Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/487F5228FFE211ED9A78762F4AD9E6FC.roa
File:                     487F5228FFE211ED9A78762F4AD9E6FC.roa (raw, json)
Hash identifier:          F7gj5zzcuYyHbYbRwHXIh7c5q94MnYwBPvxmqjjQypw=
Subject key identifier:   32:6E:E1:58:74:7A:75:B7:7A:0A:88:7B:09:59:33:66:AB:77:A8:DE
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0E49
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/487F5228FFE211ED9A78762F4AD9E6FC.roa
Signing time:             Wed 31 May 2023 18:38:06 +0000
ROA not before:           Wed 31 May 2023 18:38:02 +0000
ROA not after:            Sat 31 May 2025 18:38:02 +0000
asID:                     834
IP address blocks:        154.16.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3657 (0xe49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 31 18:38:02 2023 GMT
            Not After : May 31 18:38:02 2025 GMT
        Subject: CN=6477940e-22ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:9b:54:96:c5:c0:ad:6b:22:66:c8:87:51:
                    0b:4b:7a:19:b2:43:7d:fb:e2:0a:80:2a:8c:f6:d1:
                    53:a0:4e:e8:36:83:57:90:da:76:28:97:2d:9d:16:
                    07:d6:99:bf:5c:90:c0:e5:59:ab:4f:4a:56:43:41:
                    28:a9:6a:12:47:4b:ae:4a:1f:4f:4f:b9:da:73:2f:
                    5f:ab:38:f2:96:57:35:5b:76:f9:66:ea:eb:6a:a3:
                    21:2b:55:62:ed:77:64:d1:0f:23:cc:70:20:9d:51:
                    9f:f5:39:42:f4:b5:3f:66:a0:14:6d:fe:02:67:c5:
                    50:3a:32:71:c2:b2:02:4b:92:d7:b5:9e:be:95:bb:
                    5d:53:80:6c:18:52:bf:42:54:b8:6d:16:fb:63:fd:
                    96:fb:93:60:26:c9:6e:1a:56:68:8c:0e:ce:cb:b8:
                    89:51:40:62:35:ca:84:17:17:61:b2:d9:05:be:fe:
                    25:40:61:d9:83:8e:70:3c:d3:99:67:f8:f4:98:b1:
                    28:56:d0:05:1e:48:71:b4:e9:4d:5e:ec:d0:81:88:
                    1c:38:5e:9c:be:83:b3:d0:bc:0f:83:51:58:30:03:
                    7d:7a:4b:82:98:a0:6c:50:86:91:33:25:7e:1d:a8:
                    85:6a:13:10:ae:df:46:4d:d4:36:05:04:24:2d:06:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6E:E1:58:74:7A:75:B7:7A:0A:88:7B:09:59:33:66:AB:77:A8:DE
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/487F5228FFE211ED9A78762F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:40:de:bb:04:ba:7c:e7:22:55:6b:95:c1:ae:85:c1:bd:0a:
         db:7f:18:3f:45:45:b5:54:28:aa:4e:50:f9:67:d9:7e:03:e8:
         ab:65:6b:c4:1b:99:ba:f5:dc:2b:d0:c3:fe:d6:e7:ca:e5:55:
         ed:e6:95:46:25:80:b8:68:64:b9:55:3e:ec:86:43:ce:36:b8:
         5a:98:14:31:02:bd:a7:69:df:90:57:8c:a9:7e:75:af:e7:d4:
         93:2a:b0:54:d6:8c:ff:21:ab:13:fd:40:51:f4:b2:3f:00:09:
         fb:0c:83:29:4d:12:9b:39:55:d8:f1:52:6c:c6:22:d8:23:ea:
         c8:e5:39:5a:e9:33:32:2c:02:99:17:ef:9a:c8:23:96:4f:87:
         fb:f1:23:a7:9b:9d:87:64:10:62:08:e5:f4:83:3d:0f:0e:2b:
         21:4d:da:cd:ce:87:cd:b4:75:e8:98:50:e7:c5:5c:74:19:66:
         5f:e8:3d:2e:71:7d:42:f9:e9:c9:30:d0:ba:75:15:b2:50:86:
         8f:53:28:43:cf:19:05:59:28:5f:58:2b:3f:e1:81:60:85:b4:
         3a:6e:02:42:ab:30:70:65:05:6e:1b:c6:7b:c1:54:7d:a3:f0:
         4e:25:76:df:6e:e9:2a:ac:7e:a0:46:33:60:41:2f:66:71:88:
         a0:15:66:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----