Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/6341E66CC8A611EC8CEE2FA0F1222468.roa
File:                     6341E66CC8A611EC8CEE2FA0F1222468.roa (raw, json)
Hash identifier:          p/JNhZl/6YKDBTVjiHdEXcF2u4W+jGRWDdwhPMn/ruw=
Subject key identifier:   A9:FF:4B:4B:E9:7A:9B:0C:A7:DE:39:09:6A:7C:4A:25:07:AF:50:E6
Certificate issuer:       /CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
Certificate serial:       02
Authority key identifier: 7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/6341E66CC8A611EC8CEE2FA0F1222468.roa
Signing time:             Sat 30 Apr 2022 16:55:50 +0000
ROA not before:           Sat 30 Apr 2022 16:55:43 +0000
ROA not after:            Thu 30 Apr 2026 16:55:43 +0000
asID:                     29286
IP address blocks:        196.200.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
        Validity
            Not Before: Apr 30 16:55:43 2022 GMT
            Not After : Apr 30 16:55:43 2026 GMT
        Subject: CN=626d6a16-ce98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:63:a1:d7:27:1e:fb:a7:e7:5f:f3:b3:81:
                    4a:46:86:05:1a:f9:5e:8f:58:66:20:1a:e8:c7:5d:
                    f1:51:2a:23:67:ef:27:e0:64:68:0b:76:67:7a:fc:
                    68:68:9b:6a:f0:fa:03:0a:39:05:35:17:8c:b0:bf:
                    ba:28:55:81:b2:97:a5:70:93:1e:49:dc:2e:80:72:
                    a7:59:a6:e3:4c:d2:d8:a8:d6:be:af:94:ca:33:46:
                    d4:4b:7f:1a:7e:75:5d:6a:3e:69:2c:30:23:cb:b3:
                    b3:77:aa:a2:21:a3:36:35:f2:03:cc:a1:0c:65:e2:
                    21:90:f3:91:3e:c9:20:8d:ed:e9:51:3e:ee:e0:21:
                    51:83:15:64:d0:dc:76:72:30:d0:70:3c:ff:bd:44:
                    91:7a:88:ae:32:c8:18:d5:06:d4:03:ad:fd:54:6e:
                    1f:f4:f0:45:4c:ae:49:ca:e0:05:09:ee:70:2b:56:
                    be:40:8c:6d:e1:c7:51:eb:5b:98:3d:e7:24:d5:23:
                    02:b5:11:8a:e9:17:9e:83:fe:55:ed:5a:a4:91:ba:
                    c8:c5:bd:36:ff:e0:56:0e:8d:73:ba:63:8b:33:28:
                    4e:e2:b2:46:0f:52:40:4b:25:a4:f4:16:9f:14:16:
                    69:fd:a2:64:04:d0:db:37:eb:08:6c:14:d2:98:fa:
                    a2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FF:4B:4B:E9:7A:9B:0C:A7:DE:39:09:6A:7C:4A:25:07:AF:50:E6
            X509v3 Authority Key Identifier:
                keyid:7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/6341E66CC8A611EC8CEE2FA0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.200.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:63:ad:55:1c:7d:26:fe:dc:6a:b9:42:71:71:26:81:ed:ed:
         b2:9f:c5:ee:35:7e:05:20:dc:9b:47:db:a6:e6:76:0e:ea:18:
         c3:b0:8e:f0:20:19:c7:73:b1:94:bb:cc:ed:1e:da:91:a6:aa:
         7a:1b:3c:aa:9e:7e:98:22:f1:69:9f:6b:6c:cb:b8:a6:40:2c:
         9f:9c:59:04:d4:2e:a8:57:7e:1d:e5:f4:f2:3e:70:f3:cd:0d:
         e0:21:cd:4e:d4:da:2a:58:af:6a:6a:e7:c2:0d:e5:da:77:75:
         38:43:ca:b3:e1:67:c5:0b:44:a5:93:56:ae:49:5f:5c:90:23:
         61:79:4c:2f:2e:96:71:0d:0b:07:8c:25:59:5b:05:46:5c:cf:
         58:b1:32:e1:74:a5:54:6f:f1:9a:90:29:a4:5b:cd:3e:cb:e1:
         03:2b:40:66:e0:a9:19:67:28:ad:c9:52:fd:72:07:5e:9f:a9:
         33:87:81:20:35:19:68:1a:e6:b6:d3:07:19:92:63:27:97:83:
         4b:09:d6:ca:d2:cf:75:69:62:d6:e3:93:29:f5:78:d9:b3:a5:
         df:16:aa:4f:f7:a8:98:70:86:ac:12:c3:99:45:e7:22:ef:21:
         5c:95:05:02:a0:f2:1d:0b:49:00:2a:0d:63:ca:e0:61:7d:ae:
         ea:5d:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----