Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/6D9C088A86BF11E9B9C29D30F8AEA228.roa
File:                     6D9C088A86BF11E9B9C29D30F8AEA228.roa (raw, json)
Hash identifier:          kFvsnmoXPqvs66cCnVZ5/eQkCTR3PO6lTuQDNy+kAzI=
Subject key identifier:   21:B1:52:D2:C4:36:71:07:91:6D:80:30:CD:08:93:79:08:44:C1:BF
Certificate issuer:       /CN=F36ED057AF/serialNumber=44BE4CE57E115E0BCB34E6B9EB0C5723AEBD2274
Certificate serial:       02
Authority key identifier: 44:BE:4C:E5:7E:11:5E:0B:CB:34:E6:B9:EB:0C:57:23:AE:BD:22:74
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RL5M5X4RXgvLNOa56wxXI669InQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/6D9C088A86BF11E9B9C29D30F8AEA228.roa
Signing time:             Tue 04 Jun 2019 11:53:55 +0000
ROA not before:           Tue 04 Jun 2019 11:53:49 +0000
ROA not after:            Mon 04 Jun 2029 11:53:49 +0000
asID:                     328423
IP address blocks:        102.68.180.0/22 maxlen: 24
                          2c0f:ecb0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED057AF/serialNumber=44BE4CE57E115E0BCB34E6B9EB0C5723AEBD2274
        Validity
            Not Before: Jun  4 11:53:49 2019 GMT
            Not After : Jun  4 11:53:49 2029 GMT
        Subject: CN=5cf65bd3-eef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:c9:a1:8f:ba:ab:39:af:1f:cb:df:e2:ea:
                    1f:2d:18:ae:1e:34:b9:27:53:ff:e1:54:55:91:73:
                    5f:78:d9:fb:33:e8:af:1d:c7:66:62:9d:91:a9:4d:
                    8b:76:7f:5a:eb:c5:1f:59:ab:cf:b8:55:a4:75:47:
                    44:40:80:c8:e5:d6:4a:fd:3e:6b:70:3f:26:0f:c3:
                    36:f6:a5:5d:57:e3:90:cb:31:43:dd:d6:12:32:38:
                    45:57:af:bc:e6:73:9a:51:01:60:76:76:8b:6d:2f:
                    53:aa:99:1b:db:3a:52:3a:1c:10:07:2f:44:a7:24:
                    5b:ef:65:cb:4f:4c:ca:f7:00:2e:63:3a:59:a9:9d:
                    3f:00:4b:d5:56:66:cf:3e:78:44:56:11:d4:0b:92:
                    de:4e:bd:2a:13:d9:b7:9a:6e:da:a1:41:7d:f2:57:
                    d7:b6:74:1b:15:5d:63:6f:e4:e0:2b:b2:9c:20:86:
                    6e:63:ba:80:29:9a:8d:7f:78:87:32:f3:e0:93:4f:
                    9c:cd:e2:63:4f:7d:ff:b6:4b:90:43:88:01:0a:68:
                    15:4a:29:72:46:89:b2:96:59:32:ed:96:1f:b1:57:
                    fd:48:2c:11:0d:b9:79:56:0c:ca:69:e7:c9:d5:96:
                    01:09:a7:37:fa:47:77:d8:18:48:d1:74:d4:99:97:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B1:52:D2:C4:36:71:07:91:6D:80:30:CD:08:93:79:08:44:C1:BF
            X509v3 Authority Key Identifier:
                keyid:44:BE:4C:E5:7E:11:5E:0B:CB:34:E6:B9:EB:0C:57:23:AE:BD:22:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RL5M5X4RXgvLNOa56wxXI669InQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/6D9C088A86BF11E9B9C29D30F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.180.0/22
                IPv6:
                  2c0f:ecb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:22:c1:66:41:4c:56:0f:c5:97:2d:6e:bb:22:ed:cc:8a:
         c3:06:62:81:0f:00:13:31:f0:23:b8:23:4d:7a:98:73:d9:75:
         f0:b0:a5:8e:91:fd:fd:85:47:3d:38:cf:51:64:d1:91:e9:61:
         80:ec:5e:3a:7b:b0:80:39:10:43:2e:2d:00:45:5d:2f:af:ef:
         72:ef:dd:69:78:ed:57:5c:1e:f0:42:23:11:ee:e2:a5:02:0c:
         16:03:e7:64:e9:5a:82:dc:5d:35:fc:ec:64:63:d2:61:99:75:
         33:6d:f7:a9:ee:fa:28:3e:2a:79:85:17:8e:2d:21:a5:5a:7d:
         66:20:39:97:4f:52:70:80:4b:19:40:6a:8d:f9:e3:cf:bb:00:
         4f:0c:40:2f:1f:f6:36:17:c7:54:8e:7f:f9:db:1f:2b:c2:82:
         93:80:22:2a:58:43:4f:f2:bb:59:90:35:4c:69:34:23:c6:e1:
         0a:ec:20:56:e9:e6:a6:d3:69:f6:4e:ee:90:2f:51:a3:3b:bf:
         3a:20:40:69:c5:c8:2b:d5:63:3e:03:12:64:d4:d6:26:7f:8d:
         8f:cc:1e:87:38:53:3f:2d:14:5b:f7:d1:a3:47:ea:f2:14:7d:
         01:21:20:3f:ec:c3:2c:87:52:88:aa:99:d5:08:ea:e9:13:de:
         46:82:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----