Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/88964EEEDC1011ECBA6190B3F1222468.roa
File:                     88964EEEDC1011ECBA6190B3F1222468.roa (raw, json)
Hash identifier:          xYsX1ZYXoOFPYZ3nHlNFEuecnxQ21Ao/iTrlLirV6fo=
Subject key identifier:   70:A1:2C:7A:EE:4F:2C:21:EA:F0:0F:23:3D:4D:9B:FF:D9:7F:F8:43
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0868
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/88964EEEDC1011ECBA6190B3F1222468.roa
Signing time:             Wed 25 May 2022 09:53:31 +0000
ROA not before:           Wed 25 May 2022 09:53:28 +0000
ROA not after:            Sat 25 May 2024 09:53:28 +0000
asID:                     270884
IP address blocks:        154.16.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2152 (0x868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 25 09:53:28 2022 GMT
            Not After : May 25 09:53:28 2024 GMT
        Subject: CN=628dfc9b-b50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:e5:ae:9d:10:6e:79:48:6b:4c:2f:b3:6e:
                    f6:98:4b:ab:77:18:85:1b:12:ce:20:31:15:a4:fa:
                    da:57:3c:47:e6:0a:b1:04:65:21:95:ee:1e:77:4e:
                    58:5e:37:47:98:2b:fd:0d:32:c4:4a:82:13:54:ec:
                    fc:67:7f:fa:f1:8e:de:9b:17:40:27:8a:0b:ee:70:
                    22:cb:70:e0:63:c6:53:30:41:50:f8:aa:88:b1:2b:
                    7a:eb:24:2b:d9:a9:77:a0:90:f6:de:51:34:d7:db:
                    37:0a:0b:9f:98:9f:44:a2:35:bd:de:f3:3d:fa:6f:
                    26:04:f5:87:a2:24:76:42:6b:dc:00:0a:f3:55:96:
                    26:f5:72:88:b1:db:3f:7d:8f:a9:f4:9f:97:6b:ab:
                    dc:6d:6e:cb:0f:3a:cf:24:da:a7:ec:81:ef:cb:31:
                    01:ad:05:a7:25:51:b1:db:65:1c:7b:64:95:c3:6f:
                    07:0c:47:6e:d4:6e:40:6f:a3:fe:b7:34:46:80:74:
                    51:00:78:73:c0:04:33:7e:bc:ce:34:7d:98:3c:51:
                    d7:d0:be:1a:3d:01:b7:34:b7:55:8e:42:c0:bd:30:
                    a6:b8:8f:95:b6:1a:94:45:60:47:0e:09:d2:23:c0:
                    cd:37:31:09:c2:aa:df:e3:e7:e1:79:0a:cb:40:93:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A1:2C:7A:EE:4F:2C:21:EA:F0:0F:23:3D:4D:9B:FF:D9:7F:F8:43
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/88964EEEDC1011ECBA6190B3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:f6:d5:13:b8:12:50:3c:7f:2f:be:08:c6:68:25:f7:3b:94:
         86:a6:95:7e:2a:f1:51:c2:cb:2d:d8:1c:9f:ad:70:00:f7:7b:
         fa:74:27:55:95:88:ef:bd:1c:21:5b:8d:9d:64:1b:72:29:1e:
         53:a2:10:36:7e:e3:5a:a3:11:4a:b3:e4:fc:29:96:e9:fa:d8:
         c8:66:8d:ea:65:55:ca:42:74:6e:cd:6c:3c:0b:4c:70:c8:78:
         3b:83:eb:ac:5c:84:81:6d:ea:21:1f:32:2e:8d:73:37:71:7a:
         46:ac:cd:fb:f0:55:d3:c0:36:ac:99:32:dd:a2:c3:d6:0b:1c:
         91:bd:71:65:89:d7:17:9a:e5:3b:48:b7:00:0c:c4:4c:6d:43:
         39:93:cd:5d:b5:d7:de:79:6a:ef:d1:47:04:c4:c0:ed:bb:45:
         fd:f4:4f:68:4e:57:d8:e1:72:21:45:1e:68:05:e1:03:fb:44:
         7c:0d:16:02:5e:86:4b:d9:e3:31:2c:d3:80:d4:bb:7b:e8:bd:
         fe:df:90:16:bd:e5:f7:61:64:aa:84:a2:8e:bd:de:85:71:2e:
         d3:73:15:ef:5e:81:1a:82:58:63:4b:7a:c0:de:0b:d5:07:a8:
         34:72:5e:e9:b1:1d:90:89:94:70:b0:26:6a:3a:c6:80:4d:1f:
         f8:7c:54:73
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA1MjUwOTUzMjhaFw0yNDA1MjUwOTUzMjhaMBgxFjAU
BgNVBAMMDTYyOGRmYzliLWI1MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8/OWunRBueUhrTC+zbvaYS6t3GIUbEs4gMRWk+tpXPEfmCrEEZSGV7h53
TlheN0eYK/0NMsRKghNU7Pxnf/rxjt6bF0AnigvucCLLcOBjxlMwQVD4qoixK3rr
JCvZqXegkPbeUTTX2zcKC5+Yn0SiNb3e8z36byYE9YeiJHZCa9wACvNVlib1coix
2z99j6n0n5drq9xtbssPOs8k2qfsge/LMQGtBaclUbHbZRx7ZJXDbwcMR27UbkBv
o/63NEaAdFEAeHPABDN+vM40fZg8UdfQvho9Abc0t1WOQsC9MKa4j5W2GpRFYEcO
CdIjwM03MQnCqt/j5+F5CstAk5F3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcKEs
eu5PLCHq8A8jPU2b/9l/+EMwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzg4OTY0RUVFREMxMDExRUNCQTYxOTBCM0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEM0wDQYJKoZIhvcNAQEL
BQADggEBAFD21RO4ElA8fy++CMZoJfc7lIamlX4q8VHCyy3YHJ+tcAD3e/p0J1WV
iO+9HCFbjZ1kG3IpHlOiEDZ+41qjEUqz5Pwplun62MhmjeplVcpCdG7NbDwLTHDI
eDuD66xchIFt6iEfMi6NczdxekaszfvwVdPANqyZMt2iw9YLHJG9cWWJ1xea5TtI
twAMxExtQzmTzV211955au/RRwTEwO27Rf30T2hOV9jhciFFHmgF4QP7RHwNFgJe
hkvZ4zEs04DUu3vovf7fkBa95fdhZKqEoo693oVxLtNzFe9egRqCWGNLesDeC9UH
qDRyXumxHZCJlHCwJmo6xoBNH/h8VHM=
-----END CERTIFICATE-----