Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/AB546D523CCD11EE8061A7374AD9E6FC.roa
File:                     AB546D523CCD11EE8061A7374AD9E6FC.roa (raw, json)
Hash identifier:          l7DiYrSzVFAB9yuOolcu88zmuwGXvXNQyTczcy7wSOk=
Subject key identifier:   00:5A:C4:B8:8C:1D:F6:36:B3:41:90:C2:A7:94:3E:F5:7F:C4:7E:41
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       016E
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/AB546D523CCD11EE8061A7374AD9E6FC.roa
Signing time:             Thu 17 Aug 2023 07:14:13 +0000
ROA not before:           Thu 17 Aug 2023 07:14:10 +0000
ROA not after:            Tue 17 Aug 2027 07:14:10 +0000
asID:                     4809
IP address blocks:        154.72.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
        Validity
            Not Before: Aug 17 07:14:10 2023 GMT
            Not After : Aug 17 07:14:10 2027 GMT
        Subject: CN=64ddc8c5-2bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d3:6a:2d:9f:2d:a1:92:30:07:9e:24:79:c0:
                    3d:a8:61:06:a1:34:1a:95:48:b5:8b:1b:a9:96:5f:
                    0f:a1:33:23:7b:98:0c:a2:99:1e:34:76:8f:80:57:
                    53:dc:49:5c:0b:34:58:fd:7a:cc:cc:41:11:14:ea:
                    e5:cc:60:c8:72:31:2f:17:08:d8:31:1a:a9:cf:83:
                    6a:64:a8:93:b9:fc:5f:ea:28:ae:24:9d:77:e6:71:
                    65:57:9a:3c:73:77:a0:24:fc:66:03:22:8c:a5:af:
                    d0:ad:2e:42:d7:d9:f7:f6:15:c5:07:35:2a:b1:51:
                    cd:ab:7f:06:67:37:43:ac:8c:af:38:ad:66:81:d4:
                    9d:25:1b:04:97:c7:1f:db:51:0f:0d:11:ec:2b:da:
                    48:36:48:b8:20:02:3d:99:23:89:fa:e5:2a:98:c4:
                    d7:9e:6c:95:1c:c8:e6:26:91:a3:fe:4d:e3:d0:7f:
                    ab:fd:e1:46:99:c0:d7:40:3f:d1:aa:b7:b6:b2:f9:
                    27:52:bc:58:a6:63:48:5a:de:a6:a4:9e:2d:1c:06:
                    22:a4:ac:b6:06:52:15:cd:1f:9e:e3:59:b4:d6:a1:
                    55:ca:8b:58:28:af:58:02:6f:64:4f:17:09:15:94:
                    9d:12:2f:e1:fe:6f:4e:ef:1c:5f:46:94:e3:73:cd:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5A:C4:B8:8C:1D:F6:36:B3:41:90:C2:A7:94:3E:F5:7F:C4:7E:41
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/AB546D523CCD11EE8061A7374AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.72.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:e1:48:01:59:57:7b:3d:4a:70:82:96:b4:c1:f9:ca:fc:be:
         93:28:7e:f0:d9:96:b1:86:74:89:a5:77:12:0d:98:d8:36:71:
         c9:48:69:ed:55:37:f6:0f:bf:ac:c4:f3:62:e4:80:00:09:a1:
         da:f6:ef:bc:16:da:60:42:49:7e:b6:7a:a0:7f:85:6f:b9:c5:
         b3:35:b0:b9:46:4b:de:f3:ec:f1:75:64:7e:0e:58:13:0a:01:
         b1:b6:90:85:39:96:59:fa:df:33:a3:f6:0b:91:96:7b:4a:8d:
         fb:1e:8b:2b:1f:21:2e:f9:5b:a2:44:29:7d:8d:7f:04:63:27:
         ab:86:3e:b3:67:8e:8a:77:96:3e:e2:b2:ae:32:88:1b:70:af:
         47:77:e0:d2:66:8b:6e:4b:bd:0c:74:aa:cc:ac:81:62:93:94:
         c3:ff:71:36:ab:bb:b3:fb:8f:f0:27:b1:21:cc:30:8b:f6:e3:
         0d:70:1f:1d:15:f8:e6:2e:a6:b8:00:13:52:06:f2:3f:46:88:
         9c:01:52:d8:e1:32:c8:7a:12:d5:84:b1:46:3c:97:90:1c:ba:
         bb:03:8e:30:2d:74:5a:79:8e:82:d5:05:eb:44:41:be:50:4c:
         13:a9:75:05:e7:ec:20:72:d8:6c:6b:b4:64:4e:07:f3:fa:17:
         04:f6:63:b8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1
QzBCQ0I0MDE0OTAeFw0yMzA4MTcwNzE0MTBaFw0yNzA4MTcwNzE0MTBaMBgxFjAU
BgNVBAMTDTY0ZGRjOGM1LTJiYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDW02otny2hkjAHniR5wD2oYQahNBqVSLWLG6mWXw+hMyN7mAyimR40do+A
V1PcSVwLNFj9eszMQREU6uXMYMhyMS8XCNgxGqnPg2pkqJO5/F/qKK4knXfmcWVX
mjxzd6Ak/GYDIoylr9CtLkLX2ff2FcUHNSqxUc2rfwZnN0OsjK84rWaB1J0lGwSX
xx/bUQ8NEewr2kg2SLggAj2ZI4n65SqYxNeebJUcyOYmkaP+TePQf6v94UaZwNdA
P9Gqt7ay+SdSvFimY0ha3qakni0cBiKkrLYGUhXNH57jWbTWoVXKi1gor1gCb2RP
FwkVlJ0SL+H+b07vHF9GlONzzZp/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAFrE
uIwd9jazQZDCp5Q+9X/EfkEwHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0
AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh
Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYx
MjIyNDY4L0FCNTQ2RDUyM0NDRDExRUU4MDYxQTczNzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaSCkwDQYJKoZIhvcNAQEL
BQADggEBAM7hSAFZV3s9SnCClrTB+cr8vpMofvDZlrGGdImldxINmNg2cclIae1V
N/YPv6zE82LkgAAJodr277wW2mBCSX62eqB/hW+5xbM1sLlGS97z7PF1ZH4OWBMK
AbG2kIU5lln63zOj9guRlntKjfseiysfIS75W6JEKX2NfwRjJ6uGPrNnjop3lj7i
sq4yiBtwr0d34NJmi25LvQx0qsysgWKTlMP/cTaru7P7j/AnsSHMMIv24w1wHx0V
+OYuprgAE1IG8j9GiJwBUtjhMsh6EtWEsUY8l5AcursDjjAtdFp5joLVBetEQb5Q
TBOpdQXn7CBy2GxrtGROB/P6FwT2Y7g=
-----END CERTIFICATE-----
Generated at Thu Dec 28 06:22:21 2023 by rpki-client on console-fra.rpki-client.org