Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/92BCF122D9EC11ED98B7540F306D8C1D.roa
File:                     92BCF122D9EC11ED98B7540F306D8C1D.roa (raw, json)
Hash identifier:          eqSP4paFDgG9YrrNf16mD0kNuBfFqXUK1/OknDsAUiI=
Subject key identifier:   0F:73:DA:94:4D:21:4F:6C:F8:56:49:EA:BF:D2:1B:87:CB:BD:28:A7
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0D5B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/92BCF122D9EC11ED98B7540F306D8C1D.roa
Signing time:             Thu 13 Apr 2023 11:16:02 +0000
ROA not before:           Thu 13 Apr 2023 11:15:58 +0000
ROA not after:            Sat 12 Apr 2025 11:15:58 +0000
asID:                     834
IP address blocks:        154.16.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3419 (0xd5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Apr 13 11:15:58 2023 GMT
            Not After : Apr 12 11:15:58 2025 GMT
        Subject: CN=6437e471-b4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:3b:84:41:8f:f7:3b:fa:e8:ab:58:17:0f:
                    17:ee:91:65:64:09:df:49:cd:9e:1e:ce:1e:f8:dc:
                    de:33:4a:df:81:db:d3:23:82:0b:3e:da:98:5d:88:
                    8e:04:80:30:fe:de:85:29:2f:b0:36:b7:07:e7:f9:
                    73:bf:ec:e8:c8:a7:aa:38:dd:5c:4f:9f:fe:9c:0d:
                    4c:93:63:03:a4:a4:78:6e:15:a5:76:8f:15:ef:ca:
                    fc:22:c5:e8:20:9c:14:61:d8:c6:5e:28:4d:7f:82:
                    0a:6d:6c:f3:ed:85:14:49:74:88:5d:0a:b8:01:9e:
                    80:77:4a:73:f4:d5:59:3f:6e:1f:2f:0f:c4:a4:20:
                    97:34:47:42:3a:61:62:61:ea:9f:db:80:fa:02:a1:
                    94:3e:1a:0f:07:90:12:d0:96:ac:4c:4a:53:02:01:
                    f5:39:28:fd:c4:bd:9f:d6:22:27:2b:8a:a9:dd:9d:
                    b0:89:d7:e8:83:45:ab:37:bf:db:5e:56:ee:07:46:
                    a9:0b:58:b0:f5:33:ed:4e:b4:8d:76:85:75:7d:cd:
                    3c:e6:3b:38:bd:07:13:f1:9c:37:a1:f0:7a:3d:b8:
                    0b:f8:f1:c3:1d:e3:1c:6b:e8:95:8d:77:70:57:21:
                    80:7c:6d:0c:ed:10:51:71:2a:4e:9d:4e:78:05:94:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:73:DA:94:4D:21:4F:6C:F8:56:49:EA:BF:D2:1B:87:CB:BD:28:A7
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/92BCF122D9EC11ED98B7540F306D8C1D.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c0:e8:26:d6:a6:34:77:d1:21:59:40:25:9c:7d:0b:ee:7c:
         09:ac:e7:10:07:12:b1:f4:b3:ad:e2:6c:df:23:54:e8:90:72:
         44:2f:2b:c1:6d:94:2b:7f:2d:90:cb:1b:9e:23:51:fc:a6:56:
         bc:b4:8a:fd:66:9b:6a:b5:4e:de:44:08:7d:3e:e8:eb:7d:cf:
         86:f1:69:a4:24:d4:82:db:f1:86:7b:2b:6e:6c:f1:5e:c2:8a:
         72:8f:31:6e:57:c2:90:cf:14:74:c2:67:af:3b:2c:44:99:2d:
         d5:cc:ce:41:2c:6b:c1:47:e4:14:97:b9:c7:a0:5e:62:3f:3d:
         c1:f5:24:70:1a:29:f9:41:19:82:0e:4c:39:f5:ed:84:71:16:
         ee:1f:de:7c:14:f5:d2:62:2b:dc:a6:42:89:3b:16:b4:b6:e4:
         a7:cb:1a:75:fb:5a:9e:3a:3e:b4:10:f1:64:38:76:1c:22:12:
         fb:16:3a:6a:74:06:6e:e5:d3:40:c0:ee:d6:a1:f6:97:51:38:
         18:34:b0:63:20:92:da:4e:9e:6b:1e:f5:86:68:42:ce:f1:c4:
         5a:50:9b:6f:f3:c3:9c:82:c8:08:b0:c8:cc:d1:6d:0d:36:1c:
         a4:88:e2:3b:ca:a5:64:da:1b:62:2a:ee:2f:55:58:95:f6:d2:
         36:e1:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----