Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C89877C567C11EDA96287AAF1222468.roa
File:                     4C89877C567C11EDA96287AAF1222468.roa (raw, json)
Hash identifier:          zazPyzq7+pZMlXrdmNDRMlsCgpUFkWlkYi5XMTtTIgQ=
Subject key identifier:   88:A2:49:FD:05:6F:F0:D5:AC:6C:9B:18:18:C9:78:2D:73:99:3D:D0
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0A85
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C89877C567C11EDA96287AAF1222468.roa
Signing time:             Fri 28 Oct 2022 04:52:18 +0000
ROA not before:           Fri 28 Oct 2022 04:52:13 +0000
ROA not after:            Sat 28 Oct 2023 04:52:13 +0000
asID:                     60781
IP address blocks:        154.127.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2693 (0xa85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 28 04:52:13 2022 GMT
            Not After : Oct 28 04:52:13 2023 GMT
        Subject: CN=635b6002-3c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:d8:36:be:c8:ff:15:94:d3:72:98:d5:c9:
                    2b:ce:d2:dd:a9:10:0d:d9:5a:5f:12:29:07:c8:48:
                    b8:c6:6a:37:a8:93:9c:ea:52:98:b2:da:2d:17:62:
                    6e:31:b4:84:ac:1e:91:32:a4:75:65:a9:29:b5:db:
                    f8:08:a8:b2:a8:a2:ae:67:1e:27:43:98:63:29:4d:
                    f5:a5:cf:36:86:81:83:10:82:1e:7a:a7:d2:03:08:
                    53:86:3a:6e:ce:92:09:fc:7a:fe:94:58:f3:9e:16:
                    da:81:ce:1f:49:03:ab:a9:32:4c:4f:d3:f4:55:ea:
                    c9:29:e5:f8:9c:52:ab:57:6f:c7:9e:4a:7b:66:cd:
                    0e:21:ea:57:5b:56:77:ae:8a:83:10:a1:c5:d9:a1:
                    6b:20:f5:0c:ce:3d:90:d2:9d:e1:30:fe:65:51:d0:
                    68:37:ac:5e:16:26:c1:24:77:ca:0d:d6:48:f4:f2:
                    13:21:ea:39:4d:c7:9a:06:5b:61:a0:a9:2d:18:66:
                    fe:73:a7:2e:08:7c:d0:da:02:5a:11:59:7b:e3:39:
                    72:5e:f6:91:b0:a5:1c:16:7b:37:9b:86:f5:96:82:
                    42:f4:10:0a:46:92:47:21:3c:13:ba:5f:66:e2:b4:
                    34:11:34:74:21:da:50:b8:20:11:41:a1:38:f2:ae:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A2:49:FD:05:6F:F0:D5:AC:6C:9B:18:18:C9:78:2D:73:99:3D:D0
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C89877C567C11EDA96287AAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:b8:4d:d6:27:e4:45:87:cb:91:f5:ed:85:5a:4d:16:c7:f4:
         f4:ab:e0:5f:05:f0:c0:de:f4:a8:b6:d4:41:b5:89:5d:96:7e:
         a3:ce:84:27:e8:1c:c1:9e:ad:58:42:b8:d9:9d:47:f5:ff:5b:
         cc:af:38:ce:d8:cf:d5:f5:9b:e5:83:8f:9b:38:8b:ba:c8:3a:
         04:43:1e:60:83:46:e0:b4:58:bc:06:80:62:b2:80:37:7c:e3:
         4b:f6:a1:ab:be:2d:3b:fb:3b:95:c7:7d:a9:83:b8:a0:28:df:
         c7:2d:bd:53:10:7f:78:dd:49:74:01:2e:5c:cd:89:ed:ce:1a:
         97:14:a2:34:2c:86:73:d3:a9:ad:72:c8:ad:84:17:b3:c4:39:
         5a:a2:dd:e8:f2:13:26:8c:08:2e:c5:22:72:7b:71:5a:03:b2:
         0b:f5:dc:21:01:69:2b:56:d4:3c:ff:22:73:af:5a:88:f1:1c:
         1b:44:c6:a7:54:8f:72:1d:c2:7c:43:8c:eb:99:a1:ca:db:f1:
         bf:3f:05:33:f1:77:7a:2b:a9:8b:ab:50:20:56:5a:c3:83:78:
         7e:9d:4f:9e:84:44:44:f5:c0:38:30:02:53:9d:37:d1:70:b5:
         10:0f:8d:b1:8d:5a:ec:fb:ef:9a:77:fd:d3:45:33:11:f6:8e:
         36:4b:7c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----