Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/C66D795A7E9511ECA1EC6BA15A40D577.roa
File:                     C66D795A7E9511ECA1EC6BA15A40D577.roa (raw, json)
Hash identifier:          2xnnO4oQ3DF6JU8hf2HfC0jA51zo5npfUgYS75fJ0EA=
Subject key identifier:   55:A1:53:D5:D1:A2:F6:0F:B4:1D:77:03:79:E4:75:3C:25:4A:B3:80
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       015B
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/C66D795A7E9511ECA1EC6BA15A40D577.roa
Signing time:             Wed 26 Jan 2022 10:50:29 +0000
ROA not before:           Wed 26 Jan 2022 10:50:25 +0000
ROA not after:            Mon 26 Jan 2032 10:50:25 +0000
asID:                     136175
IP address blocks:        41.216.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Jan 26 10:50:25 2022 GMT
            Not After : Jan 26 10:50:25 2032 GMT
        Subject: CN=61f12775-5054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:47:e6:90:6b:75:1e:d8:70:bd:6b:5f:64:
                    e9:3f:83:01:1c:81:dc:c5:39:c4:29:34:8a:11:49:
                    b9:bc:81:ef:42:97:c2:bf:13:a6:70:4f:19:bc:2f:
                    57:ba:46:5e:ac:f9:18:d2:fa:b6:cb:ca:1c:b9:22:
                    8a:b9:af:57:e6:1d:9d:df:d3:de:01:ba:05:24:eb:
                    a6:e9:8c:6e:d1:8c:f1:b4:09:1f:ea:2a:08:47:76:
                    96:64:2c:8a:52:cb:9a:e7:4f:cf:3a:45:6e:88:2d:
                    70:e3:80:9b:ef:6f:96:95:f7:fb:f2:c0:39:d1:33:
                    7b:51:2e:4d:2a:e7:0b:b5:d2:dd:4c:f4:3e:31:4c:
                    3b:12:05:df:42:bf:af:61:3a:17:2b:03:4b:78:db:
                    f5:e3:6b:48:4c:46:13:fe:26:1f:9a:9a:1b:64:30:
                    b6:e0:00:a1:bc:d1:1d:c2:81:5e:9e:9e:4d:0a:5c:
                    21:ad:4d:7e:01:7f:b1:50:7c:23:11:1d:88:89:e5:
                    65:f0:32:92:db:6a:e6:50:10:ce:62:12:0c:4c:ab:
                    f2:37:59:d7:99:b5:53:3b:50:69:76:74:93:cc:cf:
                    9a:2f:68:50:e2:ef:bb:7c:c3:3f:81:9d:a0:ee:62:
                    0b:7a:e9:c3:a7:ff:33:35:47:aa:d7:71:24:7d:fe:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A1:53:D5:D1:A2:F6:0F:B4:1D:77:03:79:E4:75:3C:25:4A:B3:80
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/C66D795A7E9511ECA1EC6BA15A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:56:28:3f:ea:8b:7d:af:e8:f6:74:2b:c2:f1:54:20:e2:49:
         6c:cd:60:c2:7a:5e:22:80:b5:46:d7:73:d2:eb:bb:70:4f:00:
         85:a4:af:f3:90:05:d5:f7:75:53:19:c1:d4:f3:7a:7a:11:ff:
         a8:c1:c6:69:ed:7f:c7:f0:93:b9:6c:4c:64:57:8c:62:fc:9b:
         7c:62:54:e3:f4:d0:d1:83:17:d8:68:bb:0f:25:07:0a:73:87:
         b7:52:52:87:25:63:ed:1c:e1:32:1a:fd:1d:62:58:51:91:e8:
         86:58:56:03:43:15:40:80:c0:ce:8e:9a:d6:26:05:db:bc:71:
         3e:ea:a1:85:e9:75:fa:9f:ac:67:ac:59:9a:78:7b:3d:72:31:
         55:d1:3f:23:c2:9b:0b:3a:85:5b:b3:bd:65:ce:65:37:8c:48:
         58:9e:12:a2:26:75:40:cf:1f:58:19:27:fd:59:2d:5f:c0:59:
         14:0c:a7:7c:1f:63:91:eb:d7:1d:dc:0f:35:62:81:2f:ff:15:
         a1:fd:27:09:73:ac:6c:e7:00:de:96:46:89:51:6f:cd:7f:a5:
         74:3b:75:3e:9f:40:9a:b8:3b:c4:1c:6d:26:60:7e:d2:de:d1:
         5b:e1:76:9c:c3:1f:df:41:e4:1e:ca:3c:94:ec:29:e5:04:5f:
         cc:d2:0b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----