Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42FB9DB0092A11EE9EFF28434AD9E6FC.roa
File:                     42FB9DB0092A11EE9EFF28434AD9E6FC.roa (raw, json)
Hash identifier:          VL4Yf9KQDQDVZcGu+ZoZCkrtlC06QCe2f+AgCpN2Sa0=
Subject key identifier:   BD:28:19:8A:4D:C3:42:8A:BC:01:E4:65:81:41:C9:1E:74:30:9E:A3
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0F32
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42FB9DB0092A11EE9EFF28434AD9E6FC.roa
Signing time:             Mon 12 Jun 2023 14:06:01 +0000
ROA not before:           Mon 12 Jun 2023 14:05:56 +0000
ROA not after:            Wed 11 Jun 2025 14:05:56 +0000
asID:                     204843
IP address blocks:        154.16.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3890 (0xf32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 12 14:05:56 2023 GMT
            Not After : Jun 11 14:05:56 2025 GMT
        Subject: CN=64872649-0832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:27:50:87:ac:16:71:43:b1:23:64:1c:99:d7:
                    6a:c3:16:29:19:c5:69:af:60:2e:94:7f:50:f5:f2:
                    bb:01:ab:12:09:85:c3:03:5b:0d:c2:ce:a0:7d:a5:
                    70:d7:c5:f4:75:12:14:6a:a1:55:10:d1:5f:ac:10:
                    4c:3f:71:37:64:7d:b1:55:d0:ee:5e:03:fe:c6:9b:
                    56:b7:3b:5c:df:bf:a0:23:03:59:ee:2a:35:0b:66:
                    61:b3:9b:41:21:18:81:d8:79:42:d1:95:05:2f:da:
                    df:5f:9c:82:ee:9d:c9:b6:de:e4:30:85:28:8d:a8:
                    4a:0b:e5:0a:dd:aa:22:c2:e9:1d:41:83:c4:3b:21:
                    82:a6:58:cb:e9:0f:f6:5e:23:58:40:72:f6:08:97:
                    ab:b9:30:3f:36:9c:62:6a:ca:c4:c8:15:a2:e6:2f:
                    a1:41:72:ee:8c:e7:bf:a3:51:88:94:e4:a6:5b:75:
                    53:1b:4b:61:fd:97:cd:6e:0c:05:36:83:1d:90:6c:
                    c5:01:e1:89:b0:b7:2a:cd:9c:a3:22:ef:f7:ef:29:
                    4f:60:b6:f8:c1:7d:8f:08:3a:de:8f:2e:73:ac:df:
                    c7:16:15:e7:be:87:2c:02:e9:74:72:b1:0b:c9:20:
                    16:c7:0c:cf:a8:6f:eb:a0:52:ae:1c:98:8b:65:a9:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:28:19:8A:4D:C3:42:8A:BC:01:E4:65:81:41:C9:1E:74:30:9E:A3
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42FB9DB0092A11EE9EFF28434AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:42:56:d3:39:1e:ac:98:30:c5:b7:3d:4d:ae:db:bd:04:bf:
         d6:39:13:96:12:74:4b:56:5c:90:f8:a1:75:b3:7b:87:81:4c:
         95:00:4d:34:af:73:08:2d:f5:be:7c:fa:ff:e8:d1:06:e4:b7:
         39:d8:79:9f:98:d1:e9:18:88:9b:31:a8:8f:8b:0d:e2:f5:af:
         52:e8:e1:9c:f4:ca:6b:f2:22:bf:d8:61:b4:d4:55:1e:bc:cb:
         59:56:26:ba:d1:10:f4:39:67:55:d1:fd:9c:56:b3:65:b8:bf:
         6a:98:fc:7f:72:8f:8c:f9:e9:db:a9:cd:7d:70:71:e5:00:e1:
         ec:99:34:ac:38:12:b9:2b:63:61:9c:72:db:4e:0a:cd:87:72:
         0c:ea:3b:e3:3c:d4:15:15:86:aa:1e:5e:91:df:a8:d2:2e:a4:
         4b:d6:16:02:cc:ec:e0:84:46:fd:c7:82:ba:93:7c:ff:fc:61:
         30:57:41:f3:24:4f:96:47:84:98:9b:33:9a:51:1e:a2:e7:de:
         71:c8:75:f1:f0:13:79:85:3a:5f:94:36:35:7f:2b:ad:bc:ac:
         22:e4:54:e1:e1:2e:b1:3b:f2:8c:89:57:9f:03:d4:c5:7c:a9:
         e4:c3:b7:43:cd:4d:23:ee:e4:b6:8d:fc:a6:84:06:52:54:1b:
         42:b5:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----