Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65832AC6B43711EDBBE0A098F1222468.roa
File:                     65832AC6B43711EDBBE0A098F1222468.roa (raw, json)
Hash identifier:          6DlNe6zjwVlFkOui5a4KPMke+T8jomnSlsckWzr2YEU=
Subject key identifier:   00:0E:D9:1F:E9:EF:01:3D:B1:93:5C:5C:89:00:1B:3E:79:F7:F8:36
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0BD7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65832AC6B43711EDBBE0A098F1222468.roa
Signing time:             Fri 24 Feb 2023 11:35:54 +0000
ROA not before:           Fri 24 Feb 2023 11:35:50 +0000
ROA not after:            Sat 22 Feb 2025 11:35:50 +0000
asID:                     61317
IP address blocks:        154.16.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3031 (0xbd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 24 11:35:50 2023 GMT
            Not After : Feb 22 11:35:50 2025 GMT
        Subject: CN=63f8a11a-1bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:35:08:ca:f1:f6:39:b2:64:f9:7e:35:ec:
                    43:0e:20:cd:b0:74:97:da:40:32:5d:fb:e5:6f:7e:
                    c9:2e:09:c4:05:51:3f:84:8a:46:81:4e:f9:c4:72:
                    e9:66:f6:28:09:49:18:18:56:08:e4:bf:e0:5a:ee:
                    47:0b:7a:b8:5b:0b:27:3f:d9:c8:b8:c1:f3:23:bc:
                    a2:fc:fd:e4:9b:e0:dc:c5:09:8f:33:c4:8a:1d:07:
                    e8:74:b4:de:7f:2c:d9:02:ff:eb:a7:56:6b:0d:6e:
                    66:75:32:09:64:73:ec:35:cd:86:e6:37:b8:cc:49:
                    4f:66:21:2a:6e:35:ce:6d:57:1d:72:2b:f8:69:eb:
                    11:08:a1:ee:af:c9:4e:d3:95:1a:8a:95:e7:17:95:
                    5e:f0:73:a4:cc:e1:9c:f3:40:92:0a:77:74:19:5b:
                    e2:3e:f6:3d:2a:79:2e:09:27:e5:b0:ca:a6:3b:35:
                    67:11:c3:d4:b9:b3:60:2a:2c:13:66:90:47:60:79:
                    ee:38:ef:30:cb:a6:99:ba:ac:65:a6:70:70:9f:70:
                    d5:b1:28:b7:ae:80:cc:5d:dc:f9:d2:b9:df:8e:17:
                    7b:a6:a9:e0:ae:42:b5:2e:f5:14:d4:e0:4c:15:e9:
                    ce:00:71:76:8d:07:c8:8b:8d:cd:cd:e1:43:74:e0:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:D9:1F:E9:EF:01:3D:B1:93:5C:5C:89:00:1B:3E:79:F7:F8:36
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65832AC6B43711EDBBE0A098F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:46:fa:62:1b:4e:57:20:88:95:1a:ec:d1:bb:d8:fd:fb:14:
         47:08:0f:66:ad:5f:50:e7:02:3b:11:f8:a7:06:c4:e0:f1:59:
         b9:9c:2d:c5:9b:ca:2e:e1:3a:51:85:8f:98:91:01:16:9e:b2:
         2a:65:57:01:fa:0b:52:40:48:31:00:74:c5:cf:56:84:4d:de:
         11:c8:c3:aa:5a:f3:a8:b5:a3:2b:4f:4c:3a:b5:5f:65:41:38:
         ce:57:de:22:2b:22:bc:2d:f4:5c:ea:32:f1:6c:ec:b9:2d:88:
         63:91:02:73:eb:24:72:fc:29:d7:c8:a5:23:33:ac:96:2d:e3:
         fd:db:7a:6c:72:59:b4:4f:9c:1f:93:42:38:ae:e1:0a:07:09:
         2b:de:00:16:9e:16:8b:42:84:d6:32:fe:75:c2:64:26:44:9b:
         c7:58:52:90:7e:78:83:09:c7:2d:ca:2a:ca:73:97:4e:30:f7:
         57:93:7b:06:c9:fa:2f:56:25:9b:73:3a:71:cf:32:49:00:37:
         42:0f:65:f3:02:1e:34:4a:56:dc:d4:7b:ec:47:9e:2d:3b:07:
         dc:92:1b:ac:5c:76:f9:17:e4:7b:19:d3:dd:b0:1f:ec:e2:82:
         fe:a3:49:95:bc:0e:51:32:c5:47:2f:61:15:e7:a4:70:3c:7e:
         27:08:7c:76
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjQxMTM1NTBaFw0yNTAyMjIxMTM1NTBaMBgxFjAU
BgNVBAMMDTYzZjhhMTFhLTFiZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDC3DUIyvH2ObJk+X417EMOIM2wdJfaQDJd++VvfskuCcQFUT+EikaBTvnE
culm9igJSRgYVgjkv+Ba7kcLerhbCyc/2ci4wfMjvKL8/eSb4NzFCY8zxIodB+h0
tN5/LNkC/+unVmsNbmZ1Mglkc+w1zYbmN7jMSU9mISpuNc5tVx1yK/hp6xEIoe6v
yU7TlRqKlecXlV7wc6TM4ZzzQJIKd3QZW+I+9j0qeS4JJ+WwyqY7NWcRw9S5s2Aq
LBNmkEdgee447zDLppm6rGWmcHCfcNWxKLeugMxd3PnSud+OF3umqeCuQrUu9RTU
4EwV6c4AcXaNB8iLjc3N4UN04GpTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAA7Z
H+nvAT2xk1xciQAbPnn3+DYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzY1ODMyQUM2QjQzNzExRURCQkUwQTA5OEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAAwDQYJKoZIhvcNAQEL
BQADggEBAMxG+mIbTlcgiJUa7NG72P37FEcID2atX1DnAjsR+KcGxODxWbmcLcWb
yi7hOlGFj5iRARaesiplVwH6C1JASDEAdMXPVoRN3hHIw6pa86i1oytPTDq1X2VB
OM5X3iIrIrwt9FzqMvFs7LktiGORAnPrJHL8KdfIpSMzrJYt4/3bemxyWbRPnB+T
Qjiu4QoHCSveABaeFotChNYy/nXCZCZEm8dYUpB+eIMJxy3KKspzl04w91eTewbJ
+i9WJZtzOnHPMkkAN0IPZfMCHjRKVtzUe+xHni07B9ySG6xcdvkX5HsZ092wH+zi
gv6jSZW8DlEyxUcvYRXnpHA8ficIfHY=
-----END CERTIFICATE-----