Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/CCBCE1B490FE11EABCDD5F70F8AEA228.roa
File:                     CCBCE1B490FE11EABCDD5F70F8AEA228.roa (raw, json)
Hash identifier:          yTklvOT5pBPm3NA053XrxjCEoeh/S0Zqv48I9lwKPDU=
Subject key identifier:   DF:4A:57:4B:38:E5:EF:E7:E0:4B:C4:CA:4D:42:E8:FB:A1:D2:00:63
Certificate issuer:       /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial:       0A
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/CCBCE1B490FE11EABCDD5F70F8AEA228.roa
Signing time:             Fri 08 May 2020 07:37:42 +0000
ROA not before:           Sat 09 May 2020 07:37:38 +0000
ROA not after:            Fri 31 May 2030 07:37:38 +0000
asID:                     37518
IP address blocks:        196.59.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
        Validity
            Not Before: May  9 07:37:38 2020 GMT
            Not After : May 31 07:37:38 2030 GMT
        Subject: CN=5eb50c46-785f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:05:f6:e4:02:01:f5:32:60:6a:c3:76:ef:84:
                    da:8d:6f:76:26:b3:16:3c:db:26:a3:c2:de:db:4b:
                    63:c0:ac:41:0c:ea:7f:08:59:41:43:27:30:5c:0b:
                    14:b0:5f:35:25:01:ed:fc:6c:cd:e6:57:04:7c:d7:
                    b2:a3:2a:20:e5:29:98:d3:3e:51:14:8a:d1:6d:01:
                    74:25:fe:76:a9:30:bd:de:f0:87:8a:e0:e0:b9:3b:
                    54:c5:b1:52:3d:f0:c3:31:e2:04:a7:93:76:16:c8:
                    ec:e8:f1:ad:a5:39:d7:31:c1:a2:b1:2e:0b:1b:8c:
                    11:59:2c:9b:20:0d:7a:af:f8:f4:d0:94:6a:dd:0f:
                    7a:10:0a:98:72:c7:cd:2e:3b:fd:84:f9:7e:32:f0:
                    7c:23:cc:ef:65:45:5b:54:f4:5d:81:57:8e:1b:a2:
                    52:cb:f2:f4:21:dc:18:0c:53:a3:08:02:06:ad:3a:
                    83:28:e4:4e:2e:ae:d4:2a:d7:16:48:ae:9b:b8:82:
                    1e:a8:2d:9b:7b:00:e0:33:0b:9a:23:52:f9:91:8d:
                    8e:f1:39:5f:ac:a4:28:b5:df:0d:a6:f2:65:4b:fc:
                    48:66:ce:d5:90:92:38:6a:ae:08:51:8a:79:99:eb:
                    60:ed:75:ab:ec:46:29:05:8e:6f:0d:a7:f4:a5:ea:
                    cc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4A:57:4B:38:E5:EF:E7:E0:4B:C4:CA:4D:42:E8:FB:A1:D2:00:63
            X509v3 Authority Key Identifier:
                keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/CCBCE1B490FE11EABCDD5F70F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.59.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:36:21:bf:c2:9d:f1:82:10:bd:19:8d:f7:77:04:df:8a:65:
         bc:8e:93:05:29:31:fd:81:ac:dc:e8:9f:e9:03:9e:52:aa:b5:
         a2:44:3f:0c:2a:06:89:31:d5:76:05:34:08:37:a8:11:da:50:
         15:27:e4:14:60:94:35:68:5b:45:1b:ec:48:14:a7:27:fb:8c:
         c9:4a:91:a2:95:cd:86:12:5b:56:69:bb:7f:2a:ed:a5:0d:7d:
         9c:34:74:36:66:58:ed:a8:e0:af:da:4f:26:47:cc:e3:00:cd:
         2b:87:de:1b:53:84:fc:92:67:79:3f:5f:e9:2d:ae:ee:ca:a1:
         83:16:f1:f9:7a:22:12:7a:13:e5:b7:9b:ba:da:ee:f2:c2:12:
         19:a8:68:9d:42:7f:ad:8d:5d:6c:41:2f:d2:1c:fa:49:ca:35:
         26:73:89:d9:d7:b6:88:12:41:12:57:99:dd:96:53:52:17:cd:
         1d:bc:ee:84:e3:71:d2:05:14:13:f7:95:d9:10:7b:3e:8c:0d:
         d3:94:89:3d:d2:10:0c:b7:ff:09:8c:44:bf:41:e0:3f:73:c0:
         fc:c0:cc:2f:ce:76:e5:6b:18:ed:17:b3:2a:0e:bf:c5:5d:3e:
         9c:e7:38:a7:ae:35:c1:9f:7b:e9:5f:12:d9:e0:37:f3:d0:7a:
         ea:eb:1a:0a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
NjAzNEFGMTEwLwYDVQQFEyhDNzAyNzk5RUE0QkQ1REJBM0VEM0QwNjlBNzE5MUI5
NDFCNUE3NzlBMB4XDTIwMDUwOTA3MzczOFoXDTMwMDUzMTA3MzczOFowGDEWMBQG
A1UEAxMNNWViNTBjNDYtNzg1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPAF9uQCAfUyYGrDdu+E2o1vdiazFjzbJqPC3ttLY8CsQQzqfwhZQUMnMFwL
FLBfNSUB7fxszeZXBHzXsqMqIOUpmNM+URSK0W0BdCX+dqkwvd7wh4rg4Lk7VMWx
Uj3wwzHiBKeTdhbI7OjxraU51zHBorEuCxuMEVksmyANeq/49NCUat0PehAKmHLH
zS47/YT5fjLwfCPM72VFW1T0XYFXjhuiUsvy9CHcGAxTowgCBq06gyjkTi6u1CrX
Fkium7iCHqgtm3sA4DMLmiNS+ZGNjvE5X6ykKLXfDabyZUv8SGbO1ZCSOGquCFGK
eZnrYO11q+xGKQWObw2n9KXqzAsCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBTfSldL
OOXv5+BLxMpNQuj7odIAYzAfBgNVHSMEGDAWgBTHAnmepL1duj7T0GmnGRuUG1p3
mjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjYwMzQvRDkxNjc1OEE5MEZDMTFFQTlEODEzMDZFRjhBRUEyMjgveHdKNW5x
UzlYYm8tMDlCcHB4a2JsQnRhZDVvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveHdKNW5xUzlYYm8tMDlCcHB4a2JsQnRhZDVvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjYwMzQvRDkxNjc1OEE5MEZDMTFFQTlEODEzMDZFRjhB
RUEyMjgvQ0NCQ0UxQjQ5MEZFMTFFQUJDREQ1RjcwRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMQ7MA0GCSqGSIb3DQEBCwUA
A4IBAQADNiG/wp3xghC9GY33dwTfimW8jpMFKTH9gazc6J/pA55SqrWiRD8MKgaJ
MdV2BTQIN6gR2lAVJ+QUYJQ1aFtFG+xIFKcn+4zJSpGilc2GEltWabt/Ku2lDX2c
NHQ2ZljtqOCv2k8mR8zjAM0rh94bU4T8kmd5P1/pLa7uyqGDFvH5eiISehPlt5u6
2u7ywhIZqGidQn+tjV1sQS/SHPpJyjUmc4nZ17aIEkESV5ndllNSF80dvO6E43HS
BRQT95XZEHs+jA3TlIk90hAMt/8JjES/QeA/c8D8wMwvznblaxjtF7MqDr/FXT6c
5zinrjXBn3vpXxLZ4Dfz0Hrq6xoK
-----END CERTIFICATE-----