Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/1139055EE72211EC877698A3F1222468.roa
File:                     1139055EE72211EC877698A3F1222468.roa (raw, json)
Hash identifier:          PQTSfUr7l1LFcX6+vR+3C4ZXFIqOgSINJTO0cXOvJNU=
Subject key identifier:   AA:6A:FB:11:55:AE:DE:DB:6C:07:C0:F7:8C:DF:E6:56:DE:CE:32:4C
Certificate issuer:       /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial:       05
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/1139055EE72211EC877698A3F1222468.roa
Signing time:             Wed 08 Jun 2022 11:56:45 +0000
ROA not before:           Wed 08 Jun 2022 11:56:41 +0000
ROA not after:            Sat 08 Jun 2024 11:56:41 +0000
asID:                     328155
IP address blocks:        154.65.84.0/22 maxlen: 22
                          2c0f:f610:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
        Validity
            Not Before: Jun  8 11:56:41 2022 GMT
            Not After : Jun  8 11:56:41 2024 GMT
        Subject: CN=62a08e7d-785c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0b:01:cc:7a:d0:8e:b2:4b:d3:c5:c1:c6:9d:
                    2b:ef:44:b3:0f:53:1c:50:82:a3:c1:71:90:c3:58:
                    c7:37:cd:3d:e4:96:c4:3b:33:8c:f8:bd:c9:0b:16:
                    a4:26:3d:ca:35:64:a9:88:f9:da:92:74:98:4e:de:
                    c6:17:47:40:72:8d:3a:7d:d1:29:6e:5a:fe:fd:13:
                    09:de:0a:63:f7:c1:47:ec:de:80:d0:6c:0b:eb:e6:
                    44:32:c0:1b:e1:8a:9f:91:60:04:e9:ae:ce:83:e9:
                    7b:bb:75:b7:7b:32:5f:a4:82:45:01:9d:5f:26:4c:
                    0c:9b:29:bd:74:86:ca:3a:18:7a:01:5c:92:4e:1b:
                    b8:5d:0f:db:89:df:36:de:a7:0c:51:d9:cf:53:51:
                    0a:42:5c:c0:7c:01:e8:d7:3e:d9:ae:04:aa:3e:d5:
                    4f:ec:45:36:0a:64:92:c7:cd:47:57:9b:c7:97:5b:
                    ab:7a:5e:92:36:3f:51:c1:51:80:c0:8b:a4:d0:7b:
                    b4:f1:ed:63:83:3b:e3:ce:b3:c0:07:7b:ce:86:77:
                    b7:79:7b:ad:32:63:9b:28:ad:cf:cf:00:b6:68:80:
                    8c:ce:06:c5:86:bc:0a:41:18:eb:11:f0:6a:80:1c:
                    cc:e2:60:7a:7a:2f:b9:4b:08:e1:32:64:eb:4c:8c:
                    4f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6A:FB:11:55:AE:DE:DB:6C:07:C0:F7:8C:DF:E6:56:DE:CE:32:4C
            X509v3 Authority Key Identifier:
                keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/1139055EE72211EC877698A3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.65.84.0/22
                IPv6:
                  2c0f:f610:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         05:5d:dc:b2:a6:28:39:37:9b:7c:81:27:8b:5d:17:5c:52:64:
         64:11:b5:79:9b:0d:7f:cb:3b:5e:1b:64:93:52:eb:5f:04:06:
         23:b8:d2:f6:25:46:1d:e2:7f:3d:43:37:c1:bd:c6:f4:39:f4:
         18:1e:86:a2:aa:48:b9:26:d0:34:ec:3b:36:39:42:ae:30:1f:
         40:f0:e7:d8:68:c3:5c:a3:4b:91:af:5d:09:e0:7c:ec:9a:98:
         4d:86:cf:3c:b2:fa:dc:37:94:d3:1f:02:3b:db:49:32:72:40:
         29:c5:91:c4:51:34:1c:4f:d2:9b:84:85:47:48:f8:37:5c:26:
         ca:67:5c:66:67:4f:2a:3e:09:5e:f8:82:21:f8:99:b2:53:05:
         bc:91:64:d7:2a:9e:ce:fb:5c:76:33:b9:9b:5b:86:7c:d8:8f:
         91:62:b9:de:89:39:5f:f1:b4:21:d7:e4:2e:a7:39:f6:23:43:
         58:6c:73:da:fe:98:94:d9:c6:f3:72:14:2e:f2:41:47:1a:ee:
         79:31:30:26:b5:98:36:c1:c6:27:b6:90:5d:1d:10:3a:30:dd:
         1e:19:57:17:a1:88:7a:77:5d:ce:01:1b:4c:76:e9:eb:0f:63:
         94:06:ba:50:ad:08:7c:9d:9d:3a:0a:68:9e:ea:9f:4e:a2:91:
         8a:93:a4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----