Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6BD231CCB43911EDAD6EC99EF1222468.roa
File:                     6BD231CCB43911EDAD6EC99EF1222468.roa (raw, json)
Hash identifier:          InCY4AfuRR7oDLD3N2x3xwimj7JOrlIIfMGdKwGHpvM=
Subject key identifier:   FD:B2:6D:35:BA:38:EB:A6:5C:A3:15:AF:98:9A:DB:F8:25:5F:02:EA
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0BEF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6BD231CCB43911EDAD6EC99EF1222468.roa
Signing time:             Fri 24 Feb 2023 11:50:23 +0000
ROA not before:           Fri 24 Feb 2023 11:50:20 +0000
ROA not after:            Sat 22 Feb 2025 11:50:20 +0000
asID:                     61317
IP address blocks:        154.16.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3055 (0xbef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 24 11:50:20 2023 GMT
            Not After : Feb 22 11:50:20 2025 GMT
        Subject: CN=63f8a47f-bd19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:3e:58:ef:76:18:e8:5a:ce:9b:81:1d:ee:
                    00:ce:19:ef:fc:5d:1b:e6:e0:2f:06:57:71:f4:5a:
                    dd:a0:40:bc:b7:03:27:5a:1a:1a:1f:fd:b6:ef:ea:
                    07:de:37:c3:97:8f:31:d7:65:ad:65:d7:06:9a:a4:
                    3f:95:65:92:f3:c3:8b:53:df:60:98:73:60:78:b6:
                    c0:9d:cb:da:ff:6d:ce:a7:42:e8:bb:35:c3:cc:ca:
                    61:91:45:5d:d6:e6:61:b8:1f:f7:30:e1:1b:5f:ad:
                    c1:77:d5:40:ce:b3:c4:16:c8:f9:89:ce:67:6b:46:
                    21:53:bb:28:89:b1:f7:4c:32:f4:a2:4c:2c:27:10:
                    af:91:7e:ef:54:f5:1c:75:91:33:c6:de:13:0f:19:
                    79:7e:99:32:9d:90:2d:94:04:42:d7:54:3f:a0:ec:
                    22:3f:08:0f:41:8a:5e:97:46:62:ca:ac:f8:14:1e:
                    bb:0b:d9:6a:38:17:ac:1c:fc:45:32:5b:ff:93:5e:
                    37:67:19:62:c3:b1:1e:9f:d5:15:51:7c:90:82:bf:
                    3a:bd:b2:a4:ff:af:19:6f:15:32:c5:d2:44:d6:52:
                    07:19:2d:1d:66:e6:06:e3:aa:bf:2f:ea:57:04:cb:
                    bf:19:bb:39:e1:b2:77:8c:1f:79:5d:7f:a5:06:27:
                    25:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B2:6D:35:BA:38:EB:A6:5C:A3:15:AF:98:9A:DB:F8:25:5F:02:EA
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6BD231CCB43911EDAD6EC99EF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:dc:59:34:0c:85:af:af:bb:db:87:5f:f3:b1:88:b8:90:07:
         a8:ee:19:e4:80:a8:d9:e8:e0:a4:ba:55:40:19:76:a9:fb:d8:
         b4:ab:79:ae:56:ab:65:fd:40:a3:e1:82:20:58:41:07:0a:c6:
         48:a5:08:9f:86:e1:d6:1c:56:21:a0:f2:11:e3:1c:87:16:d3:
         ac:34:54:5b:96:de:8a:ef:ec:0a:3b:28:f0:49:9c:0a:f8:ac:
         c4:a7:68:7c:75:92:16:31:0c:19:32:13:35:e8:ac:58:92:5d:
         06:4c:59:b7:5e:8d:d9:9b:e7:95:92:7b:9d:cb:ae:f0:17:e0:
         e2:c9:4c:f6:d1:29:6f:ed:c2:d0:25:e3:e0:95:86:56:1a:df:
         c6:eb:10:76:22:37:0b:95:4e:b8:f7:98:2e:13:b7:c4:f7:7c:
         7c:84:d1:37:97:ea:38:03:54:af:1f:cf:fb:2f:3c:63:4f:49:
         4b:13:30:d9:3b:ff:ee:5e:5f:96:c6:3c:dc:9d:49:c6:5d:9f:
         04:6d:20:e9:4d:86:4f:83:ca:9a:e3:cd:c7:47:f7:37:fc:42:
         02:b4:9d:fa:5b:4f:54:36:83:b5:6a:24:46:ec:f9:a7:ce:c1:
         02:9b:55:94:8a:36:87:b3:9c:47:1e:4a:75:9a:3a:e3:6c:ab:
         d6:08:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----