Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/EE85126C90FE11EAA1EC8D70F8AEA228.roa
File:                     EE85126C90FE11EAA1EC8D70F8AEA228.roa (raw, json)
Hash identifier:          3pdGDBouFgfCJaNGf9knXpVy3ZDI7jAuGCmUwAZW+4c=
Subject key identifier:   D6:A0:9C:33:5B:79:FD:14:52:1A:A3:67:2A:C6:99:A9:9A:2A:FE:C8
Certificate issuer:       /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial:       0C
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/EE85126C90FE11EAA1EC8D70F8AEA228.roa
Signing time:             Fri 08 May 2020 07:38:39 +0000
ROA not before:           Sat 09 May 2020 07:38:34 +0000
ROA not after:            Fri 31 May 2030 07:38:34 +0000
asID:                     37518
IP address blocks:        196.48.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
        Validity
            Not Before: May  9 07:38:34 2020 GMT
            Not After : May 31 07:38:34 2030 GMT
        Subject: CN=5eb50c7f-706f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:b7:cb:05:d5:17:ee:ba:79:7a:75:3e:55:
                    b8:fa:77:a7:e1:47:1d:89:15:57:14:de:b0:5b:fe:
                    d9:dc:e1:67:e4:95:44:cf:21:5c:e0:a0:ed:56:36:
                    a8:07:ec:9a:7b:c1:75:91:00:09:94:5d:26:4d:27:
                    fe:2a:73:7e:00:d1:f4:6a:1e:40:bb:c3:db:6e:2b:
                    06:b8:42:1e:c6:7b:35:c1:cd:f6:2f:f9:5a:9c:3f:
                    a1:70:c4:cc:13:cf:75:1e:75:b6:c3:fe:a9:0c:8b:
                    4a:ed:f2:4a:2e:e7:64:eb:f1:f3:40:2f:37:74:c8:
                    dc:09:37:d2:77:82:f2:f3:03:2a:03:13:3c:8c:43:
                    53:12:6f:bc:fd:47:9f:67:8b:37:b7:e7:31:c9:47:
                    90:75:b4:a8:76:fe:cb:5c:cc:c1:81:63:da:ea:8d:
                    80:b5:6d:24:06:9b:6d:81:e0:7d:e4:3e:f7:19:79:
                    6d:c3:de:9f:b8:89:a7:cc:b5:20:d1:9b:d1:a6:a0:
                    3d:0c:70:47:5f:aa:26:3e:71:b2:0f:08:8f:2d:d7:
                    52:a9:fd:d6:eb:16:8b:f5:07:66:f4:a6:7b:c9:91:
                    b4:93:96:18:9e:34:f7:51:0e:fa:5f:39:5b:8d:54:
                    69:2a:ce:d9:5b:7e:e5:eb:cf:98:47:16:ca:3b:ae:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A0:9C:33:5B:79:FD:14:52:1A:A3:67:2A:C6:99:A9:9A:2A:FE:C8
            X509v3 Authority Key Identifier:
                keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/EE85126C90FE11EAA1EC8D70F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:66:c0:8b:3b:02:34:70:6a:bf:8f:ed:68:c4:dc:7c:85:ad:
         5a:80:0f:f5:37:51:77:a3:7e:ea:06:76:04:8d:e2:12:01:f3:
         98:88:2b:ec:d4:e1:8a:b5:17:a5:f9:83:99:f6:17:9e:b8:01:
         ba:28:fc:fb:b9:1a:f6:8d:33:fe:ea:b3:9a:88:2e:45:6a:fa:
         fc:ee:05:92:c6:75:38:16:a5:31:a2:fc:31:a6:e2:75:b0:6d:
         db:6c:3d:d1:4b:b5:a1:1f:7e:68:ab:c8:84:21:a5:4c:80:26:
         38:91:bf:a5:e1:f7:03:74:1f:88:46:bc:02:a0:01:ba:85:5e:
         8b:a2:14:94:7c:43:6f:c6:3c:c4:0d:a6:17:87:65:33:06:e1:
         6c:c4:2d:03:c1:5a:33:17:7a:a9:77:05:fa:9f:7c:e8:0e:c4:
         88:f7:b0:01:98:67:d9:dd:3b:89:ab:0a:b5:4a:89:d9:4a:92:
         b8:48:e2:28:31:20:4e:ef:8a:bc:2c:98:c0:d1:8b:d5:47:89:
         18:ae:10:ea:fe:c8:7c:d6:25:da:55:19:bc:33:9a:d4:b0:fa:
         84:86:45:b1:3c:5d:d8:da:a7:69:d6:08:f6:2d:6c:f5:b8:3e:
         a4:f2:ed:8f:4b:de:ed:33:f8:f9:17:43:1b:00:1f:8e:50:6e:
         c7:7f:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----