Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/7D4473C43D5811EC8FC3221BD8A014CE.roa
File:                     7D4473C43D5811EC8FC3221BD8A014CE.roa (raw, json)
Hash identifier:          OJM/IZl7FRPfkbrT2o7YSmMwGRrG/lQ0uOMVvPghllU=
Subject key identifier:   18:ED:88:37:AB:2C:41:9F:96:E2:12:41:9C:66:E7:B6:3B:78:76:BF
Certificate issuer:       /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial:       015B
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/7D4473C43D5811EC8FC3221BD8A014CE.roa
Signing time:             Thu 04 Nov 2021 10:18:01 +0000
ROA not before:           Thu 04 Nov 2021 10:17:57 +0000
ROA not after:            Sun 30 Nov 2025 10:17:57 +0000
asID:                     328745
IP address blocks:        102.217.248.0/24 maxlen: 24
                          102.217.249.0/24 maxlen: 24
                          102.217.250.0/24 maxlen: 24
                          102.217.251.0/24 maxlen: 24
                          2c0f:5000::/35 maxlen: 35
                          2c0f:5000:2000::/35 maxlen: 35
                          2c0f:5000:4000::/35 maxlen: 35
                          2c0f:5000:6000::/35 maxlen: 35
                          2c0f:5000:8000::/35 maxlen: 35
                          2c0f:5000:a000::/35 maxlen: 35
                          2c0f:5000:c000::/35 maxlen: 35
                          2c0f:5000:e000::/35 maxlen: 35

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
        Validity
            Not Before: Nov  4 10:17:57 2021 GMT
            Not After : Nov 30 10:17:57 2025 GMT
        Subject: CN=6183b359-9f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:ff:8a:d0:3a:b8:f4:8b:76:73:1f:75:1f:
                    7d:22:c3:30:eb:64:09:c5:c6:7d:bc:bf:cc:f2:72:
                    39:eb:44:7a:12:ce:71:65:a7:64:1e:fd:27:e0:dc:
                    28:b0:53:20:87:59:41:90:94:e4:a4:0c:8c:92:ac:
                    96:b9:4f:c9:11:94:d1:c9:8a:f0:a0:3d:78:d1:09:
                    82:20:de:8f:e5:03:92:90:ac:cb:39:72:53:5e:3e:
                    61:c8:05:30:d1:05:d0:5c:72:ff:89:c1:65:e1:f2:
                    8b:bb:ce:12:25:5b:c6:b0:24:bd:58:3e:7d:f1:4b:
                    45:44:9b:cf:3c:ed:ad:82:63:8c:71:2c:21:6a:7c:
                    a3:b3:e2:39:01:36:11:ad:66:07:b9:8b:b7:6e:a5:
                    31:0e:26:f9:be:d3:2a:75:4a:d9:75:58:59:57:bf:
                    61:ea:1a:75:58:51:e9:4a:ed:71:8c:0f:a0:5f:4e:
                    ca:be:cf:56:77:ce:be:a8:0e:aa:d8:dc:32:7b:43:
                    c7:97:7d:e0:33:c5:5f:3d:a9:e3:5a:e7:6f:c0:ee:
                    3e:87:eb:ad:1c:b2:85:57:f7:90:18:7e:5a:fc:d0:
                    39:3c:16:0c:88:c2:4f:60:91:2f:e2:67:d3:ea:36:
                    52:ea:a9:0f:e3:7b:b7:2f:70:d2:c1:f6:03:65:d5:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:ED:88:37:AB:2C:41:9F:96:E2:12:41:9C:66:E7:B6:3B:78:76:BF
