Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5D1FFA3470A911ED99ECE2BAF1222468.roa
File:                     5D1FFA3470A911ED99ECE2BAF1222468.roa (raw, json)
Hash identifier:          NRuIlrkGy+zKtiv2qtFggToEKSthYFM/noG/HZLvDjk=
Subject key identifier:   FC:17:49:EF:B2:16:E6:91:21:82:28:6A:FE:98:B5:18:3B:40:1D:B3
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0AD8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5D1FFA3470A911ED99ECE2BAF1222468.roa
Signing time:             Wed 30 Nov 2022 12:20:23 +0000
ROA not before:           Wed 30 Nov 2022 12:20:19 +0000
ROA not after:            Sat 30 Nov 2024 12:20:19 +0000
asID:                     62240
IP address blocks:        154.16.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2776 (0xad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov 30 12:20:19 2022 GMT
            Not After : Nov 30 12:20:19 2024 GMT
        Subject: CN=63874a87-b348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:86:b7:18:6e:d8:62:0f:84:ef:28:39:30:
                    48:c4:e0:8d:0e:b2:6d:68:b2:1a:04:3e:2c:21:79:
                    1b:17:ba:9b:98:89:11:8e:00:f2:e6:4c:b4:3c:bf:
                    17:0d:dd:2d:60:9c:eb:ab:b8:a9:07:51:c0:e0:54:
                    e7:7a:32:8b:4a:32:d9:08:cb:57:d7:ca:3d:7e:c3:
                    3f:de:e5:f0:94:48:02:ec:bd:31:1a:04:22:67:67:
                    62:c9:92:d0:b8:37:cd:a0:7f:73:7f:c5:9e:4d:b3:
                    d1:12:e7:47:6e:69:b6:40:e8:0c:fe:ed:76:e7:de:
                    23:85:6e:ef:b2:e0:b5:81:b0:06:b1:6a:60:94:1f:
                    bd:e8:dc:1e:8e:15:9c:f8:34:3f:7f:a8:c7:66:c7:
                    d6:4e:cc:34:ad:f7:b5:8e:1f:1e:18:eb:95:29:42:
                    da:f1:ef:1a:37:70:38:7e:49:1b:30:0f:18:46:f0:
                    c9:1a:e6:0d:ae:00:c0:5e:39:8b:40:25:72:da:3b:
                    e2:5e:30:b7:35:da:cc:22:53:49:e0:ed:91:07:6b:
                    24:ce:c1:b8:6c:03:66:cc:88:62:58:1f:a1:80:c3:
                    01:d2:9b:24:bf:f6:8d:d0:56:3b:71:05:6b:3e:08:
                    80:96:26:ae:f6:12:09:c7:8b:ff:23:40:fb:13:95:
                    3d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:49:EF:B2:16:E6:91:21:82:28:6A:FE:98:B5:18:3B:40:1D:B3
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5D1FFA3470A911ED99ECE2BAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:80:da:f0:d7:75:cb:72:df:43:5a:d7:ab:76:7d:d4:58:d1:
         ae:19:b1:88:53:f3:db:29:1e:a8:5d:62:89:f6:20:75:4c:1e:
         e5:be:1c:46:42:11:e4:b9:0c:ad:32:e6:ff:46:b3:b1:1a:dc:
         59:16:7d:6c:a5:e2:a0:9c:a3:62:41:41:7f:27:5c:f4:ea:28:
         06:6c:90:75:25:2b:9f:88:bb:62:ad:07:33:70:ea:a1:82:a4:
         a8:d4:c7:62:de:48:15:96:c7:22:b5:1d:d8:fc:cd:02:e0:96:
         37:8e:9c:0d:d5:28:f4:0e:17:48:e9:c8:6f:fb:08:14:00:3c:
         0b:bb:08:07:b7:67:cc:69:ec:4a:2f:35:66:dd:29:42:39:32:
         d4:8a:69:9a:00:ca:54:1b:44:85:87:5d:cd:d7:7d:ca:b1:80:
         52:3c:f6:0e:7b:78:49:45:bc:63:b7:39:2f:f5:e4:4a:e9:1f:
         d0:6b:0a:c0:b1:30:b5:b2:b1:38:61:8d:19:63:98:b1:41:25:
         6b:ba:44:10:a9:94:6b:bd:91:c6:60:71:d2:da:cc:ad:65:b7:
         4a:c4:c5:01:90:b1:b3:bb:c1:90:04:16:69:80:32:e1:f2:fc:
         fb:d5:7e:9f:0b:95:3e:a8:cf:72:8e:ed:12:b8:f9:0b:20:6f:
         ac:d6:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----