Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/899C9F96212911EEA35CB0324AD9E6FC.roa
File:                     899C9F96212911EEA35CB0324AD9E6FC.roa (raw, json)
Hash identifier:          F/Vca+6gwVaEMi9/MjhbYR0tvrgFB3MLo3lGpFYA4yI=
Subject key identifier:   AB:63:79:3D:0C:E9:EA:BA:56:B0:E2:92:F4:B5:B9:65:68:3A:76:E1
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       107F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/899C9F96212911EEA35CB0324AD9E6FC.roa
Signing time:             Thu 13 Jul 2023 03:01:18 +0000
ROA not before:           Thu 13 Jul 2023 03:01:15 +0000
ROA not after:            Sun 13 Jul 2025 03:01:15 +0000
asID:                     834
IP address blocks:        154.16.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4223 (0x107f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jul 13 03:01:15 2023 GMT
            Not After : Jul 13 03:01:15 2025 GMT
        Subject: CN=64af68fe-0182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:89:ae:88:ac:4b:4e:e1:9b:df:a4:2b:1f:
                    87:83:9f:85:f3:34:10:09:4c:c1:30:90:f5:11:cc:
                    0f:95:92:ff:35:a7:5c:d3:d7:6a:65:6d:2d:56:a7:
                    68:17:19:5a:54:30:50:b2:5a:d5:f2:f7:b4:f6:ce:
                    6d:07:17:9c:2b:ea:34:25:e3:cc:56:62:c0:2f:3c:
                    c0:14:2c:18:cf:21:92:a0:03:99:f4:5b:e1:15:be:
                    a6:b0:1e:5c:f9:3f:c8:ca:88:5f:3f:03:14:60:a4:
                    93:25:91:f9:5f:ed:e3:b4:56:09:8f:50:42:23:a6:
                    4c:8b:4f:1b:4b:d0:66:77:cb:20:e7:97:67:da:87:
                    bd:13:2f:91:56:13:d4:69:62:cc:e0:72:07:82:9a:
                    d0:14:60:a4:0f:08:47:28:47:d6:ab:74:2e:f5:59:
                    5a:e3:60:69:bd:90:43:85:0d:96:11:9d:71:9c:90:
                    b8:b1:c7:1c:5f:49:f5:8c:0a:d0:14:74:65:f0:f3:
                    f9:61:b6:97:7b:b2:5b:43:5f:4d:07:a4:fb:30:24:
                    12:3c:eb:25:94:b5:ad:3b:6b:6c:4c:32:72:07:ff:
                    3b:ef:f8:c5:87:19:94:e0:8d:10:6c:b5:8d:94:88:
                    a0:5a:28:b7:96:30:fa:f9:19:15:f5:27:f5:48:3f:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:63:79:3D:0C:E9:EA:BA:56:B0:E2:92:F4:B5:B9:65:68:3A:76:E1
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/899C9F96212911EEA35CB0324AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b0:97:c4:70:08:76:c1:45:b5:d0:dc:ec:ca:b4:38:f4:ce:
         a7:e1:2a:d1:2c:02:0c:6a:6c:33:a0:8f:e8:25:0c:a9:e9:86:
         7b:e0:7b:62:46:2c:36:05:6b:8b:72:34:7d:15:12:05:69:38:
         d3:6a:21:cf:ed:74:59:c1:4e:0b:db:44:24:cf:a3:79:6c:83:
         3b:fd:8e:4a:af:5b:12:74:fc:0b:ea:bf:79:5f:ca:eb:9a:cf:
         ab:5e:b3:30:fe:ab:9d:52:70:2c:58:9e:fe:f6:f1:6b:3c:2f:
         4d:7f:7b:f0:bd:3c:91:50:d6:50:82:c6:15:14:34:71:64:57:
         44:de:9d:9b:73:c8:ab:55:86:fe:05:ae:88:6f:95:74:0b:43:
         b9:1b:68:66:fc:07:1a:b2:bf:11:76:42:71:c2:c7:fc:67:2f:
         a8:e0:6a:0e:f5:17:0f:b4:8f:ac:d7:55:dd:3d:6f:f1:fa:ff:
         8f:88:7d:5e:89:b9:6c:6f:93:c4:d7:d1:35:96:90:af:0b:5c:
         b1:72:e3:88:de:1b:34:9c:37:4e:a8:a9:0f:58:98:38:7e:5a:
         f8:70:c2:1e:b5:5e:86:9c:75:da:01:61:1a:c5:e0:a8:d9:8a:
         09:a4:77:1f:42:ae:02:79:3c:fd:07:2b:6f:d0:2c:df:32:5a:
         4f:19:7b:04
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEH8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA3MTMwMzAxMTVaFw0yNTA3MTMwMzAxMTVaMBgxFjAU
BgNVBAMTDTY0YWY2OGZlLTAxODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDApImuiKxLTuGb36QrH4eDn4XzNBAJTMEwkPURzA+Vkv81p1zT12plbS1W
p2gXGVpUMFCyWtXy97T2zm0HF5wr6jQl48xWYsAvPMAULBjPIZKgA5n0W+EVvqaw
Hlz5P8jKiF8/AxRgpJMlkflf7eO0VgmPUEIjpkyLTxtL0GZ3yyDnl2fah70TL5FW
E9RpYszgcgeCmtAUYKQPCEcoR9ardC71WVrjYGm9kEOFDZYRnXGckLixxxxfSfWM
CtAUdGXw8/lhtpd7sltDX00HpPswJBI86yWUta07a2xMMnIH/zvv+MWHGZTgjRBs
tY2UiKBaKLeWMPr5GRX1J/VIPwqdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUq2N5
PQzp6rpWsOKS9LW5ZWg6duEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzg5OUM5Rjk2MjEyOTExRUVBMzVDQjAzMjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOEwDQYJKoZIhvcNAQEL
BQADggEBABOwl8RwCHbBRbXQ3OzKtDj0zqfhKtEsAgxqbDOgj+glDKnphnvge2JG
LDYFa4tyNH0VEgVpONNqIc/tdFnBTgvbRCTPo3lsgzv9jkqvWxJ0/Avqv3lfyuua
z6teszD+q51ScCxYnv728Ws8L01/e/C9PJFQ1lCCxhUUNHFkV0TenZtzyKtVhv4F
rohvlXQLQ7kbaGb8BxqyvxF2QnHCx/xnL6jgag71Fw+0j6zXVd09b/H6/4+IfV6J
uWxvk8TX0TWWkK8LXLFy44jeGzScN06oqQ9YmDh+Wvhwwh61XoacddoBYRrF4KjZ
igmkdx9CrgJ5PP0HK2/QLN8yWk8ZewQ=
-----END CERTIFICATE-----