Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20239C36D04411ECAE151199F1222468.roa
File:                     20239C36D04411ECAE151199F1222468.roa (raw, json)
Hash identifier:          IPH+jufaJUnUhK9vj+ZMITEVrSIT/9W0RvxmaS3Yg+U=
Subject key identifier:   BC:C1:D9:17:E9:A7:67:E8:F9:6A:26:37:32:E7:73:86:1D:85:AD:E9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       13BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20239C36D04411ECAE151199F1222468.roa
Signing time:             Tue 10 May 2022 09:32:36 +0000
ROA not before:           Tue 10 May 2022 09:32:32 +0000
ROA not after:            Thu 31 Aug 2023 09:32:32 +0000
asID:                     135097
IP address blocks:        45.200.192.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5050 (0x13ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 10 09:32:32 2022 GMT
            Not After : Aug 31 09:32:32 2023 GMT
        Subject: CN=627a3134-c92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:1c:5a:51:10:2f:8f:60:dd:b0:c8:be:18:
                    cf:b9:aa:39:4a:e2:c0:33:7f:78:1d:12:95:f4:64:
                    ff:43:86:98:e3:c0:1d:3f:f4:bf:83:43:3c:2f:f4:
                    71:b3:af:9e:19:fa:21:4c:eb:32:5b:26:da:b8:a0:
                    25:97:97:3c:71:05:56:3e:85:5e:5c:ec:30:69:4a:
                    55:c0:ca:82:1d:4d:a7:a4:b1:35:80:d9:0b:b0:6f:
                    5d:14:e5:8b:3d:37:7c:1b:1a:55:33:3d:85:8f:5e:
                    bc:b4:50:fd:68:13:d5:ed:12:0b:bd:86:a8:01:69:
                    cd:44:cf:2e:e0:12:f0:54:78:8c:fa:25:7b:3a:38:
                    4e:71:43:01:ac:c7:05:33:2e:0f:08:49:66:9a:a6:
                    d9:97:27:1f:c7:c7:a5:e4:bf:3e:80:39:a5:40:66:
                    0a:29:b7:ba:00:8f:95:fb:60:2f:b0:bc:9a:73:ae:
                    7e:49:09:67:f9:f9:6c:cc:bb:c6:0c:d7:57:b3:46:
                    09:6e:f1:ca:2d:dd:f0:83:07:c7:b4:19:07:d5:c3:
                    83:0a:c5:af:af:9c:14:c5:e5:0b:31:a0:fd:5d:c6:
                    ba:5d:1b:82:e4:52:6e:e6:63:e9:d0:7a:c2:2b:80:
                    42:2a:20:c8:1d:20:78:12:7e:f8:53:42:9c:7d:98:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C1:D9:17:E9:A7:67:E8:F9:6A:26:37:32:E7:73:86:1D:85:AD:E9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20239C36D04411ECAE151199F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:f1:a1:0a:c7:52:f8:d6:b6:dc:6e:ab:32:cf:40:a4:47:72:
         7b:0d:10:f4:00:f4:ab:5c:44:6a:80:d4:33:11:c6:fd:37:77:
         49:63:a9:0c:95:b0:70:e7:1f:d6:58:0a:44:00:1a:2f:34:7f:
         0c:a7:fa:95:e0:53:17:85:8e:76:b2:11:26:c5:a1:ee:7a:2b:
         04:b0:6d:97:a9:a0:6b:80:be:9a:15:5a:3a:49:8d:8c:9c:6b:
         db:17:6b:21:48:00:d8:65:3d:83:a8:7f:38:a0:49:84:d9:44:
         2c:97:38:f1:bb:06:5b:71:60:39:3a:5e:57:77:14:e0:7b:21:
         bd:bf:68:89:fd:c0:b7:f4:d0:f3:a8:bc:61:e1:a7:fa:a6:c5:
         9e:5c:9c:2a:7e:85:10:6f:89:2e:3b:ba:c4:e7:26:ea:a5:30:
         1f:ce:44:25:08:58:99:77:d9:6a:ac:6f:4e:6e:28:fc:43:62:
         86:2c:f1:9b:83:9d:0f:81:28:6d:84:dd:90:d7:d6:08:1e:4f:
         3b:6b:0a:17:35:8d:ae:e8:cc:ca:b6:eb:e9:2b:85:f6:d0:cc:
         45:f8:76:d6:e6:fe:16:9a:83:43:20:4a:7a:fa:a0:89:a5:3f:
         5a:9b:dd:7f:ac:50:7c:0d:49:3e:2e:5f:96:04:b3:db:0f:6f:
         f8:07:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----