Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/81AC8ABECF6711EB84BB2D27F8AEA228.roa
File:                     81AC8ABECF6711EB84BB2D27F8AEA228.roa (raw, json)
Hash identifier:          zeJ5+BFHA2Dr4mxmKqy/8bFIgqrab7TgjbeN5w+Zewk=
Subject key identifier:   82:A9:3A:B2:EA:A3:75:96:FB:E5:2E:55:A0:D9:1F:C1:C3:79:BA:5C
Certificate issuer:       /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial:       02
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/81AC8ABECF6711EB84BB2D27F8AEA228.roa
Signing time:             Thu 17 Jun 2021 12:28:23 +0000
ROA not before:           Thu 17 Jun 2021 12:28:17 +0000
ROA not after:            Wed 31 Dec 2031 12:28:17 +0000
asID:                     327901
IP address blocks:        102.141.128.0/18 maxlen: 23
                          102.219.116.0/22 maxlen: 23
                          102.220.148.0/22 maxlen: 23
                          102.221.120.0/22 maxlen: 23
                          102.222.168.0/22 maxlen: 23
                          196.201.232.0/21 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
        Validity
            Not Before: Jun 17 12:28:17 2021 GMT
            Not After : Dec 31 12:28:17 2031 GMT
        Subject: CN=60cb3fe7-eea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:49:4c:c3:42:99:0f:cf:75:a9:9c:4e:3d:
                    43:2f:fc:a4:31:12:57:12:c8:b7:83:43:f4:b4:a5:
                    2c:41:63:fb:9d:85:d6:64:d6:3d:a1:04:e0:bd:91:
                    7f:d6:3d:69:47:4c:2f:79:f2:76:8a:e1:22:24:ce:
                    5a:32:81:a0:13:ba:81:5c:f1:dd:4f:b2:1b:52:2a:
                    39:fc:e8:f6:51:bc:d0:b7:4c:e9:72:79:42:0e:ea:
                    1f:77:a8:ea:a7:ca:58:82:95:3f:ec:c7:80:08:5a:
                    59:4b:3b:c0:ef:cb:c1:93:bc:21:d4:64:ef:21:43:
                    7d:b6:a8:15:e0:ed:57:a6:81:68:44:b8:9b:d6:c3:
                    b7:13:fd:1b:94:b0:9f:27:b5:6d:ae:35:fc:85:72:
                    31:42:1b:9e:c1:77:78:53:6c:47:25:4b:9d:84:50:
                    98:6e:f5:36:60:64:e1:fb:c3:c2:0e:e5:fd:7e:56:
                    6c:4d:84:77:d7:cf:56:1d:0e:8f:85:e5:0d:b7:61:
                    8f:98:8c:fb:8b:9e:7f:61:b0:95:45:3a:3f:8c:4c:
                    90:91:44:73:a6:9b:18:7b:f8:a2:62:d7:dc:c8:94:
                    b8:ef:76:a3:3d:39:fd:b4:19:fb:12:6c:2a:d2:1c:
                    d8:ec:7d:d1:a9:a4:75:32:25:e6:af:85:0f:6e:95:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:3A:B2:EA:A3:75:96:FB:E5:2E:55:A0:D9:1F:C1:C3:79:BA:5C
            X509v3 Authority Key Identifier:
                keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/81AC8ABECF6711EB84BB2D27F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.141.128.0/18
                  102.219.116.0/22
                  102.220.148.0/22
                  102.221.120.0/22
                  102.222.168.0/22
                  196.201.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:74:d8:56:e7:2b:8b:35:52:80:65:19:27:d8:00:96:07:c4:
         58:80:78:6d:1a:9e:ce:42:df:02:58:d6:b3:06:c6:58:37:f2:
         9d:4c:f4:15:a9:58:53:ae:1f:f1:ca:89:51:08:65:b8:03:af:
         94:ec:a6:88:fc:26:c9:f2:47:2e:17:6d:e9:6a:a7:12:56:52:
         5c:cc:1e:fe:ec:c5:3a:5a:66:cd:8a:1b:1b:fe:37:d3:98:b2:
         4c:9e:06:3a:9b:60:8f:95:8b:e1:69:5f:62:10:01:84:1a:da:
         e3:7a:0c:9f:de:5d:d2:32:0d:75:68:1e:e8:34:d6:bb:5b:15:
         c7:8c:3c:88:5a:f9:3b:bf:a2:fa:3f:48:10:b4:59:6f:05:b1:
         4c:da:ff:86:45:d7:2c:e1:1d:f6:e5:2c:04:8d:db:ec:20:76:
         a8:06:33:5f:37:d1:ae:6c:7c:08:49:ce:87:4a:a4:08:68:48:
         2c:c0:ae:d3:5f:69:85:c3:f7:3f:9c:37:64:a8:b0:a9:97:66:
         37:a7:63:6c:7f:fc:4a:95:bf:fd:e2:13:e1:63:b0:12:23:b3:
         63:79:43:75:b8:90:de:e6:e7:94:a1:cb:fb:4a:75:d0:35:7d:
         b3:b0:74:43:e2:74:f2:0f:10:91:80:1c:f2:f4:dc:fc:c3:46:
         50:2c:0b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----