Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/808019FC4B7D11ECA4E0276ED8A014CE.roa
File:                     808019FC4B7D11ECA4E0276ED8A014CE.roa (raw, json)
Hash identifier:          AdAl+MUIjjNDqe0FLBLAaYUYuuKFrQttZxvz9Cz72/Y=
Subject key identifier:   95:DB:B0:AF:2E:DF:3C:34:96:33:B6:A6:77:F6:72:9C:F5:ED:AE:46
Certificate issuer:       /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial:       AD
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/808019FC4B7D11ECA4E0276ED8A014CE.roa
Signing time:             Mon 22 Nov 2021 10:18:14 +0000
ROA not before:           Mon 22 Nov 2021 10:18:10 +0000
ROA not after:            Sun 30 Nov 2031 10:18:10 +0000
asID:                     327901
IP address blocks:        102.221.120.0/24 maxlen: 24
                          102.221.121.0/24 maxlen: 24
                          102.221.122.0/24 maxlen: 24
                          102.221.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Aug 2022 15:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
        Validity
            Not Before: Nov 22 10:18:10 2021 GMT
            Not After : Nov 30 10:18:10 2031 GMT
        Subject: CN=619b6e66-b4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fe:b7:86:57:c9:c5:83:42:42:73:39:5f:0b:
                    68:95:aa:24:b9:89:0e:a4:1f:f0:f8:2f:2c:34:91:
                    5e:7a:37:0e:e5:ca:48:a6:39:53:31:e7:19:19:aa:
                    52:bc:9b:2a:4d:99:0d:28:9d:66:86:f4:4b:f4:b3:
                    92:29:e1:ab:6d:53:03:d2:11:a2:0c:a2:70:e5:9f:
                    fe:f9:8d:3b:25:7d:3c:55:cf:9e:73:f4:7b:5b:6b:
                    3a:4e:0d:3a:35:08:3a:b9:f9:79:03:a6:8c:c8:d4:
                    c1:6d:57:c5:11:ca:cf:dc:9f:6e:98:df:33:bd:a5:
                    85:5c:91:41:74:ed:1b:90:f2:3e:c1:17:6f:61:5f:
                    3c:11:bf:f5:01:b6:58:f2:a3:5e:93:94:58:5e:e6:
                    b7:b1:f0:36:49:3b:52:c4:71:40:66:ef:14:61:8d:
                    ce:6b:32:74:d5:b1:c8:7e:a6:ea:d0:94:2f:3a:c8:
                    71:86:44:73:de:54:f0:7c:b2:2e:51:1e:b1:19:e3:
                    1b:40:14:e8:a6:e6:28:02:bb:cc:f4:46:80:46:db:
                    aa:d3:1c:f0:01:94:3f:72:79:e0:f1:ff:11:d0:d4:
                    49:0f:42:22:2c:9c:13:75:11:4e:88:e3:b7:7a:ef:
                    9d:19:98:74:d5:20:1a:da:78:91:bd:64:b2:5a:f8:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DB:B0:AF:2E:DF:3C:34:96:33:B6:A6:77:F6:72:9C:F5:ED:AE:46
            X509v3 Authority Key Identifier:
                keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/808019FC4B7D11ECA4E0276ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:17:74:ca:75:a4:61:ca:a2:6b:58:76:4e:01:8b:b4:5c:17:
         35:cb:cb:05:15:18:b5:30:a3:3a:ef:3b:d3:89:b9:b7:60:0e:
         da:ec:21:6a:7e:cf:15:a6:8f:2a:1d:82:0f:e0:91:4f:b5:b7:
         eb:91:01:2d:b5:86:c1:b1:65:1f:91:fe:39:fa:ce:a5:54:37:
         63:68:1c:c5:9b:61:bb:34:d2:3f:88:ff:fe:29:8e:92:65:4f:
         64:16:8c:49:a0:3d:b0:87:43:91:25:9e:a3:1b:4b:88:f9:02:
         da:4e:cd:7d:e2:8e:d2:57:3c:be:7e:07:67:f1:8f:ad:6d:81:
         fd:f8:df:74:1f:2c:9c:f8:e7:25:c5:0b:bf:33:87:7f:64:df:
         4f:1a:79:22:20:f6:3e:40:ab:e5:e7:2f:c0:ed:52:31:6f:d0:
         71:35:4d:26:02:11:88:eb:28:4e:66:dc:8c:26:c7:18:b3:aa:
         a3:27:1f:63:8e:1f:de:ad:61:88:4e:dc:dd:89:f1:a9:24:4d:
         05:38:63:2a:82:46:9e:b9:e2:14:49:af:50:26:1a:08:c5:5b:
         53:36:ce:82:b2:a2:b9:49:e7:9d:4c:7a:ec:ac:ac:5e:71:d6:
         31:c5:ca:98:e2:1d:31:19:08:15:6b:1d:39:86:ba:e0:46:94:
         7e:c0:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----