            X509v3 Authority Key Identifier:
                keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/7D4473C43D5811EC8FC3221BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.248.0/22
                IPv6:
                  2c0f:5000::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:35:58:6d:31:f8:88:8e:5c:43:2e:e9:9a:f9:fe:8f:84:ce:
         bb:2a:95:fd:c7:54:7d:a3:8a:d7:d8:b0:a0:d8:05:9e:2b:b5:
         e1:73:56:55:99:71:d5:7b:86:9b:58:53:c2:bf:d6:af:d3:2a:
         c7:2e:7d:fb:6c:86:07:c2:59:06:ca:9f:e6:24:7e:0c:e5:24:
         ab:31:31:be:ab:56:9f:b8:c4:6c:99:cb:22:87:b2:9d:56:8f:
         6f:89:70:a9:d1:4b:18:b7:27:be:d6:5c:e4:c8:cd:40:e6:99:
         0d:d4:7c:8b:da:c4:90:21:b8:ed:a2:88:ce:bf:99:fc:df:1b:
         0f:15:b6:4e:82:01:86:14:c5:19:fc:7f:08:a2:37:15:ea:7b:
         b4:de:e4:cf:54:2c:22:4e:d1:c2:e1:8d:21:8b:85:a3:e1:13:
         fb:3e:73:b3:4f:dc:c5:a6:9f:7f:60:58:e5:f1:c8:c6:7a:e5:
         e9:b6:88:cf:7e:c9:ee:b3:6f:29:2d:3d:fa:e5:11:09:99:d4:
         44:f2:08:67:f4:aa:01:3d:41:49:f6:2d:2d:bb:9e:d8:57:fc:
         81:d1:21:1b:5c:2b:34:71:55:9b:d5:d8:58:83:2c:a6:64:91:
         57:43:cb:32:98:fa:17:01:7b:f0:bb:b0:c5:bd:84:66:47:da:
         0a:4f:ef:a8
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICAVswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QkQ0RjFBRjExMC8GA1UEBRMoODVCMEIxOEEzMThFNUE3NUQwNEQxQTBBQTc3RUZG
OTUwNTIyODkyNDAeFw0yMTExMDQxMDE3NTdaFw0yNTExMzAxMDE3NTdaMBgxFjAU
BgNVBAMMDTYxODNiMzU5LTlmMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCilv+K0Dq49It2cx91H30iwzDrZAnFxn28v8zycjnrRHoSznFlp2Qe/Sfg
3CiwUyCHWUGQlOSkDIySrJa5T8kRlNHJivCgPXjRCYIg3o/lA5KQrMs5clNePmHI
BTDRBdBccv+JwWXh8ou7zhIlW8awJL1YPn3xS0VEm8887a2CY4xxLCFqfKOz4jkB
NhGtZge5i7dupTEOJvm+0yp1Stl1WFlXv2HqGnVYUelK7XGMD6BfTsq+z1Z3zr6o
DqrY3DJ7Q8eXfeAzxV89qeNa52/A7j6H660csoVX95AYflr80Dk8FgyIwk9gkS/i
Z9PqNlLqqQ/je7cvcNLB9gNl1XJHAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUGO2I
N6ssQZ+W4hJBnGbntjt4dr8wHwYDVR0jBBgwFoAUhbCxijGOWnXQTRoKp37/lQUi
iSQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJENEYxLzBCMjg2OTg0MzU4QTExRUJBM0RFNjc3MkY4QUVBMjI4L2hiQ3hp
akdPV25YUVRSb0twMzdfbFFVaWlTUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hiQ3hpakdPV25YUVRSb0twMzdfbFFVaWlTUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJENEYxLzBCMjg2OTg0MzU4QTExRUJBM0RFNjc3MkY4
QUVBMjI4LzdENDQ3M0M0M0Q1ODExRUM4RkMzMjIxQkQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2fgwDQQCAAIwBwMFACwP
UAAwDQYJKoZIhvcNAQELBQADggEBAJQ1WG0x+IiOXEMu6Zr5/o+Ezrsqlf3HVH2j
itfYsKDYBZ4rteFzVlWZcdV7hptYU8K/1q/TKscufftshgfCWQbKn+YkfgzlJKsx
Mb6rVp+4xGyZyyKHsp1Wj2+JcKnRSxi3J77WXOTIzUDmmQ3UfIvaxJAhuO2iiM6/
mfzfGw8Vtk6CAYYUxRn8fwiiNxXqe7Te5M9ULCJO0cLhjSGLhaPhE/s+c7NP3MWm
n39gWOXxyMZ65em2iM9+ye6zbyktPfrlEQmZ1ETyCGf0qgE9QUn2LS27nthX/IHR
IRtcKzRxVZvV2FiDLKZkkVdDyzKY+hcBe/C7sMW9hGZH2gpP76g=
-----END CERTIFICATE-----