Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B0EF77ECE59511ECB629ECB5F1222468.roa
File:                     B0EF77ECE59511ECB629ECB5F1222468.roa (raw, json)
Hash identifier:          DQRjY4qEWu/2hWuZrbV6VSqsFw2kKeuWEkcz4I6WHos=
Subject key identifier:   24:17:B3:F6:0F:FC:A5:54:03:6D:E0:86:4D:F1:45:4E:50:5B:54:B0
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0681
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B0EF77ECE59511ECB629ECB5F1222468.roa
Signing time:             Mon 06 Jun 2022 12:39:22 +0000
ROA not before:           Mon 06 Jun 2022 12:39:17 +0000
ROA not after:            Thu 06 Jun 2024 12:39:17 +0000
asID:                     40676
IP address blocks:        102.129.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun  6 12:39:17 2022 GMT
            Not After : Jun  6 12:39:17 2024 GMT
        Subject: CN=629df57a-446d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:52:2d:28:ad:fb:6a:47:89:36:43:3d:5e:
                    92:79:19:5d:8f:fe:a4:8a:80:82:c2:db:ed:2b:69:
                    09:d0:33:31:22:b4:8a:8c:ad:71:7b:7b:2d:a6:1d:
                    02:d3:dc:2a:8c:5e:4c:c0:a3:86:a6:ba:2e:21:a8:
                    a0:01:a1:96:00:03:49:a8:70:dc:fc:85:a1:a4:68:
                    ec:9c:4b:c2:12:8d:ed:2b:fe:d9:14:2a:f1:df:c4:
                    a7:59:57:e7:74:f9:bd:bf:a3:ad:f7:74:4a:7a:65:
                    b7:30:2d:17:c6:38:bd:8b:1a:a0:8e:76:18:75:ac:
                    60:c7:4f:78:a2:de:93:68:32:00:81:a6:cc:0d:9a:
                    d5:9c:b6:dd:a8:f2:35:d6:6d:80:f6:b0:27:7a:31:
                    5a:65:29:4b:26:ac:6c:9d:75:f6:41:6f:d7:4d:df:
                    9d:45:b3:2a:71:5e:60:b7:58:a8:a5:e3:4f:d8:08:
                    ed:8f:7d:7a:35:bb:32:de:b7:e0:bc:84:93:7d:f0:
                    b4:8f:75:7c:83:d4:21:16:c9:94:9e:8f:8c:1a:ec:
                    3c:43:c9:54:4b:59:7d:fd:d8:7e:0a:58:8a:19:a7:
                    70:16:82:e9:e3:ce:b9:93:7c:98:ab:36:1a:90:5d:
                    d7:8d:0d:f8:20:ce:10:a6:21:84:81:93:9e:6a:ca:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:17:B3:F6:0F:FC:A5:54:03:6D:E0:86:4D:F1:45:4E:50:5B:54:B0
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B0EF77ECE59511ECB629ECB5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:64:48:bc:e3:9b:f9:7d:9c:61:ff:50:de:cf:8b:eb:6d:cd:
         e1:3a:e8:4b:b0:ba:0c:09:96:e3:b0:67:e3:e3:09:47:91:0c:
         32:e5:3c:70:33:60:ba:79:5c:6b:26:cc:26:ba:f9:39:ef:a8:
         bf:fd:27:35:29:06:99:cc:a5:1c:ba:fd:7d:2b:fa:ad:cf:70:
         4a:75:84:bf:03:2f:81:3f:ec:68:fb:92:49:a7:fa:55:ff:d6:
         ca:93:19:59:75:b8:f2:79:be:07:9e:23:9d:ff:01:27:e1:f7:
         a0:db:29:c4:65:74:ea:e9:a2:8f:f3:02:2a:3f:cc:c2:c9:e8:
         6a:8a:c5:2d:0d:1b:ea:48:81:86:64:06:e3:d8:8b:22:dd:82:
         25:3b:47:22:de:ae:71:4b:c9:69:f0:73:db:95:ea:a8:e4:37:
         de:c8:b1:ef:db:fb:8d:62:f3:cd:4b:d2:65:a6:1e:ea:d5:cb:
         8a:dc:a0:fd:11:49:5e:05:0e:30:d5:4e:8e:7a:10:b9:7d:ca:
         7d:66:44:76:3d:72:0d:c9:25:c8:4f:a8:7f:fb:f0:ed:9e:cc:
         6f:eb:84:fe:4d:db:60:da:64:07:28:df:cb:6d:9b:95:54:f4:
         79:bf:e7:b9:1b:02:04:24:9e:8d:e8:43:59:41:3f:03:53:c9:
         c3:03:91:fd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA2MDYxMjM5MTdaFw0yNDA2MDYxMjM5MTdaMBgxFjAU
BgNVBAMMDTYyOWRmNTdhLTQ0NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEJ1ItKK37akeJNkM9XpJ5GV2P/qSKgILC2+0raQnQMzEitIqMrXF7ey2m
HQLT3CqMXkzAo4amui4hqKABoZYAA0mocNz8haGkaOycS8ISje0r/tkUKvHfxKdZ
V+d0+b2/o633dEp6ZbcwLRfGOL2LGqCOdhh1rGDHT3ii3pNoMgCBpswNmtWctt2o
8jXWbYD2sCd6MVplKUsmrGyddfZBb9dN351FsypxXmC3WKil40/YCO2PfXo1uzLe
t+C8hJN98LSPdXyD1CEWyZSej4wa7DxDyVRLWX392H4KWIoZp3AWgunjzrmTfJir
NhqQXdeNDfggzhCmIYSBk55qyhoJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJBez
9g/8pVQDbeCGTfFFTlBbVLAwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0IwRUY3N0VDRTU5NTExRUNCNjI5RUNCNUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYUwDQYJKoZIhvcNAQEL
BQADggEBADFkSLzjm/l9nGH/UN7Pi+ttzeE66EuwugwJluOwZ+PjCUeRDDLlPHAz
YLp5XGsmzCa6+TnvqL/9JzUpBpnMpRy6/X0r+q3PcEp1hL8DL4E/7Gj7kkmn+lX/
1sqTGVl1uPJ5vgeeI53/ASfh96DbKcRldOrpoo/zAio/zMLJ6GqKxS0NG+pIgYZk
BuPYiyLdgiU7RyLernFLyWnwc9uV6qjkN97Ise/b+41i881L0mWmHurVy4rcoP0R
SV4FDjDVTo56ELl9yn1mRHY9cg3JJchPqH/78O2ezG/rhP5N22DaZAco38ttm5VU
9Hm/57kbAgQkno3oQ1lBPwNTycMDkf0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org