Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/699EDA6A223C11EE862B3B704AD9E6FC.roa
File:                     699EDA6A223C11EE862B3B704AD9E6FC.roa (raw, json)
Hash identifier:          x5bgeD4l1+cDDwv9Tgc9zvx7OI4sgSUGv+3ZKohkfCU=
Subject key identifier:   8B:A3:49:CB:E6:34:48:72:A6:59:81:07:1C:75:C0:C0:D0:69:E8:69
Certificate issuer:       /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial:       8A
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/699EDA6A223C11EE862B3B704AD9E6FC.roa
Signing time:             Fri 14 Jul 2023 11:48:56 +0000
ROA not before:           Fri 14 Jul 2023 11:48:51 +0000
ROA not after:            Sun 14 Dec 2025 11:48:51 +0000
asID:                     15964
IP address blocks:        2001:4268::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
        Validity
            Not Before: Jul 14 11:48:51 2023 GMT
            Not After : Dec 14 11:48:51 2025 GMT
        Subject: CN=64b13628-9a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e2:49:80:b3:3e:2d:67:bc:6d:b1:ce:e4:92:
                    4d:f8:80:3f:dc:66:56:03:ce:cc:9f:0c:ac:23:13:
                    98:54:bf:4c:09:56:b8:d9:66:69:74:b7:2c:62:44:
                    72:f0:69:74:1c:18:50:de:4c:63:c4:09:1c:90:72:
                    49:e2:95:5f:dd:cf:25:06:66:3d:49:c8:bf:d9:5b:
                    d1:9c:15:a1:3e:d8:32:13:4b:b4:3a:2f:98:e1:b6:
                    2d:7f:06:d6:4c:56:b4:ca:3a:ec:5c:ca:b6:7b:73:
                    40:aa:0d:f0:1b:73:43:f7:3b:15:11:4e:a3:0b:85:
                    80:f0:39:71:da:dc:bb:73:f6:c3:7f:7b:9e:be:8e:
                    81:66:e7:8c:1d:83:4b:de:24:04:d2:27:39:9e:03:
                    55:73:ed:4d:31:39:cc:ad:70:63:18:a5:30:8e:91:
                    48:d9:77:56:fb:d9:5e:a8:50:9f:cd:4b:17:c8:8c:
                    df:81:48:19:01:5c:23:3e:6b:d4:c4:a1:d4:2f:76:
                    4f:57:21:94:6c:14:0d:f0:b2:d6:a3:16:ec:3b:84:
                    8d:2c:3c:94:ca:35:5d:a0:1d:eb:e2:52:63:5b:d1:
                    aa:0e:27:54:e7:a4:c7:f2:12:74:52:43:fe:1c:fe:
                    fb:16:63:d7:86:89:7c:c1:0c:8b:32:d4:a6:18:a7:
                    14:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:49:CB:E6:34:48:72:A6:59:81:07:1C:75:C0:C0:D0:69:E8:69
            X509v3 Authority Key Identifier:
                keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/699EDA6A223C11EE862B3B704AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4268::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:5a:b7:09:3a:2f:98:d9:89:20:41:dc:c6:f7:aa:92:9f:
         92:d4:32:ca:9b:8c:10:3b:f4:08:98:db:2f:8a:22:51:79:af:
         04:31:6b:49:50:c6:29:e7:4a:55:02:42:8b:be:8d:e8:cf:50:
         ee:b8:e3:19:e8:9a:8b:a6:1a:77:e9:39:5c:88:7b:2b:c4:be:
         ba:96:75:57:8b:9a:a8:4c:f0:2b:86:4c:d5:32:d3:f1:ef:85:
         46:cf:e3:22:42:96:26:03:fb:19:a9:45:95:78:23:67:88:4d:
         c4:2e:00:be:01:74:b8:b4:b4:c2:bd:bb:6e:21:ec:7d:0b:fa:
         6c:3a:35:33:da:54:f8:ee:88:0a:07:61:46:87:a0:c7:0e:06:
         2b:dd:b5:e1:61:ec:3b:5b:9c:62:49:aa:2d:13:71:fd:b8:d0:
         ff:5b:93:71:30:91:7d:f7:cb:86:b1:9a:9a:52:ff:f9:6c:97:
         69:ca:17:74:d7:62:24:b8:7d:1b:94:d8:34:1b:09:1f:f0:90:
         43:ef:4e:5b:73:d3:f7:90:23:76:99:59:5c:18:54:3e:60:e4:
         89:4b:72:4c:80:de:a7:8d:0b:da:03:8f:99:9a:01:ad:41:cd:
         03:15:a6:ac:35:96:fd:be:60:19:a5:a9:7a:82:27:92:93:d0:
         f4:1b:52:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----