Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/D74C266C223211EEA952C0544AD9E6FC.roa
File:                     D74C266C223211EEA952C0544AD9E6FC.roa (raw, json)
Hash identifier:          R6R9jHapvITDt3nReUbAT4UFnR0xpRT2nCPInhti058=
Subject key identifier:   A0:CE:77:0B:08:5B:54:7B:2E:51:87:8B:AB:88:BB:F8:EC:7C:A4:66
Certificate issuer:       /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial:       85
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/D74C266C223211EEA952C0544AD9E6FC.roa
Signing time:             Fri 14 Jul 2023 10:40:25 +0000
ROA not before:           Fri 14 Jul 2023 10:40:20 +0000
ROA not after:            Sun 14 Dec 2025 10:40:20 +0000
asID:                     15964
IP address blocks:        197.159.0.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
        Validity
            Not Before: Jul 14 10:40:20 2023 GMT
            Not After : Dec 14 10:40:20 2025 GMT
        Subject: CN=64b12619-f51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:0d:be:3b:c3:d5:e1:7e:cc:0f:1f:f1:d0:
                    c9:36:cb:16:25:d7:cc:9b:fe:f9:44:46:8f:86:20:
                    0f:7b:10:38:3e:54:c3:95:1d:ca:86:78:1f:71:f7:
                    ab:50:63:59:31:6a:00:e8:93:b7:df:03:c0:32:10:
                    44:1f:84:a7:ce:6a:34:ba:a8:46:64:9c:6f:02:fc:
                    e4:52:c0:53:43:8b:9c:97:1b:a7:f1:1b:39:f1:58:
                    f9:ae:04:5f:76:91:89:f9:b4:8a:c5:44:f1:c5:3f:
                    9a:d3:3f:4c:e5:3b:e4:3d:ce:80:3d:c2:7d:d0:19:
                    39:06:5e:f7:ec:b9:35:39:9e:5a:1e:ab:95:73:d3:
                    f1:fa:de:af:70:b1:60:8e:9d:8f:06:b2:ac:ad:ad:
                    2d:a8:96:6a:26:b8:9e:3a:05:cc:01:2d:58:26:37:
                    8d:20:91:7e:d8:b1:16:ea:42:1b:3f:34:ba:1e:b3:
                    86:03:35:32:41:27:39:bd:5e:b2:5c:26:bc:b5:b6:
                    ca:03:cb:26:55:c5:e9:af:2c:d4:e9:78:b1:8b:49:
                    f8:17:f2:24:39:b6:cc:3f:5a:3c:34:30:10:ef:d5:
                    9f:cc:60:4b:a6:5d:d5:05:2d:5c:31:0f:8d:1b:de:
                    ee:64:d8:9b:30:c2:6c:88:59:aa:0a:fc:d9:f7:58:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CE:77:0B:08:5B:54:7B:2E:51:87:8B:AB:88:BB:F8:EC:7C:A4:66
            X509v3 Authority Key Identifier:
                keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/D74C266C223211EEA952C0544AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.159.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:3f:3f:c2:86:4f:2e:7c:a4:18:db:92:db:1d:77:98:14:c2:
         a3:8c:bf:88:59:b2:0e:4b:eb:8d:f6:05:2d:49:a8:98:3e:96:
         d2:82:f8:fa:e2:11:fb:e4:33:42:3f:93:12:6c:7a:f5:57:3f:
         1c:6e:7a:a9:50:a9:a0:72:6b:f0:25:26:69:12:26:38:c8:dc:
         3b:91:14:cd:12:4d:10:fc:5c:f7:cf:e7:e5:a3:a4:01:df:65:
         0c:d2:30:a4:fd:60:96:6f:24:d9:2f:25:b3:9e:0b:6b:9f:ff:
         fd:a0:88:15:9e:8a:8d:7f:af:9d:ae:e5:c8:12:8e:c6:4d:b8:
         13:ee:74:93:39:28:5c:0c:87:83:b2:da:64:91:87:e3:ef:c6:
         f4:5b:37:4d:68:42:19:26:fd:d2:4d:94:e6:95:aa:37:00:3d:
         5f:09:ef:3d:eb:d0:ed:61:60:8c:ab:a5:e8:84:39:ba:b6:7d:
         d6:60:2f:b4:85:f9:69:ab:58:84:40:ac:9b:1b:bb:cd:2e:99:
         e0:a6:1e:ae:81:a4:f0:08:e7:0e:cc:fc:d7:18:fd:7d:33:69:
         17:b1:9a:70:db:55:9e:0f:42:c0:5d:66:78:15:a4:c9:d8:5a:
         4d:e0:e5:57:b7:b9:61:0e:e6:3b:61:f5:db:0b:2f:fa:1e:46:
         f8:6c:99:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----