Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/A0511300964411ECBDCD26AF5A40D577.roa
File:                     A0511300964411ECBDCD26AF5A40D577.roa (raw, json)
Hash identifier:          ZzNmr1FIRBG6XRL7SSY7u90fP7UY6pdd0ZAFSrRdoSM=
Subject key identifier:   1D:CF:E1:02:11:1C:1D:EB:5C:E1:C2:1B:8F:F0:81:55:09:BB:A3:E7
Certificate issuer:       /CN=F36BBC36AF/serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
Certificate serial:       02
Authority key identifier: 79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/A0511300964411ECBDCD26AF5A40D577.roa
Signing time:             Fri 25 Feb 2022 14:10:03 +0000
ROA not before:           Fri 25 Feb 2022 14:09:58 +0000
ROA not after:            Tue 25 Feb 2025 14:09:58 +0000
asID:                     37187
IP address blocks:        41.75.112.0/20 maxlen: 24
                          41.190.92.0/22 maxlen: 24
                          41.217.216.0/22 maxlen: 24
                          197.211.96.0/19 maxlen: 24
                          2c0f:fd50::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBC36AF/serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
        Validity
            Not Before: Feb 25 14:09:58 2022 GMT
            Not After : Feb 25 14:09:58 2025 GMT
        Subject: CN=6218e33b-b39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:fc:0a:2b:1c:08:4a:54:8e:c2:05:1f:8a:
                    af:bf:36:28:b7:e8:73:d5:2b:18:3a:82:65:6e:3f:
                    7d:30:95:1d:91:d7:16:4d:de:71:c0:b7:61:92:17:
                    c9:0b:6e:68:a2:9e:7d:59:02:f7:ef:02:a3:ee:b9:
                    60:b9:b7:a4:2e:1e:4c:0b:e6:d6:7b:53:5f:cb:47:
                    d9:c6:2b:88:79:1a:b3:d2:59:cc:3d:60:15:58:f0:
                    93:eb:98:19:7c:b1:25:f2:56:1e:4d:74:f3:e0:5b:
                    c4:32:f9:81:76:b6:65:d2:8f:98:56:0a:86:f5:88:
                    2f:aa:1b:39:4e:21:0c:4a:93:37:ad:eb:60:4f:fa:
                    50:64:ff:33:bc:66:17:27:7d:58:0b:8e:62:3f:bd:
                    7a:f9:de:ae:97:89:9b:c7:fd:be:b8:a9:3b:b1:35:
                    e8:84:2f:0a:3f:0a:63:96:01:4a:09:45:7a:09:09:
                    a4:41:71:99:ba:f0:85:d4:1d:83:a0:0c:3d:fd:ef:
                    8d:d5:2d:50:da:c5:6a:5c:42:a0:94:d5:e7:2d:b7:
                    dd:ad:cf:02:26:cd:95:34:22:10:46:96:76:a8:28:
                    da:95:72:2a:53:02:5d:32:b2:e9:95:c8:b1:6e:e1:
                    8c:66:6c:6b:a4:06:c6:df:76:06:1e:01:15:e1:2e:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CF:E1:02:11:1C:1D:EB:5C:E1:C2:1B:8F:F0:81:55:09:BB:A3:E7
            X509v3 Authority Key Identifier:
                keyid:79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/A0511300964411ECBDCD26AF5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.75.112.0/20
                  41.190.92.0/22
                  41.217.216.0/22
                  197.211.96.0/19
                IPv6:
                  2c0f:fd50::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:d0:c8:1d:a8:bb:51:d9:85:33:70:a7:cb:86:c1:16:17:19:
         14:97:0f:90:1f:49:c8:94:af:ac:9e:2b:b7:b6:90:d5:7d:84:
         74:c4:05:3f:e4:37:dc:b9:f7:3f:2f:fc:1c:3c:82:a7:60:96:
         b4:89:41:59:45:a4:cd:99:22:20:35:b9:ad:a7:88:08:6c:99:
         ad:f8:aa:0f:df:57:95:10:67:c0:ca:14:9c:ba:97:f4:4d:24:
         b7:03:49:59:c4:64:57:b6:d0:5f:95:34:12:44:e4:89:20:ee:
         3c:fc:41:b5:95:96:88:e7:ef:ca:f5:5e:a9:f0:1b:1b:8b:39:
         10:63:18:08:b5:3a:3c:e8:b3:62:b9:11:23:42:a8:1e:92:db:
         ce:2e:2d:ec:45:6d:8f:11:56:c8:49:1c:3a:3c:41:a3:77:2e:
         ac:c5:d3:22:41:79:6b:a9:96:04:1a:51:44:ed:37:58:55:2d:
         3a:d2:70:64:9f:f6:a6:8f:d5:f2:2d:9a:03:64:4a:10:c9:c5:
         2d:8d:e6:92:fd:1b:e3:7e:f8:16:52:d9:7b:b1:8a:c8:1b:6c:
         0c:e4:5d:5f:75:84:72:80:2e:d9:27:9c:b6:ef:4d:69:d5:f7:
         6d:c9:ae:db:96:96:a8:8e:1c:db:04:d6:b3:fe:26:99:56:6e:
         df:4e:75:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----