Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/08F2C264FB9411ECB1F3559DF1222468.roa
File:                     08F2C264FB9411ECB1F3559DF1222468.roa (raw, json)
Hash identifier:          MenddUtCvN7/wa6JMN9XJRwMJg69Ju4p5IK4QgZ0uvY=
Subject key identifier:   38:39:6E:39:3E:DA:9F:07:F2:54:15:EC:83:CC:B1:59:75:D7:0F:7F
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0707
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/08F2C264FB9411ECB1F3559DF1222468.roa
Signing time:             Mon 04 Jul 2022 12:22:57 +0000
ROA not before:           Mon 04 Jul 2022 12:22:53 +0000
ROA not after:            Thu 04 Jul 2024 12:22:53 +0000
asID:                     40676
IP address blocks:        102.129.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul  4 12:22:53 2022 GMT
            Not After : Jul  4 12:22:53 2024 GMT
        Subject: CN=62c2dba0-7bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:72:fb:cf:27:59:64:90:51:7c:10:d4:bb:
                    6d:29:d5:6f:7c:e2:28:5e:59:85:5f:4b:d9:10:6a:
                    d2:14:62:ff:e6:17:95:21:0d:d8:91:4a:37:51:c6:
                    e2:d3:1b:58:d0:0d:0b:32:d7:31:75:de:0c:c6:f2:
                    2b:4f:80:0c:ad:2d:ab:11:e5:24:3a:3a:92:1d:02:
                    44:a3:16:18:93:ce:73:e7:65:c8:b6:78:9f:1b:32:
                    f6:b1:45:93:8e:f1:0a:c5:30:0b:a5:10:ed:ee:af:
                    e8:53:6d:78:0b:f5:d8:f5:6d:6b:e5:12:27:2a:8c:
                    12:a6:b4:d2:76:93:f3:71:08:20:ca:29:a1:8e:72:
                    ed:ef:ad:1a:dd:e9:90:8d:31:c1:c1:1e:54:f2:94:
                    5f:3f:b1:99:bf:c2:60:7e:e5:0a:22:02:d6:78:e7:
                    44:9c:9b:9a:f5:e0:ad:34:6b:06:4c:06:f4:96:0f:
                    1e:b9:2d:86:88:e2:99:1e:53:05:fc:37:e5:cc:9b:
                    31:d1:78:49:f0:54:11:2f:78:ca:c2:d7:97:64:e2:
                    dc:9a:25:22:ec:1e:b7:de:a4:87:c0:6a:92:c9:5c:
                    49:d1:26:e9:fb:2b:17:d8:43:f0:78:f1:e4:6d:0b:
                    25:e6:6e:ff:6c:31:eb:c0:32:0c:af:41:08:3b:ce:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:39:6E:39:3E:DA:9F:07:F2:54:15:EC:83:CC:B1:59:75:D7:0F:7F
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/08F2C264FB9411ECB1F3559DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:c5:92:05:d3:b1:39:ca:eb:9c:2b:8b:c9:f1:b9:84:a8:a3:
         a4:d6:f7:f1:1e:06:8f:9e:08:ea:85:c1:96:ec:a0:69:8f:83:
         5f:51:d7:37:b0:2c:23:c5:dc:dd:dd:c0:3f:3a:ef:77:1b:50:
         28:53:52:8a:c5:fd:01:9d:69:6b:22:99:7f:f9:06:4a:f8:a0:
         eb:9a:a2:44:48:1a:5b:10:e9:74:61:1d:63:d6:70:4d:e8:88:
         2b:35:33:fb:69:89:68:fb:21:81:84:f6:d4:10:4e:1d:8c:66:
         39:65:a1:41:b4:ce:ff:5b:eb:29:92:f0:91:a0:bc:26:49:26:
         82:9f:3b:fb:ff:a5:ae:a9:d5:a9:8b:d9:1c:cf:0e:00:c2:31:
         38:66:e5:4a:94:fa:d1:8f:fe:b7:38:bb:e4:00:a4:02:97:cd:
         9a:1f:1b:e3:dd:f9:af:aa:e7:ae:24:89:24:17:65:55:b4:cb:
         f8:7a:43:fa:39:20:c3:0d:90:37:7e:9d:21:e4:46:e2:6e:bf:
         52:e8:e5:a0:f5:a5:33:2e:7a:5e:6d:a0:22:7f:9b:20:b9:4d:
         9f:3d:8b:69:12:cc:2a:53:d8:ce:f5:7c:08:05:f5:f0:0f:d9:
         5e:4f:88:58:a6:e4:11:04:54:83:26:3f:fd:1d:40:23:87:d1:
         70:f8:46:f7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA3MDQxMjIyNTNaFw0yNDA3MDQxMjIyNTNaMBgxFjAU
BgNVBAMMDTYyYzJkYmEwLTdiZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYznL7zydZZJBRfBDUu20p1W984iheWYVfS9kQatIUYv/mF5UhDdiRSjdR
xuLTG1jQDQsy1zF13gzG8itPgAytLasR5SQ6OpIdAkSjFhiTznPnZci2eJ8bMvax
RZOO8QrFMAulEO3ur+hTbXgL9dj1bWvlEicqjBKmtNJ2k/NxCCDKKaGOcu3vrRrd
6ZCNMcHBHlTylF8/sZm/wmB+5QoiAtZ450Scm5r14K00awZMBvSWDx65LYaI4pke
UwX8N+XMmzHReEnwVBEveMrC15dk4tyaJSLsHrfepIfAapLJXEnRJun7KxfYQ/B4
8eRtCyXmbv9sMevAMgyvQQg7zt2RAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUODlu
OT7anwfyVBXsg8yxWXXXD38wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzA4RjJDMjY0RkI5NDExRUNCMUYzNTU5REYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgaQwDQYJKoZIhvcNAQEL
BQADggEBAC/FkgXTsTnK65wri8nxuYSoo6TW9/EeBo+eCOqFwZbsoGmPg19R1zew
LCPF3N3dwD8673cbUChTUorF/QGdaWsimX/5Bkr4oOuaokRIGlsQ6XRhHWPWcE3o
iCs1M/tpiWj7IYGE9tQQTh2MZjlloUG0zv9b6ymS8JGgvCZJJoKfO/v/pa6p1amL
2RzPDgDCMThm5UqU+tGP/rc4u+QApAKXzZofG+Pd+a+q564kiSQXZVW0y/h6Q/o5
IMMNkDd+nSHkRuJuv1Lo5aD1pTMuel5toCJ/myC5TZ89i2kSzCpT2M71fAgF9fAP
2V5PiFim5BEEVIMmP/0dQCOH0XD4Rvc=
-----END CERTIFICATE-----
Generated at Mon Aug 28 08:59:42 2023 by rpki-client on console-fra.rpki-client.org