Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0A7C3D45E1311EE905E253C4AD9E6FC.roa
File:                     E0A7C3D45E1311EE905E253C4AD9E6FC.roa (raw, json)
Hash identifier:          7sRVzIIj4/QsCxqugIuJq+lZEiQ9kzL9vPeBDWTsshI=
Subject key identifier:   5D:3C:2E:4C:81:99:C7:16:EC:97:91:0C:65:B5:91:19:5C:B8:6B:D0
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       129A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0A7C3D45E1311EE905E253C4AD9E6FC.roa
Signing time:             Thu 28 Sep 2023 15:29:56 +0000
ROA not before:           Thu 28 Sep 2023 15:29:53 +0000
ROA not after:            Tue 30 Sep 2025 15:29:53 +0000
asID:                     213060
IP address blocks:        154.16.24.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4762 (0x129a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 28 15:29:53 2023 GMT
            Not After : Sep 30 15:29:53 2025 GMT
        Subject: CN=65159bf4-300d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:33:b7:d3:59:45:e8:b5:3b:43:3f:dd:7f:
                    01:22:29:49:d7:3a:dc:bb:b0:b3:f3:51:67:f4:0d:
                    42:92:2a:d7:96:2d:cc:54:66:77:e8:c8:a0:1b:c3:
                    c8:5e:e8:4f:3e:24:f6:9d:16:6e:00:54:50:ef:b7:
                    03:b8:c7:3a:40:81:8d:e9:21:eb:ed:54:d8:84:79:
                    7c:98:06:2d:67:ec:48:4a:39:48:44:c9:c1:4e:8b:
                    2e:63:98:76:d5:80:a1:71:36:2e:1e:2f:60:5b:35:
                    c0:85:a0:d9:f6:35:c4:d6:3e:03:47:7e:ca:74:c0:
                    24:ea:b7:e1:e2:b9:3c:b0:ab:b7:5b:82:a6:cf:a9:
                    8b:f7:91:2d:ba:08:4b:c1:47:88:c9:9a:47:ad:eb:
                    98:83:5f:b7:8c:7d:16:2e:c2:32:6d:7e:c7:84:a6:
                    f0:b8:e3:ab:b8:3c:d7:65:ad:85:ba:e6:7f:26:bb:
                    e3:af:ee:05:44:5f:63:22:64:4e:53:80:c9:0f:87:
                    29:a3:cb:ed:fd:34:fb:ca:24:b3:18:dc:59:7c:b4:
                    79:22:43:e2:24:b2:62:e9:de:de:5d:4d:7f:3a:de:
                    29:41:1e:e6:be:e9:9e:40:1e:2a:9d:09:8b:71:67:
                    47:09:7e:d4:34:8c:c3:d6:bf:0f:67:0f:50:e7:a4:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3C:2E:4C:81:99:C7:16:EC:97:91:0C:65:B5:91:19:5C:B8:6B:D0
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0A7C3D45E1311EE905E253C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:97:a6:14:10:f9:14:39:6c:0d:99:c7:df:a0:f2:44:6e:aa:
         a6:4d:b1:81:ec:08:2b:2a:4e:6f:13:5d:48:6c:ab:7b:cd:98:
         20:28:dd:4d:57:bf:a2:e7:e3:e1:de:04:b9:ca:a8:d3:6e:16:
         5b:c3:36:3a:e9:f4:4a:a4:17:31:2e:7c:85:9f:85:a9:85:52:
         01:fd:17:74:8b:8e:90:d7:f3:80:b8:8f:1d:be:82:7c:b9:9d:
         db:d8:0d:36:a9:a8:49:88:8f:9f:d5:9f:e9:a0:3a:9e:af:83:
         b6:99:2c:c1:55:5b:62:6d:95:77:31:87:2b:f1:b2:3b:25:c4:
         b4:54:cc:77:7e:18:a3:09:a2:72:25:ef:4a:f0:74:9c:77:3a:
         f5:f8:d0:bc:ae:0f:4b:8c:4b:46:0e:fc:b3:75:9f:ee:ad:bb:
         3b:e1:ce:80:18:91:08:9a:f3:7b:1c:cb:f4:d9:de:c0:eb:c2:
         7a:76:08:dd:dd:75:ea:67:fe:93:48:37:a9:b2:ef:7b:9a:97:
         aa:31:2b:3a:f3:e6:7c:40:73:02:84:c7:d6:9f:c1:71:75:c7:
         97:7f:b5:b0:a2:cc:ba:8b:ef:33:43:38:24:ff:ea:90:a6:ff:
         67:86:6e:c9:2a:ee:da:5e:4d:6b:cc:1b:5c:24:52:cb:9b:2c:
         56:b2:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----