Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/E03A7FAC83AE11EE856BA2374AD9E6FC.roa
File:                     E03A7FAC83AE11EE856BA2374AD9E6FC.roa (raw, json)
Hash identifier:          tb8opmnoAaWoeeELPgM33C1/M5HqoXvZ2X7CPNU/M3k=
Subject key identifier:   4E:5B:C1:FF:BA:24:9F:17:3D:9A:1A:BA:0D:B9:78:52:AC:86:F8:C4
Certificate issuer:       /CN=F36C11E4AF/serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
Certificate serial:       02
Authority key identifier: F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/E03A7FAC83AE11EE856BA2374AD9E6FC.roa
Signing time:             Wed 15 Nov 2023 12:02:40 +0000
ROA not before:           Wed 15 Nov 2023 12:02:30 +0000
ROA not after:            Mon 17 Nov 2025 12:02:30 +0000
asID:                     328169
IP address blocks:        102.214.160.0/22 maxlen: 22
                          2c0f:1580::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C11E4AF/serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
        Validity
            Not Before: Nov 15 12:02:30 2023 GMT
            Not After : Nov 17 12:02:30 2025 GMT
        Subject: CN=6554b360-1847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:2f:9b:7e:8d:1b:e4:bc:93:49:3b:10:2e:
                    02:ef:73:98:04:56:f9:0e:14:45:c7:05:b9:a9:b6:
                    4b:56:53:3f:d7:4e:b3:be:4a:32:3b:f8:cb:96:eb:
                    ec:22:a0:91:ac:44:72:b7:56:4c:2e:6b:27:62:00:
                    3c:50:d8:d3:fe:57:a1:f8:94:75:a5:fa:70:9c:3f:
                    ca:f6:f0:43:6d:aa:6d:83:15:a6:c8:ea:74:d4:46:
                    d4:a8:ab:33:b2:9e:dc:f6:2f:d8:77:74:d7:4a:69:
                    c0:e4:10:26:4c:11:13:59:3d:28:e0:5e:a2:2b:d3:
                    cf:46:85:82:bf:ce:a4:fa:6c:40:70:66:53:f6:8a:
                    2c:a6:80:3e:a4:76:78:43:ef:e5:a4:14:58:94:e6:
                    c8:26:a9:9c:8f:6c:4a:e1:d9:1e:70:5f:15:95:19:
                    40:8b:e1:56:bb:35:65:79:22:b5:d4:89:ca:41:e1:
                    c2:06:38:14:3d:70:a3:35:b3:28:21:ef:8d:a7:97:
                    98:04:ab:98:cf:20:c8:48:62:23:37:b9:1d:ef:1d:
                    dc:e5:dd:30:42:53:bb:30:2c:84:8e:bf:1d:1c:e8:
                    74:51:5d:33:52:e3:45:78:4b:1a:04:f1:6e:eb:75:
                    35:c4:da:2f:58:06:e2:54:0d:1d:fc:26:4d:e5:40:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5B:C1:FF:BA:24:9F:17:3D:9A:1A:BA:0D:B9:78:52:AC:86:F8:C4
            X509v3 Authority Key Identifier:
                keyid:F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/E03A7FAC83AE11EE856BA2374AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.160.0/22
                IPv6:
                  2c0f:1580::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:a0:2b:53:ed:28:5b:8b:9e:b6:78:fc:46:6f:24:f0:5e:5e:
         fb:27:36:dc:ac:85:fc:65:ab:07:02:30:07:09:32:af:7a:47:
         3f:de:74:40:e2:b9:89:0e:89:03:aa:56:ef:42:0d:89:71:1c:
         e8:8d:cb:85:e7:de:85:72:22:a2:ae:07:fe:d4:1b:99:a2:55:
         cf:35:5e:c4:94:b6:d9:46:7e:c8:b2:2c:93:fa:ba:eb:e5:22:
         3c:f7:36:01:c5:61:e7:7d:78:2c:5b:ee:3a:95:9c:5a:21:25:
         00:ec:a2:1e:25:51:e4:ee:eb:81:ad:bd:c6:60:40:d0:87:ad:
         95:83:f2:cc:b4:fa:87:18:21:14:ac:5c:ff:a6:51:c6:bc:1c:
         f7:00:ac:db:9c:3f:d2:4b:f4:f7:a4:87:0e:06:3c:a3:cc:22:
         69:06:f8:36:f0:49:a4:93:90:69:bf:72:4f:25:3f:ec:cc:62:
         49:1c:5d:9b:8b:b9:49:71:b3:c3:16:95:ce:e9:15:84:b6:ef:
         bf:19:03:db:f8:9f:75:6c:df:12:b8:19:15:c5:08:08:38:bd:
         4b:c8:62:c9:3d:9f:0b:b6:aa:99:7e:81:cb:46:6c:7b:40:c2:
         5d:90:02:86:c2:c7:7c:a2:57:79:82:3c:05:15:93:3e:82:0b:
         9c:bc:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----