Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C5331A628E7F11EE963EF6D27D84E21B.roa
File:                     C5331A628E7F11EE963EF6D27D84E21B.roa (raw, json)
Hash identifier:          wHQvgiQXw3rDtnjzgAJ3bzmkebDtunkxixc4uGDNqkA=
Subject key identifier:   EC:1F:DD:45:7C:36:B1:5A:4F:7B:5A:60:D6:B0:69:7E:97:A7:33:B8
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       138A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C5331A628E7F11EE963EF6D27D84E21B.roa
Signing time:             Wed 29 Nov 2023 06:23:11 +0000
ROA not before:           Wed 29 Nov 2023 06:23:08 +0000
ROA not after:            Sat 29 Nov 2025 06:23:08 +0000
asID:                     834
IP address blocks:        154.16.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5002 (0x138a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov 29 06:23:08 2023 GMT
            Not After : Nov 29 06:23:08 2025 GMT
        Subject: CN=6566d8cf-f6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:fb:f9:56:a7:35:c9:83:19:8b:c8:fd:07:
                    b4:a2:87:41:23:a5:4a:80:21:cd:cf:73:77:3d:fa:
                    60:a4:be:0d:42:a2:63:89:bc:4e:a1:99:ec:a6:d9:
                    15:65:a9:e8:f5:cf:87:1c:3d:05:d7:11:30:9c:9f:
                    70:41:d4:d2:64:69:4b:23:f7:c5:99:92:ec:ef:ba:
                    27:1d:43:96:8f:62:b4:88:c4:f8:b7:0f:7c:c4:97:
                    c3:25:a2:dc:74:21:f7:17:12:9d:c0:3d:d3:1a:88:
                    5f:48:ab:31:c9:20:df:9c:08:4f:a5:aa:2b:48:6f:
                    41:ad:e8:19:8c:ee:89:d1:24:78:17:9a:93:33:4c:
                    7b:59:e3:90:62:16:5b:79:23:19:d2:56:11:4a:8d:
                    2f:46:b8:bd:47:d0:f7:42:24:65:0e:c2:f7:cb:1a:
                    76:74:c7:c7:f7:16:10:90:fd:a5:88:a0:ea:86:bf:
                    e9:0c:b3:e8:e0:8a:51:42:60:de:e4:34:09:da:77:
                    b0:95:b2:7b:28:9e:c0:cd:4c:eb:0b:7d:e4:72:1d:
                    47:8b:0e:97:28:f8:0e:ee:9c:74:64:e5:c4:19:39:
                    04:8d:31:bd:85:d2:b4:a6:e0:cb:58:0f:a9:8a:b4:
                    00:cf:49:d5:b5:94:40:aa:91:83:69:6b:7d:9f:2e:
                    b1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1F:DD:45:7C:36:B1:5A:4F:7B:5A:60:D6:B0:69:7E:97:A7:33:B8
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C5331A628E7F11EE963EF6D27D84E21B.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:03:b8:02:9c:f9:89:91:5a:85:15:67:cf:df:73:91:9b:c3:
         62:c5:89:99:ae:dc:9f:a2:03:ec:49:1b:7a:c7:7e:e6:07:7b:
         b8:0f:bc:94:61:30:74:1f:6a:42:7c:6d:29:a3:32:9a:38:c1:
         47:1f:b4:de:70:3c:12:a0:37:79:06:29:f1:0d:d4:4d:ee:59:
         f6:d2:98:9e:cf:57:90:b3:4c:3b:83:d6:e5:8a:94:ae:b7:9e:
         95:15:f3:57:62:26:56:24:6d:32:63:c9:6c:40:ff:ca:49:e1:
         79:be:0c:c7:44:5d:dc:b3:2c:a8:67:65:37:c2:64:ec:7c:c1:
         d2:3a:cf:81:c6:24:a7:08:89:fc:1e:5e:63:c4:75:61:a9:05:
         c5:a7:3e:8c:54:f8:fe:67:d2:44:b7:39:2c:7b:9f:f5:9f:26:
         55:bf:a9:8e:b3:f7:2f:58:d5:cd:22:9c:73:48:26:af:19:cb:
         a3:fe:07:8d:48:3b:4b:75:b6:25:d2:5e:a2:3c:78:a6:fe:48:
         8c:ca:5c:e1:d9:5b:8c:ce:f5:f7:e9:46:08:ee:b8:96:ed:ef:
         4c:db:e7:ee:d1:31:7e:1a:9c:57:29:b6:21:99:bf:bf:bf:37:
         89:6d:3c:7d:4a:e4:ef:6f:e8:c2:d9:ae:72:eb:f5:ff:51:52:
         42:50:91:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----