Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F95767820EB711EE9480D5224AD9E6FC.roa
File:                     F95767820EB711EE9480D5224AD9E6FC.roa (raw, json)
Hash identifier:          OvA6lcQfXyHgIXcxNKwlyhoxL7x8/z6qwq0HKBdvJKk=
Subject key identifier:   32:53:2B:6B:41:D5:06:76:94:D1:3F:70:FF:AC:A7:91:B4:CA:E0:51
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0FBB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F95767820EB711EE9480D5224AD9E6FC.roa
Signing time:             Mon 19 Jun 2023 15:43:02 +0000
ROA not before:           Mon 19 Jun 2023 15:42:59 +0000
ROA not after:            Wed 18 Jun 2025 15:42:59 +0000
asID:                     834
IP address blocks:        154.16.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4027 (0xfbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 19 15:42:59 2023 GMT
            Not After : Jun 18 15:42:59 2025 GMT
        Subject: CN=64907786-9b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:b7:a1:4b:25:6d:fb:2b:eb:80:01:af:13:
                    7b:ec:f8:37:76:de:98:9b:76:9b:a5:40:db:0e:d2:
                    5b:8f:53:b7:85:63:00:30:1f:ad:65:75:fc:16:35:
                    8d:06:de:2c:b7:bb:60:3e:34:5f:d5:6a:b4:a8:9c:
                    06:6b:f9:32:ab:f4:43:db:13:74:84:3e:c3:b6:81:
                    03:41:9b:5c:eb:2b:a8:47:25:b9:41:38:f3:d3:87:
                    5c:79:8f:c5:8c:b9:ee:43:51:3e:f3:47:d5:a0:f4:
                    50:9e:6a:3e:c7:44:41:8d:53:ea:c5:c4:36:19:97:
                    db:2f:0b:e6:6e:3c:c8:0a:a4:81:56:70:5e:0e:50:
                    ed:42:3c:b4:1c:5d:95:82:6c:c1:95:e4:ce:9f:ed:
                    6e:45:b7:93:c9:4d:7d:3d:32:d1:32:ab:3b:f8:1f:
                    76:a0:87:84:98:87:91:6a:4d:57:84:90:15:dd:bb:
                    7d:fc:59:b9:e6:b3:ac:2a:48:0b:64:d2:7c:71:c7:
                    32:1f:86:f3:5d:40:44:70:65:8a:44:f1:74:f2:3a:
                    a4:12:ff:ab:54:f7:64:f9:e4:09:fc:d5:bd:ba:63:
                    7a:96:00:e5:23:27:83:40:f0:1e:b6:7b:3d:ec:d2:
                    10:f2:57:fd:a8:ae:7b:12:d8:9f:41:26:52:ce:94:
                    c1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:53:2B:6B:41:D5:06:76:94:D1:3F:70:FF:AC:A7:91:B4:CA:E0:51
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F95767820EB711EE9480D5224AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:48:14:2f:c4:a5:c9:8f:52:76:d0:ed:cd:49:57:9c:98:0d:
         25:4d:ec:fd:83:28:1c:9b:ee:41:94:2b:57:0e:4f:29:c5:63:
         da:d9:65:70:0b:23:5b:43:d5:67:71:16:75:61:d4:eb:76:5d:
         68:32:3f:ee:b7:84:cd:15:dd:d3:9b:9b:c5:aa:3c:db:26:35:
         8a:49:ed:f4:e0:90:b7:d5:85:8e:fc:de:7b:c2:70:1f:93:23:
         57:61:ce:91:50:34:dd:1b:6d:01:f9:fb:8c:a4:b8:76:7e:79:
         da:74:07:06:70:88:70:bb:3b:c4:79:1d:48:26:09:56:0a:9c:
         80:c5:2e:60:22:a3:46:09:6d:6c:a3:9e:5e:e6:05:c3:2c:dd:
         37:b1:a7:fa:2f:2a:29:b9:cc:3a:84:6b:ba:92:e4:71:7e:08:
         e8:07:ad:76:da:3a:04:ec:ec:e9:25:a5:fd:c5:86:89:61:de:
         32:15:fe:38:df:a6:af:7a:ed:0f:7c:61:e0:b1:14:09:57:dd:
         95:e9:2e:92:ed:24:90:13:10:55:c0:dc:ff:c1:bf:49:f7:36:
         8f:4d:8b:ad:a0:29:3b:c3:35:b9:68:ec:af:8c:5d:74:ec:53:
         28:ed:d0:d8:2b:7a:fd:b7:b2:f5:0f:b0:12:4a:fc:2e:e2:76:
         40:5c:58:33
-----BEGIN CERTIFICATE-----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