Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8B0F326409BD11ED899B6199F1222468.roa
File:                     8B0F326409BD11ED899B6199F1222468.roa (raw, json)
Hash identifier:          e+uVKLSjAEpuRdpR2pF/+rr/oaiZDiT0LbQpsIWf21o=
Subject key identifier:   15:E9:F7:39:10:7D:5E:3D:58:6A:5F:DF:C6:55:01:93:CA:0F:CB:C2
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       08ED
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8B0F326409BD11ED899B6199F1222468.roa
Signing time:             Fri 22 Jul 2022 12:55:21 +0000
ROA not before:           Fri 22 Jul 2022 12:55:17 +0000
ROA not after:            Mon 22 Jul 2024 12:55:17 +0000
asID:                     212238
IP address blocks:        154.16.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285 (0x8ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jul 22 12:55:17 2022 GMT
            Not After : Jul 22 12:55:17 2024 GMT
        Subject: CN=62da9e38-ec91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5d:cb:63:09:f2:49:c5:5f:b1:c4:15:bc:6f:
                    62:fc:54:20:a3:be:dc:cc:b3:8b:7d:d6:76:93:ae:
                    f6:ec:6a:85:61:63:d8:fe:93:e6:24:02:71:79:80:
                    87:1c:d7:b9:c6:f6:1d:51:bd:ba:0f:7d:0a:7e:ed:
                    e1:39:72:64:25:bc:34:62:a6:49:61:98:14:64:b0:
                    b0:65:dc:b2:37:b0:57:60:54:39:56:90:89:bb:79:
                    4c:16:e4:bd:4b:e1:49:25:7b:bd:f9:28:f5:0d:c2:
                    4a:a8:98:bf:7c:17:b1:7c:0e:2f:02:e6:38:6b:ef:
                    06:81:4a:4e:ed:67:f5:64:e2:26:6a:d6:8f:04:d8:
                    57:88:56:3d:cd:28:56:91:cf:b6:94:5c:0d:a0:0b:
                    60:3b:54:43:0e:16:ff:17:85:a3:52:a3:ba:67:93:
                    21:ec:2a:86:c8:11:9f:f3:40:ba:77:a7:49:85:e9:
                    c7:5d:c0:4e:c7:10:2f:8e:05:e5:81:2d:4c:82:90:
                    80:5f:4b:a7:47:1b:e2:b0:6b:3c:ad:f9:55:53:92:
                    78:05:ad:e4:48:2b:67:19:92:2d:6e:1e:17:63:31:
                    dc:b6:b4:1d:0a:a8:0b:ea:f0:68:0e:54:ab:31:83:
                    6e:42:41:09:df:4b:97:ac:b6:9b:00:4b:45:7d:bf:
                    f7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E9:F7:39:10:7D:5E:3D:58:6A:5F:DF:C6:55:01:93:CA:0F:CB:C2
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8B0F326409BD11ED899B6199F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:f4:c5:d3:b2:17:7f:c4:f0:38:df:ba:86:91:5d:49:06:d5:
         05:28:e1:7d:50:38:d8:9c:b0:8b:ed:08:d1:66:86:4d:3f:6b:
         5f:63:62:5d:8d:44:cc:80:d8:b3:c8:0b:38:86:73:ee:23:95:
         a7:4f:1a:9b:68:19:56:a4:49:65:d0:77:21:d6:b5:c2:05:82:
         30:76:1c:5e:6a:70:7f:9b:65:13:da:1e:7e:f9:58:8a:2a:c6:
         b6:b8:ef:d7:22:80:c3:f7:3f:65:14:9e:bd:40:34:55:46:ca:
         84:e2:7a:2e:21:7a:7d:e4:9f:d5:06:39:14:c0:94:ea:8c:07:
         68:cc:f0:4b:23:d2:91:ca:8d:6e:0c:3d:b2:ed:7c:ce:37:9e:
         9b:d6:f5:ea:29:39:04:74:a3:68:c8:90:65:1e:26:5c:a0:91:
         72:01:95:6a:29:38:31:ed:ef:4a:5c:e9:bc:09:38:23:a2:95:
         a9:e7:75:f6:e4:93:7d:b4:08:ca:39:21:9f:57:e8:01:cb:b0:
         52:6d:25:36:9f:c1:c2:74:72:c3:6a:8a:56:93:39:94:05:65:
         57:8e:c4:8b:7b:26:20:f2:ca:29:98:73:1b:ad:eb:e1:65:fe:
         85:ea:44:72:cb:8f:6a:f0:bd:b2:96:2e:8e:c7:e7:62:3f:d7:
         ec:21:d3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----