Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2B9294C2F8B311ECA913ADF1F1222468.roa
File:                     2B9294C2F8B311ECA913ADF1F1222468.roa (raw, json)
Hash identifier:          mbb+dK6cMO8LSx/W7I339QxZjzY8hnLmTVo/NLyh8Ks=
Subject key identifier:   42:02:29:7E:F1:12:B1:4E:9D:1F:9E:AE:C1:56:A0:1B:CC:BF:AA:D2
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       06C9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2B9294C2F8B311ECA913ADF1F1222468.roa
Signing time:             Thu 30 Jun 2022 20:28:16 +0000
ROA not before:           Thu 30 Jun 2022 20:28:11 +0000
ROA not after:            Sun 30 Jun 2030 20:28:11 +0000
asID:                     61317
IP address blocks:        102.129.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737 (0x6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun 30 20:28:11 2022 GMT
            Not After : Jun 30 20:28:11 2030 GMT
        Subject: CN=62be075f-7712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:3a:10:1b:8b:e7:8e:99:e3:7a:53:30:36:
                    93:d2:de:cb:5a:9e:6e:7f:04:2e:9a:a7:80:07:4d:
                    58:a4:b8:a1:d8:97:17:84:2e:9d:9b:ee:dc:5d:f0:
                    58:54:78:93:a3:92:61:43:5b:21:d9:3d:32:c6:7e:
                    79:3f:99:f6:4f:e6:ea:8e:11:04:e7:a7:8e:7d:b8:
                    e8:9b:42:a4:28:d7:2a:b2:f4:68:4d:46:19:7d:95:
                    10:8a:20:98:f2:61:b9:83:af:50:2e:fa:e5:6a:e9:
                    ed:07:17:64:91:b1:6a:42:41:50:76:75:25:b1:7c:
                    91:7d:2f:eb:40:67:1a:49:30:bf:10:74:fc:d0:89:
                    1c:6e:df:f7:83:02:64:45:a6:ab:be:d0:41:40:50:
                    4e:18:fa:7c:48:5c:a3:00:cd:d1:c6:f0:73:c1:9a:
                    13:68:5f:1e:88:35:09:6f:bf:13:bd:bc:89:1b:ec:
                    c0:11:97:52:d1:90:7c:22:e1:d3:b4:f3:f9:90:78:
                    7c:20:6a:ea:35:6a:a4:2c:66:8e:b5:a7:1d:b3:37:
                    5c:5e:53:f7:14:71:b4:6e:6f:42:aa:88:75:d2:b3:
                    3a:29:41:ec:52:57:79:32:35:be:55:cc:47:16:7a:
                    b4:09:17:ac:5b:22:72:f5:a8:7d:8f:29:48:f7:b5:
                    29:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:02:29:7E:F1:12:B1:4E:9D:1F:9E:AE:C1:56:A0:1B:CC:BF:AA:D2
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2B9294C2F8B311ECA913ADF1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         02:4f:1d:1d:0f:e5:46:b1:f5:5a:dd:11:34:2f:09:d2:96:ec:
         15:bb:57:d5:a2:f9:e4:a9:9a:54:e4:1f:42:30:67:0f:00:03:
         1c:11:99:9b:93:42:01:67:51:c7:85:7f:a9:ea:ef:37:8f:3c:
         2f:33:52:a9:92:f5:a3:79:bf:07:47:1b:f1:97:77:1b:57:dd:
         a0:c2:12:52:c6:9f:d3:51:41:29:06:7c:b9:da:ab:7c:48:ba:
         ea:72:b3:07:64:1f:e9:cc:64:c3:e5:7a:74:6a:ba:d8:e8:80:
         4a:27:f8:15:a1:7b:6f:a4:1f:84:bb:1a:fd:9d:f0:6e:40:77:
         33:0c:89:87:c6:eb:9d:be:29:e7:12:ee:0e:1d:66:bf:20:ae:
         7b:a9:50:b5:24:7a:bd:69:73:7a:a7:d4:f0:d9:41:c8:e2:5c:
         c4:1e:ce:26:e8:fc:2f:f2:80:74:3b:3f:11:94:cc:ae:66:35:
         c8:30:94:c1:63:02:98:9c:bf:6b:3e:cb:af:95:e9:be:2e:23:
         ba:e8:02:25:c9:97:92:9d:b7:5f:be:63:8c:b5:a9:56:07:39:
         6e:f7:dd:b0:07:da:f3:98:d8:bf:53:31:e8:b7:78:d3:5a:8f:
         08:65:4c:09:e2:ba:68:25:17:ff:ce:6b:40:fe:2d:87:a6:84:
         96:66:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----