Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5C1A10DAADED11ED8FD2EBB0F1222468.roa
File:                     5C1A10DAADED11ED8FD2EBB0F1222468.roa (raw, json)
Hash identifier:          ePAlpmd+1Z29PTwlVqcccQK4gOmiseh81kUu2Ua8Owc=
Subject key identifier:   13:87:D7:CD:F5:21:95:41:8C:39:6D:C0:16:FF:56:A1:F1:77:69:8C
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0BBA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5C1A10DAADED11ED8FD2EBB0F1222468.roa
Signing time:             Thu 16 Feb 2023 11:30:48 +0000
ROA not before:           Thu 16 Feb 2023 11:30:43 +0000
ROA not after:            Sun 16 Feb 2025 11:30:43 +0000
asID:                     147176
IP address blocks:        154.16.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3002 (0xbba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 16 11:30:43 2023 GMT
            Not After : Feb 16 11:30:43 2025 GMT
        Subject: CN=63ee13e8-b0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:6f:77:a8:a1:03:f4:ab:3c:04:2c:cb:13:
                    a2:ae:b7:13:04:54:4b:7e:6a:a2:f0:0f:0c:87:36:
                    52:bf:ab:5f:8c:27:ed:10:2b:70:38:d3:4b:5c:f0:
                    4d:ab:b3:b1:6f:20:12:ef:35:79:68:f9:b8:07:92:
                    08:b2:dc:4d:da:d4:17:20:23:32:f6:73:b0:dc:e1:
                    c7:af:17:54:c2:1b:4c:b5:a4:4a:1f:ad:0b:22:06:
                    03:7a:9a:7d:82:47:16:c7:4b:7a:18:ac:f2:d0:79:
                    2c:1d:67:8b:16:22:8c:be:c5:06:36:0f:e4:d4:41:
                    6e:94:57:37:df:b6:54:cc:a1:cf:70:c1:0f:44:52:
                    92:eb:ea:0e:1a:28:90:a6:d1:94:b5:a8:a8:38:20:
                    80:41:de:63:41:9b:6a:ae:4f:ea:5c:52:37:11:32:
                    9e:48:3e:86:45:cb:18:40:5a:a2:95:da:43:9e:26:
                    7a:98:2b:29:9e:b0:83:3e:e5:fc:12:62:b8:6f:a1:
                    d4:db:4c:22:18:0f:c9:73:1b:63:d2:07:70:89:54:
                    f3:18:9c:ae:36:88:83:5d:6d:09:b2:b2:aa:5f:53:
                    35:cc:de:37:32:f1:0f:98:22:63:02:49:38:b4:73:
                    f5:cf:b0:01:b7:4d:65:5a:99:5b:1f:b1:a1:ae:7d:
                    9c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:87:D7:CD:F5:21:95:41:8C:39:6D:C0:16:FF:56:A1:F1:77:69:8C
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5C1A10DAADED11ED8FD2EBB0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ba:6d:12:0f:3e:d5:a6:a6:36:e9:db:93:da:b0:11:37:6b:
         aa:b5:0f:f4:c4:5e:0f:ca:bc:f7:8a:19:da:1d:47:78:4d:1f:
         2a:d6:02:a8:0f:80:ae:fe:b1:25:73:35:19:7e:90:b6:d7:ce:
         7a:2b:e5:4d:6b:4a:fd:bb:14:fb:2a:1e:cf:c9:31:9f:3f:ba:
         7b:41:06:83:ff:77:8d:a8:a9:43:db:91:2e:20:06:77:0e:1e:
         3d:f8:51:00:bb:8c:37:3c:2a:50:2a:14:03:01:32:59:c0:d0:
         ef:b0:81:18:1a:05:64:6e:7f:9c:58:a8:b4:ff:c8:e9:ff:33:
         14:6e:27:3a:51:bc:1e:c8:ed:ea:0d:18:a6:a2:16:96:d6:8c:
         b1:9b:75:36:56:d9:d3:67:7e:50:14:52:06:9b:06:d8:b4:99:
         73:2e:50:9f:0e:31:cd:6c:8e:c3:85:8d:42:20:4d:53:f2:61:
         b3:cc:ea:3d:e8:89:9d:6e:43:9a:9d:3b:fe:34:92:51:a3:5a:
         ec:55:54:53:1b:4a:45:b8:37:88:25:22:fa:b4:da:56:43:2e:
         c0:3c:a5:09:4a:48:39:d3:7d:02:7e:10:ab:7b:17:1b:1d:5f:
         16:db:90:48:b1:4d:1f:42:e4:58:14:66:68:69:b8:bf:e0:68:
         89:09:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----