Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/B83DFC4C8A5A11EEBB1D514C4AD9E6FC.roa
File:                     B83DFC4C8A5A11EEBB1D514C4AD9E6FC.roa (raw, json)
Hash identifier:          BwIPjXKolm6QqGI08mu2T0HwQuZG21bZ5/XXux8fDo4=
Subject key identifier:   6C:CE:B3:82:00:1E:F8:23:8C:D3:9E:F2:D2:6E:72:A8:C5:61:1A:F3
Certificate issuer:       /CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Certificate serial:       01B9
Authority key identifier: 8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/B83DFC4C8A5A11EEBB1D514C4AD9E6FC.roa
Signing time:             Thu 23 Nov 2023 23:47:54 +0000
ROA not before:           Thu 23 Nov 2023 23:47:49 +0000
ROA not after:            Sat 30 Nov 2024 23:47:49 +0000
asID:                     328549
IP address blocks:        102.36.184.0/22 maxlen: 22
                          102.36.184.0/24 maxlen: 24
                          102.36.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Dec 2023 00:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
        Validity
            Not Before: Nov 23 23:47:49 2023 GMT
            Not After : Nov 30 23:47:49 2024 GMT
        Subject: CN=655fe4aa-2b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:68:b6:fd:26:40:ad:bb:04:c2:11:33:f7:b8:
                    e2:ee:4d:33:0b:e3:f7:ce:02:8d:b6:56:b9:b6:a8:
                    13:29:2b:81:20:a4:9a:b0:7a:b0:a9:72:1c:43:5a:
                    3e:4c:29:ff:50:89:98:d9:48:9b:4b:59:17:80:de:
                    a8:d5:3a:29:f7:ad:25:b5:86:8d:47:15:d9:6e:c9:
                    1f:2d:b9:d6:90:b9:84:92:12:35:8b:09:a3:d9:9b:
                    62:75:9f:39:54:27:8e:97:5c:16:9f:37:55:e0:2f:
                    82:ba:fa:f4:34:5e:a7:f6:4a:43:b8:69:d8:0c:85:
                    50:3e:7a:2b:6f:1b:62:82:36:56:4c:45:b1:26:71:
                    93:2d:9b:90:53:7e:96:9e:11:13:ea:57:ce:13:73:
                    c8:26:eb:99:d7:44:82:d6:ec:07:af:77:04:b9:c3:
                    b9:e1:bc:07:28:7a:ca:f5:fb:cd:24:88:5d:e3:2b:
                    8e:b2:c1:8c:47:47:38:99:f7:b9:72:df:26:08:d5:
                    32:ca:9a:a3:20:c9:e5:96:e7:80:23:8a:12:18:72:
                    c6:99:65:c0:95:73:e8:70:f4:38:ca:d5:ee:9c:24:
                    11:50:f0:c2:a5:4f:d7:c5:a1:2a:9d:c6:ce:f2:98:
                    c8:82:9d:91:c0:49:15:a5:b8:b4:6c:a9:7f:8c:d1:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CE:B3:82:00:1E:F8:23:8C:D3:9E:F2:D2:6E:72:A8:C5:61:1A:F3
            X509v3 Authority Key Identifier:
                keyid:8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/B83DFC4C8A5A11EEBB1D514C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:f1:3b:c4:4d:10:72:e6:61:91:1f:9b:a1:73:a3:5e:66:
         5d:2e:75:89:54:5f:1f:74:4b:0d:0c:81:a8:33:86:15:3a:d8:
         2b:87:08:45:de:9d:4d:9e:76:b2:63:38:4b:b6:af:ef:a3:09:
         35:a6:93:ad:80:1a:21:d4:37:78:c2:7f:c7:68:8d:94:ea:9a:
         ad:2e:4a:c6:d4:b0:2f:b9:ab:97:28:71:27:c0:d5:2a:ce:69:
         b4:4a:3f:f8:ef:20:83:59:47:16:2f:4b:a2:3c:14:c0:f1:3d:
         73:66:29:c9:27:73:14:9e:4a:9c:f6:7b:70:4e:42:ca:0a:5c:
         40:9f:d9:14:d3:03:e5:de:11:07:41:9c:77:ca:42:8e:e6:6f:
         29:03:7b:be:89:bb:fb:61:f5:c4:d6:8f:af:7b:29:8d:ec:0b:
         63:e9:16:3b:79:fe:9a:24:bf:16:f7:31:6b:fa:c0:6d:92:55:
         ca:61:df:e2:83:45:38:f2:cc:40:6f:ca:79:68:c2:0d:bd:f9:
         0b:c3:1b:f4:b9:19:96:c8:70:9b:be:6f:1c:93:50:6c:42:ae:
         97:98:ce:ae:e5:b5:8c:f5:ae:63:66:75:f6:5a:ab:4a:7f:25:
         41:34:36:d6:0c:f4:91:da:94:3d:9d:0f:f8:aa:e5:7f:47:dc:
         67:90:02:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----