Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/3A9D0A8C80B711EE97EB003A4AD9E6FC.roa
File:                     3A9D0A8C80B711EE97EB003A4AD9E6FC.roa (raw, json)
Hash identifier:          1PICzNlFa41zBNc302W7tkKj//PcZUPLL34wd/b2Uug=
Subject key identifier:   16:08:A3:A4:C5:F5:58:EB:86:49:55:84:62:05:89:74:A8:5F:3B:81
Certificate issuer:       /CN=F36C1E88AR/serialNumber=5B6F8B0D862E612104D1FCBA691F0368DD34F0A1
Certificate serial:       11
Authority key identifier: 5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/W2-LDYYuYSEE0fy6aR8DaN008KE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/3A9D0A8C80B711EE97EB003A4AD9E6FC.roa
Signing time:             Sat 11 Nov 2023 17:24:55 +0000
ROA not before:           Sat 11 Nov 2023 17:24:51 +0000
ROA not after:            Wed 30 Nov 2033 17:24:51 +0000
asID:                     37305
IP address blocks:        160.119.216.0/24 maxlen: 24
                          160.119.217.0/24 maxlen: 24
                          160.119.218.0/24 maxlen: 24
                          160.119.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 29 Jun 2024 20:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1E88AR/serialNumber=5B6F8B0D862E612104D1FCBA691F0368DD34F0A1
        Validity
            Not Before: Nov 11 17:24:51 2023 GMT
            Not After : Nov 30 17:24:51 2033 GMT
        Subject: CN=654fb8e6-66fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:a2:1a:04:f6:57:27:a0:8a:0d:ae:84:6a:
                    75:59:86:ec:24:11:48:d4:dc:14:e7:16:4e:8b:de:
                    67:31:b2:0d:9e:92:53:c1:e7:3e:6e:d8:44:16:c8:
                    32:60:a4:43:d7:c6:ff:88:72:60:3b:e1:ce:8e:c9:
                    fa:4e:20:35:04:e6:65:f9:42:cf:49:01:fa:8a:32:
                    0c:3d:e5:1f:c1:76:e6:0a:ee:d7:94:91:e6:7e:b5:
                    08:f8:3b:19:a3:76:63:14:21:8c:02:eb:ab:94:05:
                    d3:18:46:6e:16:05:a3:05:ff:27:d7:8d:7b:17:d7:
                    76:43:e6:2f:09:46:83:21:6c:6f:37:21:c3:d3:07:
                    05:c9:27:23:0a:c8:6c:da:48:70:c7:9a:c1:e8:f8:
                    cd:4e:ab:14:e5:94:22:90:d4:e1:9d:bf:0c:75:45:
                    28:8e:94:6b:e3:5a:d9:d8:04:d6:58:39:84:67:68:
                    3e:a1:31:cf:45:94:23:90:af:d5:ad:a6:51:9b:2e:
                    94:a4:2a:ac:ce:70:27:a4:09:70:63:14:80:2e:cd:
                    f3:16:ff:d1:79:f3:17:e3:d2:f0:07:e6:70:57:b4:
                    42:87:a8:69:df:34:b0:fa:88:84:3a:d6:2a:3b:8a:
                    6a:9d:09:ef:6a:17:b0:f5:94:5d:a3:4a:93:a4:77:
                    fc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:08:A3:A4:C5:F5:58:EB:86:49:55:84:62:05:89:74:A8:5F:3B:81
            X509v3 Authority Key Identifier:
                keyid:5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W2-LDYYuYSEE0fy6aR8DaN008KE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/3A9D0A8C80B711EE97EB003A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:a0:d9:80:54:97:04:fa:e7:fb:05:c5:a9:c6:52:bd:d1:a0:
         9a:bc:ea:b2:3a:d7:18:df:46:42:1e:72:28:1a:c7:01:23:16:
         ec:0b:3f:ae:3d:6f:78:3e:ef:b7:68:32:30:4b:15:f8:a4:47:
         0e:3e:a5:09:06:17:16:c7:e3:a0:65:ad:83:bc:47:a5:c5:52:
         61:eb:13:59:3b:74:94:f0:b0:11:0d:3f:7b:f3:36:26:7c:89:
         45:60:e0:1b:1f:de:11:d9:ca:48:c7:12:45:67:a7:ad:ea:52:
         01:fe:b3:c3:a7:da:88:99:24:f8:58:91:d7:6d:bb:64:40:66:
         60:ad:42:c0:c9:93:43:c2:32:05:e9:2e:3b:6b:f3:4b:82:1d:
         7d:c2:6b:ff:2f:72:08:02:06:91:f9:5c:23:cf:ed:c7:a8:24:
         42:67:02:99:20:be:7f:08:83:30:8f:e8:49:3b:7a:58:bd:72:
         93:d5:f8:60:da:49:31:73:68:94:8a:c8:5b:19:d3:17:ed:3c:
         80:27:c9:3d:b0:2b:f8:08:9b:8d:19:0f:9f:3e:f6:13:f9:62:
         80:8c:b3:99:1e:1c:36:69:b1:77:66:51:ea:b0:27:4d:41:5e:
         35:b8:58:0f:e9:e3:a4:a5:96:cb:60:70:86:b4:8b:2d:86:b1:
         bf:e0:5d:d1
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBETANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
MUU4OEFSMTEwLwYDVQQFEyg1QjZGOEIwRDg2MkU2MTIxMDREMUZDQkE2OTFGMDM2
OEREMzRGMEExMB4XDTIzMTExMTE3MjQ1MVoXDTMzMTEzMDE3MjQ1MVowGDEWMBQG
A1UEAxMNNjU0ZmI4ZTYtNjZmYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKWzohoE9lcnoIoNroRqdVmG7CQRSNTcFOcWToveZzGyDZ6SU8HnPm7YRBbI
MmCkQ9fG/4hyYDvhzo7J+k4gNQTmZflCz0kB+ooyDD3lH8F25gru15SR5n61CPg7
GaN2YxQhjALrq5QF0xhGbhYFowX/J9eNexfXdkPmLwlGgyFsbzchw9MHBcknIwrI
bNpIcMeawej4zU6rFOWUIpDU4Z2/DHVFKI6Ua+Na2dgE1lg5hGdoPqExz0WUI5Cv
1a2mUZsulKQqrM5wJ6QJcGMUgC7N8xb/0XnzF+PS8AfmcFe0Qoeoad80sPqIhDrW
KjuKap0J72oXsPWUXaNKk6R3/CcCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBQWCKOk
xfVY64ZJVYRiBYl0qF87gTAfBgNVHSMEGDAWgBRbb4sNhi5hIQTR/LppHwNo3TTw
oTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzFFODgvMzQ2QjJGMjI3OEU3MTFFRTlGNEU5OTNDNEFEOUU2RkMvVzItTERZ
WXVZU0VFMGZ5NmFSOERhTjAwOEtFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
VzItTERZWXVZU0VFMGZ5NmFSOERhTjAwOEtFLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzFFODgvMzQ2QjJGMjI3OEU3MTFFRTlGNEU5OTNDNEFEOUU2
RkMvM0E5RDBBOEM4MEI3MTFFRTk3RUIwMDNBNEFEOUU2RkMucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqB32DANBgkqhkiG9w0BAQsFAAOC
AQEANqDZgFSXBPrn+wXFqcZSvdGgmrzqsjrXGN9GQh5yKBrHASMW7As/rj1veD7v
t2gyMEsV+KRHDj6lCQYXFsfjoGWtg7xHpcVSYesTWTt0lPCwEQ0/e/M2JnyJRWDg
Gx/eEdnKSMcSRWenrepSAf6zw6faiJkk+FiR1227ZEBmYK1CwMmTQ8IyBekuO2vz
S4IdfcJr/y9yCAIGkflcI8/tx6gkQmcCmSC+fwiDMI/oSTt6WL1yk9X4YNpJMXNo
lIrIWxnTF+08gCfJPbAr+AibjRkPnz72E/ligIyzmR4cNmmxd2ZR6rAnTUFeNbhY
D+njpKWWy2BwhrSLLYaxv+Bd0Q==
-----END CERTIFICATE-----