Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D5A56A4518411ED98AA8C93F1222468.roa
File:                     1D5A56A4518411ED98AA8C93F1222468.roa (raw, json)
Hash identifier:          C/VmIUqJcywMM/tpE6Vmo5JKLsZ/8zAJZsmUKtgUFVc=
Subject key identifier:   10:20:37:83:35:00:B6:04:A0:D0:FC:AC:72:19:E9:54:87:3E:68:E6
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0A1A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D5A56A4518411ED98AA8C93F1222468.roa
Signing time:             Fri 21 Oct 2022 21:05:39 +0000
ROA not before:           Sat 22 Oct 2022 21:05:33 +0000
ROA not after:            Mon 21 Oct 2024 21:05:33 +0000
asID:                     212238
IP address blocks:        154.16.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2586 (0xa1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 22 21:05:33 2022 GMT
            Not After : Oct 21 21:05:33 2024 GMT
        Subject: CN=635309a3-a6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:d9:b2:d9:39:b6:11:6c:1a:49:10:31:ad:
                    3a:87:f4:61:39:c9:90:86:b6:42:cc:06:44:b1:fb:
                    82:d5:71:e0:e5:d1:33:b0:b5:98:33:88:b1:23:3e:
                    ab:25:20:70:b9:6e:8f:7c:97:ed:90:86:6e:bb:55:
                    b1:1e:db:19:68:12:a8:fe:a1:4a:5e:3d:5f:b8:68:
                    87:3e:d8:22:7a:d2:0b:37:a0:4d:72:e9:b4:6f:3c:
                    a8:af:8e:e7:29:1f:87:f1:13:bd:fe:35:1e:64:27:
                    8b:71:d4:d6:9e:cd:16:67:a3:5a:b6:a3:37:74:cd:
                    0c:89:65:47:e5:b2:77:da:83:0a:7e:d8:03:92:4e:
                    9c:3f:44:fc:43:9e:53:71:a1:af:ef:7f:85:d9:ec:
                    de:68:85:2e:74:d2:45:bb:43:1f:16:e4:17:18:c2:
                    38:25:22:44:ad:3d:21:88:fe:7f:81:bc:8b:e3:5a:
                    50:41:9d:4a:76:69:88:0d:2c:0f:ea:da:3e:30:0d:
                    1a:cd:cc:fc:3b:53:0f:1f:6a:8a:a4:24:8e:84:97:
                    13:1c:50:4c:e9:aa:c6:c0:4e:19:e8:42:eb:a8:91:
                    ab:f8:9a:43:07:8e:ea:a9:b8:db:90:06:f2:92:6d:
                    5e:36:5a:fa:b0:24:dc:94:e3:49:04:dd:3a:ed:2d:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:20:37:83:35:00:B6:04:A0:D0:FC:AC:72:19:E9:54:87:3E:68:E6
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D5A56A4518411ED98AA8C93F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:59:24:6f:fd:e3:ab:90:de:55:d9:82:35:d6:de:98:47:bb:
         d8:9d:71:20:a8:66:2b:31:20:84:cc:fb:a3:a8:5d:49:4f:5e:
         29:c7:d0:ce:87:cf:f8:84:7b:93:08:ac:a6:c7:60:53:e8:f0:
         e1:26:a8:77:1d:d7:f2:84:a6:48:f6:13:c1:c0:ce:70:7f:07:
         80:46:39:89:ee:15:72:65:fe:29:d1:9a:38:78:69:29:bd:d5:
         67:3d:d1:b1:1a:02:6e:c8:a7:d2:07:34:d8:7f:7b:53:16:e3:
         c4:39:47:b2:53:a9:ce:21:26:01:8d:25:f8:cf:6f:bd:c9:14:
         e2:62:72:57:73:d8:05:d2:31:fb:81:a6:c2:c0:c3:af:d3:74:
         38:35:94:52:3d:23:8c:6a:22:23:b9:8a:99:f3:92:ed:f3:08:
         bf:77:c9:7c:d9:dc:4f:88:ed:df:30:0c:e6:48:2a:17:5a:59:
         66:9f:c0:c3:99:92:d1:2a:a7:80:d2:9a:a6:97:50:3c:9d:4a:
         7b:24:e1:23:df:fb:48:3f:58:a1:07:f6:a2:37:34:89:11:3a:
         4a:61:56:41:40:bb:a5:ee:e5:ac:59:75:48:8d:14:27:92:4b:
         bd:8f:de:89:88:dd:52:34:46:db:d7:7e:a6:d0:e1:46:f2:91:
         b7:f0:96:54
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICChowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjEwMjIyMTA1MzNaFw0yNDEwMjEyMTA1MzNaMBgxFjAU
BgNVBAMMDTYzNTMwOWEzLWE2ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzqNmy2Tm2EWwaSRAxrTqH9GE5yZCGtkLMBkSx+4LVceDl0TOwtZgziLEj
PqslIHC5bo98l+2Qhm67VbEe2xloEqj+oUpePV+4aIc+2CJ60gs3oE1y6bRvPKiv
jucpH4fxE73+NR5kJ4tx1NaezRZno1q2ozd0zQyJZUflsnfagwp+2AOSTpw/RPxD
nlNxoa/vf4XZ7N5ohS500kW7Qx8W5BcYwjglIkStPSGI/n+BvIvjWlBBnUp2aYgN
LA/q2j4wDRrNzPw7Uw8faoqkJI6ElxMcUEzpqsbAThnoQuuokav4mkMHjuqpuNuQ
BvKSbV42WvqwJNyU40kE3TrtLScjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUECA3
gzUAtgSg0PyschnpVIc+aOYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzFENUE1NkE0NTE4NDExRUQ5OEFBOEM5M0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAAwDQYJKoZIhvcNAQEL
BQADggEBAMJZJG/946uQ3lXZgjXW3phHu9idcSCoZisxIITM+6OoXUlPXinH0M6H
z/iEe5MIrKbHYFPo8OEmqHcd1/KEpkj2E8HAznB/B4BGOYnuFXJl/inRmjh4aSm9
1Wc90bEaAm7Ip9IHNNh/e1MW48Q5R7JTqc4hJgGNJfjPb73JFOJicldz2AXSMfuB
psLAw6/TdDg1lFI9I4xqIiO5ipnzku3zCL93yXzZ3E+I7d8wDOZIKhdaWWafwMOZ
ktEqp4DSmqaXUDydSnsk4SPf+0g/WKEH9qI3NIkROkphVkFAu6Xu5axZdUiNFCeS
S72P3omI3VI0RtvXfqbQ4UbykbfwllQ=
-----END CERTIFICATE-----