Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A832A0CE142F11EE97A043384AD9E6FC.roa
File:                     A832A0CE142F11EE97A043384AD9E6FC.roa (raw, json)
Hash identifier:          w874A/yYoIjnnHGGR1/tIFbz58P7amvKFRuGRO7aVXY=
Subject key identifier:   3A:F6:69:86:F5:86:57:52:BB:29:4E:CD:64:B2:07:0D:B3:06:03:4F
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1008
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A832A0CE142F11EE97A043384AD9E6FC.roa
Signing time:             Mon 26 Jun 2023 14:42:21 +0000
ROA not before:           Mon 26 Jun 2023 14:42:18 +0000
ROA not after:            Mon 16 Jun 2025 14:42:18 +0000
asID:                     834
IP address blocks:        154.16.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4104 (0x1008)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 26 14:42:18 2023 GMT
            Not After : Jun 16 14:42:18 2025 GMT
        Subject: CN=6499a3cd-c4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:9d:7f:f3:3b:64:54:c7:af:2f:15:fe:20:
                    3d:e9:5a:8f:82:06:fa:10:b7:3c:0e:1b:2a:00:89:
                    a4:9d:21:b8:2e:37:63:81:3f:37:70:87:41:8a:35:
                    8b:9b:f9:ba:18:fe:fd:b9:e8:67:5d:90:6b:53:54:
                    2e:7a:4e:c5:b7:c9:07:2d:62:c5:ef:46:e6:92:1d:
                    80:d9:ee:cc:61:22:e1:ed:62:1f:3b:fa:40:d7:57:
                    af:a2:ea:3c:c0:f1:a0:aa:f1:b9:c7:00:6d:49:96:
                    32:e5:d0:c3:c7:a2:0a:49:c0:42:17:a7:7f:7f:d1:
                    64:be:b8:18:5c:5b:92:79:d4:af:a3:90:38:84:02:
                    02:38:a5:c2:3d:67:65:b1:cb:1a:91:e3:74:29:d5:
                    4f:cd:de:41:0a:33:4a:ba:6d:7c:83:42:e9:4d:39:
                    7f:9e:b8:e2:77:b0:47:03:e8:bf:34:a2:52:15:ab:
                    61:1e:ea:4d:de:93:fa:a2:f0:ca:31:3c:65:13:65:
                    83:c6:2b:69:06:d0:8f:3e:3e:d5:76:1f:21:75:3f:
                    94:e1:ef:27:9d:3a:e2:73:57:67:19:19:3c:06:37:
                    20:b7:40:94:2a:6c:33:03:d9:43:df:49:82:1c:ef:
                    c2:c8:8d:2b:1a:fb:1c:b8:17:9e:85:7b:19:81:f8:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F6:69:86:F5:86:57:52:BB:29:4E:CD:64:B2:07:0D:B3:06:03:4F
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A832A0CE142F11EE97A043384AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:4e:ba:71:f9:f9:b9:80:18:f5:5b:c8:70:d8:aa:3b:4f:fe:
         20:86:a0:d8:c2:b2:b7:97:d2:d6:04:5d:f7:c9:4a:63:9b:4f:
         89:e9:dc:00:e0:54:87:62:8b:3a:64:81:cc:06:68:5e:c4:eb:
         73:76:48:88:d8:7e:9b:f6:37:6f:36:2b:ef:7a:89:3a:f2:69:
         3e:7e:ad:37:bd:2b:2f:09:18:e1:6d:71:63:8a:96:c2:78:89:
         1d:5e:40:98:5c:a1:65:76:02:08:58:d5:10:f8:4a:e1:54:f0:
         66:88:41:19:dc:86:5c:31:d3:3d:9c:d2:a1:68:89:dd:e1:25:
         be:89:01:2d:2d:52:f4:09:c3:0c:e9:b9:d6:f6:75:76:b6:9b:
         fb:91:4d:23:02:a1:37:62:49:57:e2:d8:ba:9e:4a:ce:99:36:
         97:83:62:64:c8:0f:70:11:4b:6e:66:26:4f:f0:e1:e0:7f:42:
         a1:16:81:96:ba:48:1b:86:6d:0f:c6:2c:de:31:26:60:f9:96:
         c9:e0:b2:7d:2e:f4:4e:31:e1:0b:4d:75:ef:d4:8d:24:8d:d3:
         2c:b2:76:e4:7b:dc:f5:af:30:d1:91:eb:48:e2:28:3d:5e:3d:
         6c:5c:35:0f:da:82:7c:46:b4:a6:c6:ee:bf:e6:a9:ea:83:c0:
         d0:e0:99:75
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEAgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MjYxNDQyMThaFw0yNTA2MTYxNDQyMThaMBgxFjAU
BgNVBAMTDTY0OTlhM2NkLWM0ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAh51/8ztkVMevLxX+ID3pWo+CBvoQtzwOGyoAiaSdIbguN2OBPzdwh0GK
NYub+boY/v256GddkGtTVC56TsW3yQctYsXvRuaSHYDZ7sxhIuHtYh87+kDXV6+i
6jzA8aCq8bnHAG1JljLl0MPHogpJwEIXp39/0WS+uBhcW5J51K+jkDiEAgI4pcI9
Z2WxyxqR43Qp1U/N3kEKM0q6bXyDQulNOX+euOJ3sEcD6L80olIVq2Ee6k3ek/qi
8MoxPGUTZYPGK2kG0I8+PtV2HyF1P5Th7yedOuJzV2cZGTwGNyC3QJQqbDMD2UPf
SYIc78LIjSsa+xy4F56FexmB+MxlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUOvZp
hvWGV1K7KU7NZLIHDbMGA08wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0E4MzJBMENFMTQyRjExRUU5N0EwNDMzODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGYwDQYJKoZIhvcNAQEL
BQADggEBAL9OunH5+bmAGPVbyHDYqjtP/iCGoNjCsreX0tYEXffJSmObT4np3ADg
VIdiizpkgcwGaF7E63N2SIjYfpv2N282K+96iTryaT5+rTe9Ky8JGOFtcWOKlsJ4
iR1eQJhcoWV2AghY1RD4SuFU8GaIQRnchlwx0z2c0qFoid3hJb6JAS0tUvQJwwzp
udb2dXa2m/uRTSMCoTdiSVfi2LqeSs6ZNpeDYmTID3ARS25mJk/w4eB/QqEWgZa6
SBuGbQ/GLN4xJmD5lsngsn0u9E4x4QtNde/UjSSN0yyyduR73PWvMNGR60jiKD1e
PWxcNQ/agnxGtKbG7r/mqeqDwNDgmXU=
-----END CERTIFICATE-----