Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8BD97D3EF2FC11EDB9A99A844AD9E6FC.roa
File:                     8BD97D3EF2FC11EDB9A99A844AD9E6FC.roa (raw, json)
Hash identifier:          xREFu6/rg9nWAmLOFa8c48W16xZy0WhlhTy8xS94jI8=
Subject key identifier:   87:8A:16:FB:77:77:B8:58:85:48:65:E1:00:00:D6:1B:66:11:D8:2A
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       04
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8BD97D3EF2FC11EDB9A99A844AD9E6FC.roa
Signing time:             Mon 15 May 2023 08:43:21 +0000
ROA not before:           Mon 15 May 2023 08:43:17 +0000
ROA not after:            Wed 15 May 2030 08:43:17 +0000
asID:                     61317
IP address blocks:        102.212.4.0/24 maxlen: 24
                          102.212.5.0/24 maxlen: 24
                          102.212.6.0/24 maxlen: 24
                          102.212.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 20:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: May 15 08:43:17 2023 GMT
            Not After : May 15 08:43:17 2030 GMT
        Subject: CN=6461f0a9-996b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:0c:30:0f:55:6e:d8:1b:94:4d:00:ff:b9:
                    2d:99:f5:e7:18:80:9e:0f:58:6c:05:75:24:6e:da:
                    79:9b:32:b0:18:f2:75:41:23:d7:1d:61:39:3e:20:
                    d5:aa:94:35:22:6e:3d:78:1f:6e:76:23:fb:49:c5:
                    5b:5d:3f:fa:3b:da:5f:3c:bf:6e:25:a0:a4:88:54:
                    80:82:4b:fc:31:08:b1:ed:46:1e:6f:83:1d:dd:b7:
                    6f:8b:19:fd:7a:f4:69:94:53:9c:5b:70:7c:09:3a:
                    f5:f5:e0:b7:4d:d3:86:2e:1d:d0:c3:60:3c:47:6a:
                    53:a0:8a:8a:24:59:6d:79:1b:0f:8f:33:5c:61:5d:
                    a3:c0:21:54:c6:76:20:5b:2f:be:d4:b5:8a:63:f6:
                    2a:ec:a9:21:a8:70:1d:11:ea:f9:cd:55:e4:50:72:
                    4d:49:18:c3:46:30:2f:a1:64:ab:15:fd:a9:ae:d5:
                    49:44:6e:55:f0:87:3b:ed:0a:82:5d:9c:84:4e:d8:
                    1a:1f:d0:f8:9c:96:6f:9d:b7:cc:e0:36:c9:47:c3:
                    ef:b8:cd:ba:d7:1a:16:c2:99:c6:3b:f0:d7:40:2d:
                    72:df:4d:c1:50:2c:a2:27:94:6e:bf:f1:94:97:31:
                    b0:6a:09:c9:82:36:04:d5:1f:63:7d:ba:41:d5:38:
                    9b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8A:16:FB:77:77:B8:58:85:48:65:E1:00:00:D6:1B:66:11:D8:2A
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8BD97D3EF2FC11EDB9A99A844AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:18:ce:91:b6:a7:59:ac:97:d2:cc:3f:0a:4b:af:1a:80:a6:
         b5:5b:b1:8a:79:43:5b:62:58:ee:7d:d4:61:92:80:a3:7f:60:
         4f:de:f3:b0:ed:22:ee:b4:14:6f:08:9d:ea:3c:c3:f1:67:25:
         ff:7b:ce:0f:87:23:60:c2:c9:cd:70:30:99:a3:93:54:59:8f:
         d8:e6:bd:60:50:84:65:1c:ee:82:b4:0d:0d:17:38:2f:61:cc:
         38:c7:ee:04:d5:2b:97:b2:a5:64:a8:55:43:9f:14:c5:2c:36:
         56:36:32:b0:1d:c7:1d:1d:a4:06:18:82:6c:54:fb:3d:8a:ab:
         57:83:54:f0:d3:dc:cc:e9:22:6f:90:f7:a0:1c:c3:d3:e2:22:
         a0:17:ed:a4:cb:d9:3c:bb:1a:3c:07:b3:f9:36:08:93:b6:2e:
         70:72:47:e2:b8:23:c2:e9:bc:c3:7e:f1:93:79:34:e0:fa:47:
         9a:76:a3:f3:76:d9:81:9c:b8:ee:f6:83:2d:f3:0a:81:2d:93:
         c1:2f:c6:dd:90:ec:7c:f5:ae:26:34:ff:d6:0e:c2:39:d8:9c:
         17:38:59:71:02:de:62:cd:62:4f:4f:29:f5:53:5e:60:c0:3d:
         a7:57:a7:84:3a:6a:1c:23:f3:60:c7:4d:b8:d8:ec:d1:59:59:
         be:25:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----