Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/97CD77AC68DC11EE9AFAFA884AD9E6FC.roa
File:                     97CD77AC68DC11EE9AFAFA884AD9E6FC.roa (raw, json)
Hash identifier:          yBbmxrIU7KEhty6iOiUx3v1HZrXmX4O+adDmZSo0Ivk=
Subject key identifier:   40:D7:63:62:F4:AA:1B:9B:8F:72:6B:A7:5C:37:00:7D:96:17:03:03
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       12C7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/97CD77AC68DC11EE9AFAFA884AD9E6FC.roa
Signing time:             Thu 12 Oct 2023 08:51:54 +0000
ROA not before:           Thu 12 Oct 2023 08:51:51 +0000
ROA not after:            Wed 27 Nov 2024 08:51:51 +0000
asID:                     213060
IP address blocks:        154.16.24.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4807 (0x12c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 12 08:51:51 2023 GMT
            Not After : Nov 27 08:51:51 2024 GMT
        Subject: CN=6527b3aa-8f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:4d:e6:51:44:32:1e:06:9d:a9:be:4b:70:
                    92:33:ad:7e:bd:6e:56:3e:82:9c:21:8f:2d:ca:ae:
                    23:24:12:09:be:57:47:8b:c3:fb:66:8c:13:3a:9e:
                    a5:ca:e7:97:c8:82:12:d7:97:16:b8:6f:c0:b0:5f:
                    a1:6f:fe:de:81:be:e1:9b:a4:3d:3b:b0:2a:e9:35:
                    91:f0:e1:c2:8e:aa:ad:7a:73:5d:9a:2a:6e:b4:1a:
                    ec:c3:e3:76:6e:f8:e2:ee:a2:de:a1:c0:5c:88:7d:
                    0e:09:1b:a1:30:53:39:b9:27:80:c4:0a:0c:70:2a:
                    f1:92:0a:f4:ae:06:95:06:5a:6e:77:ee:6a:25:ac:
                    fe:78:5a:4b:7a:5b:1b:fe:8d:d4:82:77:fd:44:c7:
                    66:0c:dd:7c:04:1b:d2:33:d1:51:ad:5a:90:17:e9:
                    c9:4b:d4:f3:82:eb:71:d8:3b:94:66:84:87:f1:c8:
                    f6:55:2b:84:3c:ca:80:52:04:97:cf:51:34:d3:64:
                    a7:fb:03:ea:8e:27:a2:4a:22:cb:ac:5d:73:12:8d:
                    8d:9e:e9:f6:a8:53:a9:18:2c:90:60:16:a0:bf:59:
                    ab:77:e9:da:2e:3c:ba:4b:e4:fb:5a:82:ab:66:74:
                    67:74:e3:9b:e5:90:9c:9d:08:45:c5:f0:fb:52:c0:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D7:63:62:F4:AA:1B:9B:8F:72:6B:A7:5C:37:00:7D:96:17:03:03
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/97CD77AC68DC11EE9AFAFA884AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:a8:58:0d:db:27:33:1f:fe:27:b4:eb:0d:e2:19:53:a9:8b:
         14:48:fb:2b:1c:51:04:28:8c:aa:9e:71:2f:6c:43:16:ef:ed:
         6e:4f:75:e2:0a:10:9f:c8:7c:fc:7c:38:67:48:c3:1b:0c:6b:
         74:c7:44:8e:9e:0b:eb:de:2c:80:59:25:80:1f:a9:81:3d:de:
         a4:0e:57:a0:eb:30:01:26:3d:af:a3:8c:80:6c:86:c6:be:11:
         90:5d:2c:f9:80:05:9c:89:f6:49:a5:e4:b7:9f:4d:06:e6:b9:
         aa:92:07:f9:1d:67:18:83:86:55:c7:55:95:b2:32:e1:f5:0e:
         1e:99:5f:8c:e1:ff:62:85:da:9b:42:52:27:13:68:b5:f8:20:
         91:fa:65:d3:7a:6f:c4:10:fb:f5:43:7a:75:3d:84:61:ff:b3:
         bc:c3:d1:ba:46:43:7c:f1:41:f1:24:cf:36:12:90:e0:35:e5:
         9e:c1:30:74:8d:82:7f:16:ac:ce:51:b6:15:2a:c2:9d:79:fc:
         7a:18:b6:ec:31:d2:59:35:c5:e8:c8:13:7e:a2:dc:37:72:cc:
         99:67:8e:e6:23:33:96:4c:23:bd:5a:ae:ac:82:c3:7c:f9:3c:
         92:6f:03:a8:08:24:57:b4:76:58:e8:7d:f2:e8:04:c3:d9:1e:
         fc:0a:bb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----