Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/E500E088314411EEADD5F43F4AD9E6FC.roa
File:                     E500E088314411EEADD5F43F4AD9E6FC.roa (raw, json)
Hash identifier:          Iw2uo3Tm6zXhgvFTiZeqEUycUaVM3MiM8P2/6VZgQHE=
Subject key identifier:   E1:63:01:B9:AF:A4:13:2E:79:28:31:BB:D7:39:F4:37:11:27:01:FC
Certificate issuer:       /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Certificate serial:       02
Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/E500E088314411EEADD5F43F4AD9E6FC.roa
Signing time:             Wed 02 Aug 2023 14:57:26 +0000
ROA not before:           Wed 02 Aug 2023 14:57:23 +0000
ROA not after:            Wed 31 Aug 2033 14:57:23 +0000
asID:                     329083
IP address blocks:        102.215.222.0/23 maxlen: 23
                          2001:43fd:6000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
        Validity
            Not Before: Aug  2 14:57:23 2023 GMT
            Not After : Aug 31 14:57:23 2033 GMT
        Subject: CN=64ca6ed6-6f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:07:31:e4:b7:ff:73:e8:3b:16:7d:b1:34:d4:
                    aa:30:16:d6:fc:53:80:52:86:ed:81:38:19:e3:fd:
                    10:97:2b:4c:46:00:bf:b8:d5:d6:6d:e4:af:ab:9d:
                    31:c6:24:6d:da:85:6e:cd:32:1e:95:5d:7d:49:52:
                    1f:8f:f9:35:2a:33:10:12:c4:ca:c7:40:8f:31:0b:
                    ff:00:1f:bb:42:62:0f:54:dd:1a:ff:eb:ef:82:de:
                    44:88:46:eb:02:df:ff:82:c9:f4:12:0a:74:c2:db:
                    aa:3f:3c:0e:af:6d:fe:63:cd:d7:be:f6:ca:e8:35:
                    bb:13:ba:bc:9e:de:14:72:bd:79:40:ec:f7:e7:bc:
                    d3:e4:f4:73:0a:6a:14:f6:2c:95:5f:d5:27:b1:20:
                    58:91:4c:41:4a:19:66:45:d0:46:31:d8:04:6e:a4:
                    ba:74:a1:9c:5d:e7:fa:10:da:35:2d:c8:2b:f6:f5:
                    df:69:40:83:05:88:16:3f:ff:2e:71:60:8c:6e:b2:
                    6e:e6:cb:8d:32:c6:68:8e:b8:6f:fc:f8:ee:db:49:
                    e8:de:86:e5:40:bc:56:65:69:77:20:a5:e6:32:4d:
                    94:a9:28:b8:5c:61:61:7a:04:b3:23:54:86:63:61:
                    28:17:7b:d0:13:43:fe:bf:24:3c:3c:a7:1a:ba:03:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:01:B9:AF:A4:13:2E:79:28:31:BB:D7:39:F4:37:11:27:01:FC
            X509v3 Authority Key Identifier:
                keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/E500E088314411EEADD5F43F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.222.0/23
                IPv6:
                  2001:43fd:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:d1:1e:2b:63:cd:ff:64:18:6f:11:19:cd:b7:e3:9a:cd:52:
         f8:c0:ce:fe:02:18:89:b3:43:47:e1:6c:d2:2b:18:9e:80:46:
         9e:b4:fe:ae:68:cc:33:a9:2c:ed:35:cd:cb:2b:e0:f8:77:77:
         70:9a:ad:d8:b3:ef:f6:e0:59:fe:60:82:37:23:37:8c:49:a2:
         bd:9f:94:f3:bf:57:9a:32:75:e0:f1:0a:c9:66:1e:70:c2:af:
         f3:62:a1:6f:ad:f4:b2:e3:73:c8:dc:c9:97:8e:00:94:88:05:
         2a:55:cd:8a:94:35:d1:8c:8a:31:6a:11:62:19:dc:b3:ea:35:
         4f:5f:f0:1e:f2:5b:d5:e3:fd:6b:79:f4:72:cb:f0:4c:89:b5:
         ea:20:0e:c2:e1:b9:cd:00:c5:e5:18:73:e0:53:f5:05:ec:53:
         b9:f5:53:a3:e4:89:24:31:90:a3:83:dd:46:73:5c:92:93:39:
         5c:56:14:e4:fd:26:e1:ea:f9:27:da:ec:05:a1:7b:fe:06:e3:
         2e:94:ef:de:0b:00:25:ac:ed:53:30:3c:6c:1f:f8:e1:a4:19:
         f7:48:cf:a8:f0:1f:6e:32:bd:cf:1a:8c:55:36:c4:09:66:4e:
         35:3e:43:d6:47:eb:94:6a:4c:6d:57:e8:a3:ae:ac:61:5d:53:
         a1:3d:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----