3:22:97:f5:f0:a8:ff:b4:18:dc:d6:f5:
         87:a3:3b:f1:26:de:9d:19:3e:24:29:45:0c:42:32:52:91:11:
         f7:a5:84:93:e0:55:65:4d:59:f1:6a:11:88:d3:a0:09:28:32:
         3d:62:b9:e2:79:5a:b7:55:83:49:46:01:ea:ca:c0:f7:f9:63:
         a0:e1:28:9c:a0:3a:f1:f8:ac:ab:46:ed:d9:94:0f:ae:a4:25:
         c8:bd:5d:aa:bd:65:92:51:16:c4:8f:ca:6e:9e:88:51:9e:62:
         07:7b:2f:0f:23:0d:b2:b6:ba:73:b7:58:92:4a:69:f3:0f:11:
         af:06:a0:64:f5:2d:66:7d:1d:99:92:f2:5b:6d:96:42:a1:7f:
         64:79:3d:f6:c6:7e:20:dd:b1:48:9c:d6:c6:f6:5e:2e:0e:d4:
         4b:af:35:5e:2e:db:39:4c:c9:08:3d:5c:85:49:00:d5:27:c4:
         a2:2d:8c:fe:b9:fe:1b:eb:15:4c:01:9f:78:36:40:fc:bd:4a:
         08:0a:7a:14:95:7c:45:50:bb:4b:ec:3d:d9:6a:57:4e:28:ae:
         a1:9d:f9:b1:38:99:59:f1:88:01:9a:1a:9d:07:dd:c7:9a:70:
         1c:88:4a:3b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEOUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA3MjgwNjIxMzZaFw0yNTA3MjgwNjIxMzZaMBgxFjAU
BgNVBAMTDTY0YzM1ZTczLTdhZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqpsWVDLd0h9OsYB5hGfJcTrLeERqcWwe0edBWlNto5+Ku0Tt4MJWKdaVw
BGYjCKJLhuEFYZvkd2ZhhGi4jB3+jb47FZSCjq4f/BgiYzuZwjW3XzxlNASFk5VT
iSOEbvTo6LLCzPsAEqbgP5tylyoJN7DGD/i1WkZzaH236R+IaKz0bZWy67GXIf1E
tURZw2tfR90G8ZKK5o/3RAA/clgCwG9/nCpx1CC0X+G6OQMknHFUuK1H9cc5vR4u
/nqiJIjUP5FKnV0DdNHm+amlB30jl2qwgXmpEZy0vns+GmHhppboKZ5WgitL2sLZ
gurzCkMhKqH5YqI4uxjI6FXZ7nxhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTVqr
nTj0abvWntSWPbS5iFnlQX0wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzAyQkNBRTVDMkQwRjExRUU4NjMzQjk3QTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEE4wDQYJKoZIhvcNAQEL
BQADggEBAEITrQu4RGkaA4IFGdWECYd9W4xeVC4y9rMil/XwqP+0GNzW9YejO/Em
3p0ZPiQpRQxCMlKREfelhJPgVWVNWfFqEYjToAkoMj1iueJ5WrdVg0lGAerKwPf5
Y6DhKJygOvH4rKtG7dmUD66kJci9Xaq9ZZJRFsSPym6eiFGeYgd7Lw8jDbK2unO3
WJJKafMPEa8GoGT1LWZ9HZmS8lttlkKhf2R5PfbGfiDdsUic1sb2Xi4O1EuvNV4u
2zlMyQg9XIVJANUnxKItjP65/hvrFUwBn3g2QPy9SggKehSVfEVQu0vsPdlqV04o
rqGd+bE4mVnxiAGaGp0H3ceacByISjs=
-----END CERTIFICATE-----