Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80D36B78FFD311EDB554A4814AD9E6FC.roa
File:                     80D36B78FFD311EDB554A4814AD9E6FC.roa (raw, json)
Hash identifier:          sF9aOVZxvp6UWXB1loYCI20fAcUJKmLrsDuo1ETE5sE=
Subject key identifier:   67:C3:21:6F:AB:CF:13:FC:D7:B8:53:E4:20:76:03:65:F0:44:19:CC
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0E37
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80D36B78FFD311EDB554A4814AD9E6FC.roa
Signing time:             Wed 31 May 2023 16:52:18 +0000
ROA not before:           Wed 31 May 2023 16:52:15 +0000
ROA not after:            Sat 31 May 2025 16:52:15 +0000
asID:                     834
IP address blocks:        154.16.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3639 (0xe37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 31 16:52:15 2023 GMT
            Not After : May 31 16:52:15 2025 GMT
        Subject: CN=64777b42-b034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:da:5c:4f:a6:61:4b:88:38:6b:c1:28:fc:
                    b8:54:fc:82:a5:8a:32:45:5e:eb:ca:2d:8a:ac:01:
                    e8:92:4e:14:2d:79:b2:44:94:e0:da:a6:21:f4:bf:
                    68:4d:c4:30:63:3d:38:8b:93:3e:09:87:a1:37:fd:
                    39:0c:b5:0c:9b:10:e5:49:28:f1:ca:9c:8a:5e:6d:
                    c9:6a:ef:f0:40:f6:31:44:22:49:92:52:02:31:4d:
                    73:0a:39:7f:5f:81:55:9f:03:c7:fc:df:53:77:22:
                    3e:30:0a:8d:13:d6:94:12:48:8f:51:19:de:93:2c:
                    fc:1c:ba:29:70:e7:b6:a4:28:f7:4f:85:a9:1d:79:
                    b5:44:cc:22:f3:7f:13:0e:3d:4c:a1:88:45:d9:6c:
                    ce:02:f9:6d:49:c3:5f:cf:ee:ce:41:6c:e7:0f:e3:
                    34:77:55:29:2f:86:94:2f:d7:81:fd:98:d8:71:8c:
                    7f:cf:11:6b:25:5d:49:d6:de:d5:9b:9d:4e:56:1d:
                    6a:92:41:d5:4c:c0:25:52:d8:04:99:52:d4:dd:c5:
                    bc:4e:fe:3e:c6:10:ad:28:05:e2:d4:77:65:ca:3f:
                    ac:f0:bb:44:c5:47:b9:72:ad:79:aa:16:1c:20:ba:
                    fd:68:a0:8a:2c:e9:d5:b9:59:e0:48:0e:d3:48:3d:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C3:21:6F:AB:CF:13:FC:D7:B8:53:E4:20:76:03:65:F0:44:19:CC
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80D36B78FFD311EDB554A4814AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:39:90:46:ae:90:34:9c:09:83:0b:bd:44:02:4d:26:a1:
         1d:74:b3:35:8b:b9:9a:86:23:d9:19:93:ef:74:ea:d3:a4:65:
         75:b1:a1:18:f2:50:d3:7e:89:1f:9e:75:36:21:31:b9:39:55:
         13:2e:82:15:43:cc:ac:fc:b8:3c:ea:14:d6:6a:bd:84:c7:e0:
         3f:a7:5c:d0:26:7f:d2:ad:b6:99:4f:ac:0d:30:31:31:fe:98:
         78:e1:1f:f7:91:51:c3:f7:44:71:22:64:29:66:54:66:e9:9a:
         a0:10:4e:bc:2e:4f:39:67:ab:6c:6d:39:54:34:4c:8e:c3:71:
         8b:f7:d6:b3:39:a4:7b:0f:2b:cc:01:a0:f2:39:a5:bd:40:1b:
         cb:ce:02:48:3e:19:d4:c7:f8:70:92:f4:cb:50:49:a9:4b:8c:
         2b:90:56:ac:b2:c6:99:78:9a:69:52:e7:50:f8:c6:f0:69:2f:
         f7:af:7a:06:b6:f8:52:7d:84:10:20:0a:f5:6b:8d:22:c9:36:
         0d:a0:8e:e3:1a:48:52:1c:a7:d2:a2:5f:33:ff:e8:eb:c3:06:
         ae:ea:dd:e7:32:cc:5e:53:50:9f:23:b4:2a:4e:42:7f:20:4e:
         40:e1:74:ec:2d:d5:34:0a:c5:b4:db:50:46:13:0f:e9:33:46:
         b4:65:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----