Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/A8D628E8231511EF9A7B22E17CDC24C2.roa
File:                     A8D628E8231511EF9A7B22E17CDC24C2.roa (raw, json)
Hash identifier:          rdWmNYAovRvioC35EzVFmeMfscvspx042boSN59/OAk=
Subject key identifier:   3D:D0:C0:D6:64:B9:9D:4D:56:0C:AF:AD:F8:1A:FF:7A:EF:9E:46:89
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       07
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/A8D628E8231511EF9A7B22E17CDC24C2.roa
Signing time:             Wed 05 Jun 2024 08:29:01 +0000
ROA not before:           Wed 05 Jun 2024 08:28:57 +0000
ROA not after:            Mon 05 Jun 2034 08:28:57 +0000
asID:                     329278
IP address blocks:        102.212.244.0/22 maxlen: 22
                          2c0f:4440::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 14:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: Jun  5 08:28:57 2024 GMT
            Not After : Jun  5 08:28:57 2034 GMT
        Subject: CN=666021cc-8211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:82:24:c9:7f:34:24:83:33:ec:d2:1b:9f:
                    2c:dd:8a:8c:83:ec:67:b3:de:a9:1b:d0:ff:03:f5:
                    70:d2:bf:85:6e:32:d7:58:3e:7d:e6:b6:33:38:34:
                    df:47:55:c0:3a:45:a5:70:62:48:da:7c:90:42:72:
                    51:c6:29:da:66:01:c8:7d:ae:95:d8:5e:ef:66:ef:
                    ef:f5:ac:07:c7:a7:12:ba:9a:ce:2e:7c:3f:c5:cb:
                    f9:6a:f8:a1:ce:92:3b:fb:4f:e8:99:81:7c:c4:2d:
                    11:2d:fa:73:87:55:1f:20:ee:6a:23:8e:f2:f8:62:
                    c9:c4:73:e9:19:ac:0a:fa:32:85:ef:83:de:0c:e6:
                    5a:67:2c:a0:22:a3:47:6e:dd:20:4a:4b:d5:a8:64:
                    07:90:9b:59:cc:76:e7:d4:3c:5a:f4:49:4b:b5:fc:
                    75:5d:27:6e:33:76:69:ce:7e:8a:99:49:f9:4e:fd:
                    6b:18:18:03:36:c5:5a:93:45:e2:bf:85:21:05:ed:
                    f2:da:75:22:f8:b0:a5:b8:5d:03:75:f5:37:10:6a:
                    9a:b6:f6:72:23:64:fe:62:8d:48:79:8f:27:3f:9d:
                    81:6c:12:0e:60:34:a9:23:58:73:82:a7:6e:9d:f6:
                    1f:7d:4c:fc:3a:34:d8:d1:24:b8:84:1d:84:78:a2:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D0:C0:D6:64:B9:9D:4D:56:0C:AF:AD:F8:1A:FF:7A:EF:9E:46:89
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/A8D628E8231511EF9A7B22E17CDC24C2.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.244.0/22
                IPv6:
                  2c0f:4440::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:62:d3:69:80:90:03:15:e7:db:e4:9c:8e:31:d6:f8:7e:d3:
         50:93:4a:05:83:ee:55:9e:01:a8:5e:e1:f2:b6:3f:a2:8a:79:
         a0:b2:69:50:5c:74:67:99:4a:9c:7b:d0:d1:06:50:3a:a9:d8:
         b4:aa:7a:2a:31:31:ff:ff:85:30:90:b5:32:a5:58:3e:5f:89:
         24:20:fa:a1:78:25:45:95:4c:24:67:2f:b1:15:34:bc:72:de:
         47:63:fe:5d:f3:40:93:22:5e:b4:e8:8a:98:0e:b4:21:c6:16:
         40:9b:e7:bd:39:7f:39:c2:a6:3f:6a:2f:59:3c:95:99:34:0d:
         c2:d1:38:d6:da:eb:f6:43:36:0c:34:24:0e:ef:9b:76:98:73:
         8f:35:a1:30:ec:04:d6:b3:ae:12:6e:86:a7:76:24:47:af:2a:
         e1:e0:90:c2:ea:6f:04:91:a7:e7:78:42:45:ac:73:94:64:ff:
         83:9c:fb:ed:aa:87:98:3e:41:ba:af:3d:f8:ff:53:c0:e8:db:
         64:0a:1d:04:f3:61:79:20:aa:0f:2f:f3:ca:ce:66:db:ab:4f:
         16:5b:7d:c0:c6:57:82:57:9a:81:c2:3e:22:83:9f:50:c7:51:
         06:86:ec:7c:5c:9f:65:5d:67:dc:2d:eb:7e:63:d1:90:b1:fa:
         35:20:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----