Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9ED1E88821DA11EE86643E3F4AD9E6FC.roa
File:                     9ED1E88821DA11EE86643E3F4AD9E6FC.roa (raw, json)
Hash identifier:          wvGnb+3wC/WSN7tgadAtN2j6Pf65fB03Ns0J7fRKABs=
Subject key identifier:   9E:09:FB:FC:99:01:9C:39:D3:C9:10:4F:DC:74:3D:8C:79:A6:A3:13
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       108E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9ED1E88821DA11EE86643E3F4AD9E6FC.roa
Signing time:             Fri 14 Jul 2023 00:08:55 +0000
ROA not before:           Fri 14 Jul 2023 00:00:51 +0000
ROA not after:            Mon 14 Jul 2025 00:00:51 +0000
asID:                     834
IP address blocks:        154.16.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4238 (0x108e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jul 14 00:00:51 2023 GMT
            Not After : Jul 14 00:00:51 2025 GMT
        Subject: CN=64b09217-fb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d6:4c:00:fc:52:dd:4a:4e:f3:e8:cf:7b:56:
                    fb:b5:d9:ec:2a:63:e8:d2:ad:a6:80:c5:90:af:11:
                    a1:ff:14:0f:2b:e0:d5:42:49:d7:f0:16:30:c7:38:
                    ed:c7:bb:19:7d:4e:a4:5d:ee:f1:f2:04:a3:03:95:
                    13:f1:32:db:a0:82:27:68:01:07:94:46:a2:53:05:
                    c1:52:ef:4a:79:8b:6b:97:66:1d:0b:39:7e:60:0c:
                    19:f1:7f:82:03:31:6c:0f:56:ca:d2:92:c7:13:a6:
                    fe:ed:19:a4:84:4f:86:c2:ec:55:4e:53:ff:b1:d7:
                    06:1a:a2:32:ab:16:ca:98:bf:8d:94:6e:ab:8d:19:
                    77:82:76:5c:fc:0f:44:b7:5f:9e:5b:32:7c:b7:11:
                    75:fa:26:83:7b:1b:3a:67:79:36:09:11:d0:fb:bb:
                    18:b5:b5:cd:72:3a:2a:1d:ac:aa:76:dc:1c:41:d8:
                    56:8a:6d:b1:3a:e2:e9:82:e0:89:84:0b:ec:c7:40:
                    a1:06:4d:ae:e1:c0:82:73:6b:ed:8b:4f:71:8a:db:
                    55:43:43:05:d5:1a:b8:a6:66:97:8f:e7:09:32:53:
                    16:19:14:fc:be:1d:99:6c:74:89:42:42:41:eb:eb:
                    80:74:ad:94:91:b8:6a:dc:73:2a:ba:95:e2:08:34:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:09:FB:FC:99:01:9C:39:D3:C9:10:4F:DC:74:3D:8C:79:A6:A3:13
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9ED1E88821DA11EE86643E3F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:6d:be:6d:f3:9d:04:47:77:94:be:e1:13:dd:75:20:8c:4f:
         20:76:72:74:fa:c8:95:93:34:6e:1e:15:6b:d9:d5:a3:fc:95:
         55:c1:7a:2b:af:94:18:65:20:b2:ad:d3:8b:3c:e1:4d:35:4f:
         0e:18:ec:86:b0:7e:e3:16:d7:87:cc:21:ee:bd:1a:76:7d:3c:
         90:07:c1:51:52:49:e2:6b:c5:84:22:15:0b:75:d7:68:d0:90:
         1a:10:06:bb:43:a5:ba:ce:ca:f7:af:0a:31:a9:1b:66:0a:d4:
         e5:85:42:12:7f:5f:5e:17:09:07:42:93:15:3a:49:5f:a0:c8:
         2c:e8:03:6a:db:6b:b7:d1:a4:75:5a:b0:8b:22:0e:5c:d4:1f:
         76:0e:89:f4:d3:78:fd:1f:13:2b:af:87:12:d3:3a:7b:14:19:
         99:9d:23:f7:60:8d:47:d3:8b:77:f8:6d:73:6e:31:c3:6a:f3:
         3e:12:fa:96:d4:87:a8:53:17:3a:d4:3e:0a:99:3c:4e:d9:cf:
         c5:40:8e:7e:fb:06:f6:03:f0:da:b4:6d:4b:b5:94:d4:ff:95:
         6e:69:33:ba:40:3a:fd:98:8c:db:c3:9d:7e:44:dc:2f:c4:10:
         49:b6:bc:83:f2:31:57:15:b8:55:1e:f9:bd:b1:d3:3d:d6:0f:
         b1:d6:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----