Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/466AD26EE22811ED9F0E5C13306D8C1D.roa
File:                     466AD26EE22811ED9F0E5C13306D8C1D.roa (raw, json)
Hash identifier:          DZPLTYVcOJ6N5BLF9KDu0gCPgF3DWESmJKtrtzIJ4WQ=
Subject key identifier:   AC:A6:FA:4E:0A:9A:85:7B:75:6F:3C:D0:80:B9:7A:F5:0B:B5:A4:4C
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0D76
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/466AD26EE22811ED9F0E5C13306D8C1D.roa
Signing time:             Sun 23 Apr 2023 22:43:33 +0000
ROA not before:           Sun 23 Apr 2023 22:43:27 +0000
ROA not after:            Thu 11 Apr 2024 22:43:27 +0000
asID:                     834
IP address blocks:        154.16.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Apr 23 22:43:27 2023 GMT
            Not After : Apr 11 22:43:27 2024 GMT
        Subject: CN=6445b495-3dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:84:e1:04:f6:a4:dd:2e:c7:10:59:6d:42:
                    19:34:9a:04:81:20:2f:64:69:7f:83:8f:05:b0:7b:
                    8f:6d:d1:16:2f:2c:0b:15:f8:90:62:08:7c:ef:cd:
                    28:51:e1:e0:94:2e:34:55:01:11:21:04:a1:3a:25:
                    65:73:f8:30:2a:22:d0:38:12:0b:d7:ab:fe:62:38:
                    0d:a7:41:29:83:23:8e:cc:2d:9b:96:ef:c1:04:b7:
                    7e:4e:07:41:a0:6b:59:8a:dd:df:a2:d8:88:48:58:
                    fb:5c:28:ec:32:37:ef:0d:df:ca:90:ac:18:f6:29:
                    82:07:46:c1:bc:01:30:4f:5f:3e:0c:3a:8f:d5:78:
                    52:75:3c:fb:2a:ec:7f:8c:13:71:ee:2d:89:70:89:
                    b9:25:8f:f7:73:48:26:fa:db:55:0f:f1:4f:43:10:
                    07:d6:35:5b:7f:25:0e:83:d6:c6:9d:13:91:92:0c:
                    2a:95:d4:e8:a4:97:18:4d:fb:f3:b3:ef:f1:a4:eb:
                    f1:5d:37:03:36:cb:2b:03:32:69:c5:a8:37:b1:99:
                    4c:20:02:32:e2:eb:b9:c1:1e:48:a3:de:30:ac:a4:
                    43:32:7c:05:db:3b:c2:cd:54:4f:87:79:c3:45:d6:
                    3b:e3:7e:96:56:3d:0d:60:72:39:cc:6d:23:df:bd:
                    32:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A6:FA:4E:0A:9A:85:7B:75:6F:3C:D0:80:B9:7A:F5:0B:B5:A4:4C
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/466AD26EE22811ED9F0E5C13306D8C1D.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ab:e0:08:dc:7d:87:34:40:c0:d2:aa:85:0a:71:b6:4b:f8:
         dc:92:96:12:74:4d:3e:cb:82:dc:27:a4:54:9b:e8:12:b8:b9:
         f9:db:1c:f7:32:29:35:45:0b:52:0e:d4:66:7f:c0:56:95:7b:
         b5:87:c1:ab:7e:bb:68:65:d8:fe:b6:93:e9:d9:df:4a:e1:7f:
         0a:a0:03:45:5f:f2:6e:48:8c:dc:7c:c4:2c:66:50:ae:ef:ca:
         fc:4d:05:e4:99:7b:31:28:81:16:98:a8:1f:2f:7a:39:cb:bc:
         3b:0d:93:a4:e0:15:3c:45:2e:53:94:f3:7a:bd:d6:3b:74:61:
         d5:a1:9f:9b:dc:bc:aa:07:9f:5b:44:a8:76:67:c7:56:af:51:
         5d:e5:b0:ab:6a:92:19:4f:0e:ae:25:79:0f:92:f0:7b:5f:58:
         c6:7b:c2:43:cd:95:84:62:b1:73:f6:55:f2:d2:30:62:33:12:
         7e:bb:56:60:96:23:fb:dc:c2:90:97:a3:d3:f2:99:08:2d:ea:
         0b:a9:0e:2f:9e:01:72:2b:aa:7a:60:43:b3:36:fc:9d:89:3c:
         5b:88:bf:12:af:e1:d9:65:58:d9:09:e3:f1:b9:0c:cb:2d:6f:
         b3:bd:58:30:7b:81:d6:7f:3d:89:b1:9a:69:75:7a:22:85:20:
         cd:b3:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----