Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F4306CAFFE411EDB20B28364AD9E6FC.roa
File:                     9F4306CAFFE411EDB20B28364AD9E6FC.roa (raw, json)
Hash identifier:          9sOJk8DTAO44LK7TjMPOx56VcbP8+fS8wfOLDyz4tHs=
Subject key identifier:   70:52:41:D7:FC:AB:DB:87:F8:9D:DD:6C:E7:9E:0D:60:4E:6C:C5:48
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0E4F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F4306CAFFE411EDB20B28364AD9E6FC.roa
Signing time:             Wed 31 May 2023 18:54:51 +0000
ROA not before:           Wed 31 May 2023 18:54:47 +0000
ROA not after:            Sat 31 May 2025 18:54:47 +0000
asID:                     834
IP address blocks:        154.16.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3663 (0xe4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 31 18:54:47 2023 GMT
            Not After : May 31 18:54:47 2025 GMT
        Subject: CN=647797fb-d056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:99:7f:d2:39:e2:ca:52:1a:6f:f7:d8:4a:
                    93:19:c4:d4:ef:5e:9b:95:4e:86:c2:a1:9a:86:2e:
                    46:ae:8c:81:ca:fa:05:35:d2:bc:88:e1:0e:3d:98:
                    9f:ab:84:d1:9b:d0:4e:64:35:01:61:ad:f6:78:a5:
                    3a:c7:35:98:e1:59:24:1c:53:e0:d2:0b:9d:3b:96:
                    a2:86:44:b0:c1:18:75:e2:0e:b7:77:82:b6:2b:c0:
                    fb:25:bc:04:fe:02:47:aa:06:9b:30:ec:82:aa:7a:
                    41:6e:4b:2b:34:fa:db:8c:0a:0e:82:67:8c:c1:05:
                    68:fa:77:7e:d1:a4:84:73:5a:ac:87:8e:ea:ed:84:
                    b8:3d:66:f9:2d:0a:f2:af:99:14:87:1b:a4:9a:3f:
                    81:e3:a2:3b:6b:4f:0f:af:16:ee:9d:f3:4f:d5:f4:
                    bc:fd:80:05:fe:ae:4b:99:07:68:e4:d1:68:ee:cb:
                    bb:f3:d5:fb:78:0f:8d:05:8b:20:1d:ed:a8:c1:cc:
                    3e:fb:d9:84:62:43:6b:ca:3d:51:7b:da:40:44:70:
                    ae:f3:6d:29:7d:9f:25:3f:3d:f7:17:92:a2:0b:3d:
                    29:7e:c8:fe:da:6a:ed:46:50:a2:bd:ec:38:39:e6:
                    80:38:f3:23:2d:5f:e8:61:9b:ae:4a:d5:0e:7d:58:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:52:41:D7:FC:AB:DB:87:F8:9D:DD:6C:E7:9E:0D:60:4E:6C:C5:48
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F4306CAFFE411EDB20B28364AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e5:a7:df:d2:c1:03:40:d5:92:fa:94:52:1a:67:a9:38:6b:
         6e:f1:16:c8:b3:6d:18:b9:5a:18:59:0d:40:4f:0f:68:02:26:
         c0:7e:98:01:b0:7c:07:de:1c:36:a3:fc:0a:65:96:58:df:8d:
         a0:c8:5b:bd:ed:55:ed:b8:3a:d2:6e:42:45:5c:61:78:c5:1d:
         aa:3d:c8:51:e4:90:5e:a8:fa:af:57:16:e5:18:f2:83:1c:06:
         c5:01:3a:19:d8:b9:9d:89:1f:12:9f:37:37:f5:ec:d9:64:b3:
         32:16:23:26:ef:5a:78:ec:74:5a:a8:1b:59:e9:29:f1:f4:05:
         87:13:7c:d7:d9:a7:c2:40:a4:64:fc:25:34:20:89:d2:83:4b:
         1d:19:7e:32:40:f9:10:3e:8a:32:d5:ca:66:46:9a:61:6c:a0:
         ec:bd:48:30:c8:0f:1a:bc:c1:0b:f5:3a:fb:03:39:bc:19:7a:
         0d:9f:5e:2e:4e:db:56:95:5c:d5:e3:a5:14:2e:e9:ba:1a:45:
         ab:96:dc:00:0f:4a:d4:39:be:27:c9:ff:6c:1a:42:62:4b:ae:
         5e:ae:10:c9:bc:14:8b:ad:84:60:39:cf:30:c8:2a:3b:67:49:
         11:10:76:84:e0:7c:e8:d8:d0:88:23:e3:c7:e3:b4:72:11:5e:
         ba:67:b3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----