Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/26B5501E82FC11EE97310C7C4AD9E6FC.roa
File:                     26B5501E82FC11EE97310C7C4AD9E6FC.roa (raw, json)
Hash identifier:          x7eQ3ndwnINUui76cYwGmP9/q245M8yRickw8kgcBKM=
Subject key identifier:   FA:96:A6:FB:28:FC:FC:D6:63:8D:29:93:FC:32:21:9F:54:DE:7F:8D
Certificate issuer:       /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial:       0C7C
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/26B5501E82FC11EE97310C7C4AD9E6FC.roa
Signing time:             Tue 14 Nov 2023 14:43:19 +0000
ROA not before:           Tue 14 Nov 2023 14:43:15 +0000
ROA not after:            Sun 13 Nov 2033 14:43:15 +0000
asID:                     57351
IP address blocks:        41.242.144.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3196 (0xc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
        Validity
            Not Before: Nov 14 14:43:15 2023 GMT
            Not After : Nov 13 14:43:15 2033 GMT
        Subject: CN=65538787-7d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:9a:6d:f1:ad:18:0f:21:be:0a:a4:ee:51:
                    61:21:2e:b6:14:4e:27:1f:73:e8:72:36:70:9b:3f:
                    4f:6a:67:ef:f6:61:9c:fd:ff:6e:b7:5e:e6:b6:6c:
                    f8:4f:c5:92:e9:ee:c5:26:6d:be:99:b4:53:50:0e:
                    b1:28:19:08:7a:7e:48:90:59:c4:dd:70:34:0b:90:
                    22:97:9a:3b:f8:03:9a:d9:d5:b2:72:c9:d4:e3:1d:
                    33:42:b1:b8:47:75:55:52:4c:a2:41:11:86:83:ba:
                    53:4b:c4:bc:9a:d8:23:1f:14:5f:3d:0d:46:cc:00:
                    42:dc:fc:2d:07:5c:c1:20:43:7d:91:a8:26:21:0d:
                    b6:80:7b:ba:06:b8:a9:c2:78:ed:af:e1:f9:bf:2e:
                    9f:7d:8f:ea:65:f8:b7:33:36:07:41:83:f9:87:44:
                    d4:33:f1:25:66:a7:dc:8d:1a:03:8c:70:e4:1d:e2:
                    1e:32:0c:c5:62:f6:d2:64:37:5f:32:95:71:70:b2:
                    3f:38:ef:89:5f:83:68:8c:79:ab:9c:29:d5:e5:a8:
                    3a:16:98:90:bb:12:92:50:18:72:ba:b3:ec:1b:d8:
                    0e:8f:46:04:78:86:38:13:06:55:25:70:69:0d:b5:
                    87:90:cf:d5:66:10:49:d5:38:d9:07:77:23:28:1e:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:96:A6:FB:28:FC:FC:D6:63:8D:29:93:FC:32:21:9F:54:DE:7F:8D
            X509v3 Authority Key Identifier:
                keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/26B5501E82FC11EE97310C7C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.242.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:79:e9:6b:63:df:b0:d6:63:6b:94:fe:d6:e2:a8:a8:62:34:
         97:a9:b9:cd:92:0e:f0:9e:9a:37:ce:3e:6e:93:df:ba:c0:ff:
         3c:d8:3a:9c:c2:51:2c:fd:b9:38:ec:6b:12:8a:92:62:86:aa:
         38:41:04:43:5a:a2:d6:77:2c:40:8d:1d:35:04:cf:61:78:e9:
         8c:1f:f0:b2:ad:3a:0e:59:30:27:4b:7c:2b:9e:85:3b:6c:b1:
         9b:32:e5:c2:02:19:41:c4:5a:c0:52:a4:26:a0:8f:00:90:0a:
         a9:d4:c4:4c:cb:0d:9d:af:86:33:b6:63:f3:5c:d2:58:71:4d:
         4f:ae:ae:f0:64:a9:02:b4:30:c1:67:61:d7:ff:db:ae:38:d6:
         d5:3c:92:52:d0:a9:a8:09:6b:93:c7:91:71:03:b7:66:eb:27:
         df:18:55:8c:9e:09:37:06:3f:b7:53:d3:74:9c:e4:be:98:21:
         a8:98:26:3d:f2:91:f0:30:a0:57:32:a5:5c:69:fa:22:dc:d4:
         1d:20:5f:4a:2a:51:e5:13:ef:f3:72:c9:29:a3:f4:71:5e:5a:
         b6:42:67:08:36:24:fc:b6:45:5b:72:ee:b4:cb:6c:d7:28:b6:
         a0:ee:e8:84:f4:d9:87:38:ea:a7:30:99:3f:df:15:d0:be:c2:
         ad:0b:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----