Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/7BEB4622AA2311EDA1C18CE9F1222468.roa
File:                     7BEB4622AA2311EDA1C18CE9F1222468.roa (raw, json)
Hash identifier:          Ncg7tkDmudOjGlR5voZ1gcSqB5oC5UD0f843pNIp6jA=
Subject key identifier:   99:99:1B:B6:A7:17:04:FA:32:42:AA:EA:6D:42:0C:66:75:BD:32:3D
Certificate issuer:       /CN=F36B665CAF/serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
Certificate serial:       02
Authority key identifier: 2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/7BEB4622AA2311EDA1C18CE9F1222468.roa
Signing time:             Sat 11 Feb 2023 15:48:10 +0000
ROA not before:           Sat 11 Feb 2023 15:48:06 +0000
ROA not after:            Sat 05 Feb 2033 15:48:06 +0000
asID:                     328734
IP address blocks:        102.222.144.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B665CAF/serialNumber=2C6A09891C0FEC00E0A39FC77C322831A6EBF979
        Validity
            Not Before: Feb 11 15:48:06 2023 GMT
            Not After : Feb  5 15:48:06 2033 GMT
        Subject: CN=63e7b8ba-6288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:42:2a:d5:27:ff:44:ca:3f:d8:87:f5:17:
                    bf:0b:37:c0:1c:89:50:70:74:ec:e5:a6:be:ed:bd:
                    20:d3:4f:6e:57:97:cf:c0:0f:2a:fd:e4:b1:98:16:
                    a7:12:42:55:c5:2c:7a:68:47:08:2b:c9:60:46:be:
                    73:7d:ef:1d:1d:81:47:71:05:ee:b6:c6:a6:e6:c4:
                    4a:0d:87:61:ee:ed:f0:11:14:7b:dd:5c:e7:d2:1f:
                    f2:96:b7:73:97:b4:02:c8:8c:a5:3d:c5:6c:54:46:
                    f9:34:80:db:1a:f4:ee:7c:db:12:ab:39:3a:fd:f8:
                    94:14:a5:27:74:36:1f:06:23:4b:43:55:50:c8:87:
                    fa:7a:10:75:7b:65:b5:db:41:f0:a3:a0:11:cd:f5:
                    b1:d3:dc:e2:b0:fb:a9:62:d8:78:5c:f8:46:da:c9:
                    26:2c:ea:aa:b5:6a:13:2f:66:b3:2a:7e:64:73:e6:
                    28:54:e9:8c:cb:c4:14:d9:ce:fa:4f:de:04:d3:14:
                    5e:1a:de:3e:bb:46:15:c0:9c:ae:3c:37:d7:f3:79:
                    85:5f:d4:25:9a:2a:ea:9e:80:f1:f5:6b:62:58:ff:
                    4b:ba:07:2a:74:7a:ef:1b:63:6b:40:b9:41:a7:64:
                    a0:4c:2a:99:f2:8b:52:17:ab:ea:86:a7:7c:00:f9:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:99:1B:B6:A7:17:04:FA:32:42:AA:EA:6D:42:0C:66:75:BD:32:3D
            X509v3 Authority Key Identifier:
                keyid:2C:6A:09:89:1C:0F:EC:00:E0:A3:9F:C7:7C:32:28:31:A6:EB:F9:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/LGoJiRwP7ADgo5_HfDIoMabr-Xk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LGoJiRwP7ADgo5_HfDIoMabr-Xk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B665C/4ED166A4AA2211ED833D5FE6F1222468/7BEB4622AA2311EDA1C18CE9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.222.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:64:f8:27:80:0e:92:bf:dc:90:30:02:e0:8c:6a:21:fc:c9:
         9f:fc:7a:f8:34:f6:28:a0:09:fe:22:9c:d7:8e:cb:49:f2:dd:
         b1:b7:bc:cc:7a:5f:fa:72:a6:8b:57:2f:91:91:5b:99:84:a9:
         43:62:b4:05:02:7d:99:66:76:e7:55:a8:51:94:c1:8f:55:99:
         5f:fe:70:22:38:3b:6c:f9:0c:4c:c6:f6:3c:f2:0d:af:3f:ad:
         9b:f3:17:2a:60:d2:91:c4:33:ba:4c:e6:a2:23:32:43:e8:09:
         4f:ff:8a:3a:b7:fe:93:8e:fb:6e:87:a9:49:36:21:3b:49:2f:
         90:47:6d:53:42:e5:13:89:c0:72:45:c9:47:b4:9f:7e:4b:ac:
         56:da:9e:46:19:ef:17:29:23:c0:2c:68:ab:47:9d:1b:b0:a6:
         c0:94:9e:8b:1a:bb:26:43:b8:84:11:62:4d:1b:30:6d:9d:5c:
         f3:e2:40:4f:65:80:bb:c1:a5:a8:03:66:d6:5a:53:26:5c:0e:
         bf:78:ab:c1:6a:72:3e:78:b4:3a:31:30:c5:b0:b5:7f:f7:12:
         6d:76:dc:a3:76:31:8c:8e:c3:2e:1e:62:ec:63:cf:f7:9a:d8:
         e5:38:1e:44:8e:8f:56:98:46:e0:d0:9c:29:dd:bb:37:6d:c7:
         5a:64:bc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----