Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44A0630814BF11EEA28C74674AD9E6FC.roa
File:                     44A0630814BF11EEA28C74674AD9E6FC.roa (raw, json)
Hash identifier:          fRvWg+svYPPQsK/VA33xmdO0XTDQHnR4cfIM+9294j0=
Subject key identifier:   F0:14:98:39:CF:B2:A8:22:C3:81:A9:9F:72:C3:35:AB:28:19:11:AD
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1012
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44A0630814BF11EEA28C74674AD9E6FC.roa
Signing time:             Tue 27 Jun 2023 07:50:22 +0000
ROA not before:           Tue 27 Jun 2023 07:50:17 +0000
ROA not after:            Thu 26 Jun 2025 07:50:17 +0000
asID:                     147173
IP address blocks:        154.16.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4114 (0x1012)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 27 07:50:17 2023 GMT
            Not After : Jun 26 07:50:17 2025 GMT
        Subject: CN=649a94be-29cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:26:2d:7e:2c:ee:85:78:c8:b8:9e:10:f4:
                    60:7f:51:4b:bb:fd:5e:22:9a:fc:76:44:d7:aa:78:
                    46:d6:85:0f:b1:a9:dd:6c:2c:27:69:0e:2a:dd:ad:
                    7f:d5:de:b0:28:a6:9f:b0:39:c2:8c:1d:af:ad:c8:
                    82:b3:f3:05:3d:ad:a8:3a:32:c3:b9:75:5f:a0:24:
                    67:3d:88:7f:32:b3:01:f7:00:f2:db:91:fe:62:83:
                    c9:17:f6:1b:cb:59:9f:38:2a:1d:60:67:62:d8:41:
                    66:50:d1:f0:3e:dd:7c:36:b3:c1:7a:c5:5a:bc:de:
                    64:ed:28:35:1e:a3:c4:3a:14:bb:ae:dc:77:80:ec:
                    a3:82:ed:60:30:16:5a:f9:de:1a:e9:ea:78:2b:50:
                    87:4f:14:2b:6b:84:50:cb:3c:6c:94:c5:be:32:07:
                    50:5c:65:1b:a7:84:94:cf:57:bb:ff:ba:da:a9:b9:
                    ed:2d:c6:62:90:02:f9:5c:42:b7:85:5a:9f:a0:ab:
                    08:49:12:3c:a5:ab:11:c6:13:68:0e:45:0e:6f:9a:
                    8b:d4:5c:1d:0b:67:12:e5:e2:2c:03:fc:a1:2d:d0:
                    d4:57:07:89:71:d9:9c:3d:b1:b1:27:61:46:bc:c5:
                    a1:04:96:6b:e3:9f:43:4a:33:6f:4f:2d:cc:8b:64:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:14:98:39:CF:B2:A8:22:C3:81:A9:9F:72:C3:35:AB:28:19:11:AD
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44A0630814BF11EEA28C74674AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:fb:72:ea:cb:41:d4:a6:54:3e:c4:27:e7:ea:be:7a:e8:d3:
         12:ac:2f:f7:4c:5c:80:31:c1:27:dd:ab:0b:04:98:aa:7f:d7:
         ab:7c:e0:7b:68:59:76:3c:94:0e:53:35:de:61:02:6d:9c:f2:
         4a:a7:14:c5:30:e7:5a:fd:7e:56:07:4f:0c:89:ac:73:26:41:
         3c:3f:27:30:d8:76:73:6a:2b:c4:13:16:77:6d:1e:7e:6d:d0:
         27:3d:6b:97:9d:09:14:3a:8c:25:f9:9e:24:24:e8:bc:b8:09:
         1d:61:95:70:38:78:6d:58:53:ed:00:38:c2:7e:4b:23:7d:23:
         2b:dc:ba:c6:27:61:38:cf:f7:f1:b0:d2:12:dd:4b:6f:ce:82:
         9a:7b:c2:f8:a8:c5:d1:45:1b:32:52:ec:4f:7e:01:92:14:46:
         a5:ec:20:c0:e0:3d:78:c5:33:a6:77:43:13:da:30:04:bf:85:
         52:fe:00:f9:ee:f7:a4:ff:df:9a:20:15:d2:2d:c2:f5:ad:c3:
         f4:54:79:6a:1b:aa:5c:a2:0e:ee:00:ca:0f:e9:60:74:97:06:
         4a:26:90:62:7c:1a:37:02:6f:33:d2:65:b4:cb:c9:49:c9:62:
         14:22:ed:52:a9:d3:dd:86:6a:b6:f5:f7:bc:fe:22:cb:b0:8a:
         9c:4f:cd:bb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEBIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MjcwNzUwMTdaFw0yNTA2MjYwNzUwMTdaMBgxFjAU
BgNVBAMTDTY0OWE5NGJlLTI5Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRYiYtfizuhXjIuJ4Q9GB/UUu7/V4imvx2RNeqeEbWhQ+xqd1sLCdpDird
rX/V3rAopp+wOcKMHa+tyIKz8wU9rag6MsO5dV+gJGc9iH8yswH3APLbkf5ig8kX
9hvLWZ84Kh1gZ2LYQWZQ0fA+3Xw2s8F6xVq83mTtKDUeo8Q6FLuu3HeA7KOC7WAw
Flr53hrp6ngrUIdPFCtrhFDLPGyUxb4yB1BcZRunhJTPV7v/utqpue0txmKQAvlc
QreFWp+gqwhJEjylqxHGE2gORQ5vmovUXB0LZxLl4iwD/KEt0NRXB4lx2Zw9sbEn
YUa8xaEElmvjn0NKM29PLcyLZAZ5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8BSY
Oc+yqCLDgamfcsM1qygZEa0wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzQ0QTA2MzA4MTRCRjExRUVBMjhDNzQ2NzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDcwDQYJKoZIhvcNAQEL
BQADggEBAHz7curLQdSmVD7EJ+fqvnro0xKsL/dMXIAxwSfdqwsEmKp/16t84Hto
WXY8lA5TNd5hAm2c8kqnFMUw51r9flYHTwyJrHMmQTw/JzDYdnNqK8QTFndtHn5t
0Cc9a5edCRQ6jCX5niQk6Ly4CR1hlXA4eG1YU+0AOMJ+SyN9IyvcusYnYTjP9/Gw
0hLdS2/Ogpp7wvioxdFFGzJS7E9+AZIURqXsIMDgPXjFM6Z3QxPaMAS/hVL+APnu
96T/35ogFdItwvWtw/RUeWobqlyiDu4Ayg/pYHSXBkomkGJ8GjcCbzPSZbTLyUnJ
YhQi7VKp092Garb197z+IsuwipxPzbs=
-----END CERTIFICATE-----