Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7C6A452C158E11EE93632E604AD9E6FC.roa
File:                     7C6A452C158E11EE93632E604AD9E6FC.roa (raw, json)
Hash identifier:          tzFAMt2ny3yizFFLSJbI6I0/yAT6ZBGCbuO0tCA3vN4=
Subject key identifier:   7F:B3:66:AA:99:75:DD:AC:0C:AB:9F:A3:01:AF:7F:E1:16:A4:9D:0D
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1019
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7C6A452C158E11EE93632E604AD9E6FC.roa
Signing time:             Wed 28 Jun 2023 08:33:41 +0000
ROA not before:           Wed 28 Jun 2023 08:33:37 +0000
ROA not after:            Sat 28 Jun 2025 08:33:37 +0000
asID:                     147176
IP address blocks:        154.16.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4121 (0x1019)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 28 08:33:37 2023 GMT
            Not After : Jun 28 08:33:37 2025 GMT
        Subject: CN=649bf065-0486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:8d:0b:20:0d:15:a9:b0:c2:3a:12:26:1c:
                    83:a1:6d:e0:2c:13:3d:16:02:86:2a:72:b5:74:c9:
                    f9:b4:78:da:15:46:16:82:50:cd:cb:c2:8a:df:0b:
                    6a:fc:60:75:b4:35:f0:9e:d3:92:55:64:5a:e5:a3:
                    53:51:a3:dc:19:21:cb:68:e0:80:62:8f:3f:2f:c9:
                    d9:dd:d5:97:68:73:a5:aa:85:53:8f:69:4c:12:39:
                    0d:38:ac:04:f3:cf:33:1a:f9:b3:a9:66:f4:80:11:
                    1d:72:86:b7:fa:58:fa:8d:ca:7c:dd:16:de:f0:b7:
                    c4:6e:99:ed:0e:87:17:c8:2c:7d:a9:ca:28:b4:06:
                    81:7d:f6:ee:3c:e9:39:cd:9c:e5:50:4c:24:f5:e1:
                    15:9e:f4:d9:41:1c:57:a2:07:27:2d:60:a5:85:a7:
                    dc:90:d0:54:d2:94:09:30:b1:a3:ed:6b:4f:91:58:
                    65:46:02:3f:20:95:da:2b:d5:31:70:3b:ba:3b:0a:
                    ee:41:a5:fb:e5:43:3d:79:66:69:75:01:66:f7:1b:
                    34:b8:2b:c6:dc:18:20:50:6e:41:2e:55:4f:64:4c:
                    9e:f3:e0:21:6e:05:6e:13:8d:00:e8:ee:df:db:cc:
                    bb:05:f1:11:22:76:a9:60:60:0d:c1:2c:26:22:07:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B3:66:AA:99:75:DD:AC:0C:AB:9F:A3:01:AF:7F:E1:16:A4:9D:0D
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7C6A452C158E11EE93632E604AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:aa:fa:99:4a:4e:44:cc:be:04:28:c5:ab:b3:16:e2:45:30:
         ff:10:5a:a7:d7:32:ee:ec:94:92:79:72:54:03:ac:82:21:b4:
         9a:61:fd:3f:68:30:22:1a:1b:17:75:be:1e:81:1a:80:41:57:
         eb:81:e4:27:bf:0c:33:0e:a9:d5:d5:3d:0e:71:9c:7a:9c:63:
         f7:81:0a:50:72:b1:a3:3c:9c:fe:a3:93:61:c7:cb:ae:7f:d1:
         9c:fd:85:0b:69:5f:19:2f:62:c9:cf:37:33:19:43:06:97:82:
         9b:ca:e3:67:29:e5:02:cd:54:fc:0a:82:5a:ac:7a:da:cf:a6:
         c3:a4:29:04:53:c8:36:98:c4:89:46:27:a7:6c:15:de:74:e1:
         12:6a:90:74:83:1e:1a:c8:a9:05:84:24:98:f7:78:87:a5:d4:
         06:ad:1c:dd:ff:16:6a:f5:23:11:93:80:18:f4:4e:2b:03:60:
         ba:bc:00:77:98:b8:43:95:04:06:29:d4:dc:f6:42:93:64:eb:
         e0:9c:d4:2d:d5:6b:df:9a:b9:44:12:98:47:2a:8a:0e:5f:1b:
         51:c8:c5:a0:c1:be:6d:58:87:e4:7c:df:55:ef:c3:9b:b1:1e:
         3e:bf:03:fb:d5:28:45:94:b5:c6:0e:b1:a6:f7:6f:15:dd:e7:
         14:99:27:28
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEBkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MjgwODMzMzdaFw0yNTA2MjgwODMzMzdaMBgxFjAU
BgNVBAMTDTY0OWJmMDY1LTA0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsSo0LIA0VqbDCOhImHIOhbeAsEz0WAoYqcrV0yfm0eNoVRhaCUM3Lworf
C2r8YHW0NfCe05JVZFrlo1NRo9wZIcto4IBijz8vydnd1Zdoc6WqhVOPaUwSOQ04
rATzzzMa+bOpZvSAER1yhrf6WPqNynzdFt7wt8Rume0OhxfILH2pyii0BoF99u48
6TnNnOVQTCT14RWe9NlBHFeiByctYKWFp9yQ0FTSlAkwsaPta0+RWGVGAj8gldor
1TFwO7o7Cu5BpfvlQz15Zml1AWb3GzS4K8bcGCBQbkEuVU9kTJ7z4CFuBW4TjQDo
7t/bzLsF8REidqlgYA3BLCYiB5AbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUf7Nm
qpl13awMq5+jAa9/4RaknQ0wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzdDNkE0NTJDMTU4RTExRUU5MzYzMkU2MDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDcwDQYJKoZIhvcNAQEL
BQADggEBADyq+plKTkTMvgQoxauzFuJFMP8QWqfXMu7slJJ5clQDrIIhtJph/T9o
MCIaGxd1vh6BGoBBV+uB5Ce/DDMOqdXVPQ5xnHqcY/eBClBysaM8nP6jk2HHy65/
0Zz9hQtpXxkvYsnPNzMZQwaXgpvK42cp5QLNVPwKglqsetrPpsOkKQRTyDaYxIlG
J6dsFd504RJqkHSDHhrIqQWEJJj3eIel1AatHN3/Fmr1IxGTgBj0TisDYLq8AHeY
uEOVBAYp1Nz2QpNk6+Cc1C3Va9+auUQSmEcqig5fG1HIxaDBvm1Yh+R831Xvw5ux
Hj6/A/vVKEWUtcYOsab3bxXd5xSZJyg=
-----END CERTIFICATE-----