Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5D37FD2E3AA611EEBEF59C274AD9E6FC.roa
File:                     5D37FD2E3AA611EEBEF59C274AD9E6FC.roa (raw, json)
Hash identifier:          FtVTPP2F0CRWBOQJM6lGtttTtA2hxMppPJ2yIzoir3g=
Subject key identifier:   FA:A9:84:C3:78:71:8C:C7:B5:A4:63:AD:A7:08:5D:10:AD:0F:4D:5B
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1153
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5D37FD2E3AA611EEBEF59C274AD9E6FC.roa
Signing time:             Mon 14 Aug 2023 13:27:50 +0000
ROA not before:           Mon 14 Aug 2023 13:27:47 +0000
ROA not after:            Wed 13 Aug 2025 13:27:47 +0000
asID:                     398465
IP address blocks:        154.16.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4435 (0x1153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 14 13:27:47 2023 GMT
            Not After : Aug 13 13:27:47 2025 GMT
        Subject: CN=64da2bd6-ed9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:d1:eb:b2:06:76:a7:a6:81:04:07:69:c9:
                    0e:8c:78:d0:a3:e9:5a:bf:5b:19:12:9a:ce:d0:50:
                    33:90:6b:e7:8b:e0:2b:d3:05:3f:6b:4e:5e:3a:2e:
                    26:30:8a:0c:fc:e2:04:0e:2e:2d:d8:b5:dd:4f:d8:
                    e8:76:f2:bf:ff:41:fe:00:c0:ad:1f:07:60:3d:02:
                    cc:92:97:af:54:82:ba:05:5e:c3:0c:5f:9c:c6:d3:
                    59:92:0e:af:f9:86:fe:3b:79:24:f6:7d:f2:f7:bc:
                    e6:47:a8:a8:bd:15:ec:fe:2e:fb:16:a5:df:ce:01:
                    03:65:12:72:ac:ea:f5:ed:01:20:29:73:94:88:4c:
                    75:f9:a0:36:c6:f0:6c:cd:5e:15:ee:f5:fe:a8:19:
                    fd:6e:a0:f2:e4:82:bc:b4:6e:98:02:ec:08:c9:73:
                    2a:4a:3e:b2:cb:72:10:42:fd:69:c1:55:fb:41:b3:
                    8c:5f:27:b8:2d:1a:c2:f7:a6:73:02:d9:6d:a0:57:
                    79:1d:b8:9f:08:3b:6d:d9:e3:d9:db:8f:eb:1d:d0:
                    49:be:fa:79:ea:a8:35:6f:f2:44:71:98:13:b2:ad:
                    36:1a:90:08:bc:ec:36:48:d4:ec:2e:3d:a6:da:0b:
                    8a:6d:48:02:99:fc:08:6a:fa:69:2e:79:60:dd:6e:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A9:84:C3:78:71:8C:C7:B5:A4:63:AD:A7:08:5D:10:AD:0F:4D:5B
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5D37FD2E3AA611EEBEF59C274AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:3c:a7:4e:9e:6a:04:ee:e0:3c:fe:15:24:39:25:ab:57:67:
         2a:08:90:40:49:ec:b1:69:70:4c:37:3b:4f:1c:c0:ff:7a:52:
         05:1e:51:c9:1c:8a:28:a3:d3:f4:41:d7:e5:d1:d0:36:eb:1b:
         d3:fa:70:cc:2d:c1:5b:f2:bc:c2:18:56:bd:93:d4:42:29:92:
         77:9d:42:ec:8a:47:bd:ef:39:a0:33:22:e9:a7:b6:4b:39:0a:
         29:3f:74:c4:bc:29:ba:4a:16:90:4b:38:e0:9c:7b:0c:9c:ff:
         be:70:2f:72:17:f9:cd:22:ac:a5:38:d8:7a:c7:33:09:8e:17:
         5a:84:4c:4b:99:59:5d:5d:d2:0a:f4:41:aa:70:c4:87:01:b1:
         81:32:c7:fb:49:dc:b0:cc:7c:4f:27:dc:42:3a:a7:d3:01:e7:
         21:88:4e:f8:64:53:5c:55:f9:07:8a:83:d6:5e:92:ee:69:dc:
         12:d8:0f:99:2a:9d:2e:c5:57:f0:4f:fc:16:e9:78:c8:f4:9b:
         49:cb:9b:1a:c6:6c:5e:1e:0c:33:f7:65:dc:5d:18:f4:96:d3:
         63:cb:56:a3:1b:73:87:ad:b0:e9:04:20:41:1e:58:e9:0f:6e:
         c4:9c:7d:bb:8c:98:ed:db:ff:65:7b:93:36:5e:1b:d3:78:2f:
         0f:fd:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----