Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/635C65CAB69211EDA2BD29B8F1222468.roa
File:                     635C65CAB69211EDA2BD29B8F1222468.roa (raw, json)
Hash identifier:          7M+AypltJPU7gTmnY8+eE7mBFyE1FWfd0XHBUVStqMA=
Subject key identifier:   82:7C:89:F0:F7:B5:25:2C:49:CA:85:24:70:93:EC:36:AA:88:EF:76
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0C4A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/635C65CAB69211EDA2BD29B8F1222468.roa
Signing time:             Mon 27 Feb 2023 11:32:17 +0000
ROA not before:           Mon 27 Feb 2023 11:32:13 +0000
ROA not after:            Thu 27 Feb 2025 11:32:13 +0000
asID:                     61317
IP address blocks:        154.16.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3146 (0xc4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 27 11:32:13 2023 GMT
            Not After : Feb 27 11:32:13 2025 GMT
        Subject: CN=63fc94c1-15c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:4f:62:2d:bd:50:ed:e7:58:8d:93:51:e4:
                    02:13:78:9b:19:6e:45:76:47:4b:cb:b1:48:c3:a1:
                    b4:68:ba:88:f5:57:15:5b:7d:a6:af:22:15:5e:6c:
                    70:14:07:83:a4:81:2b:34:f7:9b:66:00:2f:3d:05:
                    1d:07:02:91:1b:26:d1:0b:67:10:9a:a9:5d:1b:54:
                    04:1c:9b:a1:6c:fe:85:63:39:bf:f8:68:34:6e:a6:
                    11:7f:1c:4f:37:0d:4c:65:09:96:82:10:97:9b:c2:
                    ae:49:df:bf:20:79:27:b6:89:37:7f:1b:37:9e:ef:
                    3a:7a:35:cf:95:19:a4:8c:1f:3c:10:31:f6:ab:67:
                    b0:73:80:19:7e:53:59:6c:31:eb:f7:ef:cf:c9:4c:
                    eb:77:fe:69:ac:7d:21:e4:89:af:69:0a:f5:5b:14:
                    47:c8:30:9a:9b:90:03:c9:02:bb:f0:c3:15:3f:de:
                    e6:f3:24:1d:f8:59:b6:b3:55:2f:9f:7f:e7:e9:e5:
                    de:a0:c7:7a:45:04:a5:eb:59:68:5a:cd:dc:df:e0:
                    14:64:ad:52:c3:57:65:5f:60:49:bd:ab:db:0e:1c:
                    1f:d2:51:ab:32:fc:39:ad:e9:9b:72:41:d0:a7:b9:
                    d3:29:4e:84:85:bb:e2:32:3a:fc:3c:95:6d:5f:28:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7C:89:F0:F7:B5:25:2C:49:CA:85:24:70:93:EC:36:AA:88:EF:76
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/635C65CAB69211EDA2BD29B8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:87:49:8e:f6:f0:24:85:25:93:29:6c:b8:4a:08:ed:e9:8a:
         fb:5e:4c:08:0d:c6:6f:c2:5d:e9:15:1c:6b:ac:64:d0:83:13:
         8c:49:4a:3e:ff:a1:19:25:63:75:8b:05:fa:c4:45:1d:c7:bc:
         49:fe:96:8d:83:18:21:67:4a:53:77:33:10:28:b7:ff:7c:ac:
         35:24:56:7c:56:97:7d:86:70:ed:86:c7:1c:f0:7d:61:a7:5a:
         ec:0c:49:69:9c:f5:1a:72:ad:04:e4:38:05:51:e1:0a:a1:7e:
         5d:a6:90:8b:e6:f1:5e:50:35:5c:4c:30:c9:68:5a:4a:7d:dc:
         af:ff:cd:af:ad:12:e0:61:c6:6d:f0:f3:ac:78:e9:97:df:52:
         a1:3e:2d:da:53:8b:24:b9:ce:25:3f:8c:d9:a9:b5:10:a0:7f:
         9a:1b:a1:e7:27:29:c9:a3:ca:69:49:3b:16:ec:ac:88:80:a3:
         d6:c4:78:33:78:f5:64:62:86:49:b7:cf:26:2b:73:71:be:0e:
         fb:aa:2f:dc:73:7a:6d:94:18:29:92:1b:c0:34:ee:2e:c2:a9:
         b8:e8:91:9a:d3:1e:44:05:b1:0d:07:ca:80:2e:77:0d:90:e7:
         90:09:ce:78:f3:7e:8b:69:f3:91:b8:b8:d5:4a:fd:75:3f:47:
         82:2f:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----