Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/5CF4D986098811EDA8DF68F2F1222468.roa
File:                     5CF4D986098811EDA8DF68F2F1222468.roa (raw, json)
Hash identifier:          3v8yinXXDaceqylPdb3ebVnUHVEOOqc5xcAE7eDxP+s=
Subject key identifier:   71:00:96:21:27:BE:A3:3F:18:E8:02:5E:BA:87:79:08:4C:EF:F6:1A
Certificate issuer:       /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial:       0D
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/5CF4D986098811EDA8DF68F2F1222468.roa
Signing time:             Fri 22 Jul 2022 06:34:40 +0000
ROA not before:           Fri 22 Jul 2022 06:34:35 +0000
ROA not after:            Fri 21 Jul 2023 06:34:35 +0000
asID:                     37028
IP address blocks:        41.183.0.0/16 maxlen: 16
                          196.10.112.0/22 maxlen: 22
                          196.10.116.0/23 maxlen: 23
                          196.11.125.0/24 maxlen: 24
                          196.11.126.0/23 maxlen: 23
                          196.11.128.0/22 maxlen: 22
                          196.11.132.0/23 maxlen: 23
                          196.11.134.0/24 maxlen: 24
                          2c0f:fdf8::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
        Validity
            Not Before: Jul 22 06:34:35 2022 GMT
            Not After : Jul 21 06:34:35 2023 GMT
        Subject: CN=62da4500-21d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:62:f4:84:ba:56:b7:0e:46:bd:fb:3d:0a:
                    e9:63:cb:4b:f3:0c:1c:93:49:43:2e:6d:43:91:24:
                    8e:91:2b:c9:2f:f8:be:c9:89:3f:c8:14:77:38:54:
                    75:15:be:4e:1c:0d:c3:5b:ba:6c:71:b5:fc:9a:39:
                    b9:dd:1f:c9:f5:b6:1c:18:70:64:fd:97:88:64:4b:
                    d8:60:f5:9b:c4:dd:66:f2:d6:9a:87:e3:25:43:de:
                    77:85:96:5a:23:df:60:9b:2e:6d:e6:21:b2:da:e4:
                    26:30:9d:b2:10:63:fd:db:31:05:09:ba:67:43:17:
                    57:26:98:91:e5:b8:a9:40:e0:f9:47:ab:e6:8d:8c:
                    b7:98:03:3a:bc:dd:a4:cc:8b:39:bb:7a:21:9f:78:
                    e1:8f:81:e7:8b:f7:9a:2f:10:d8:fd:3f:9b:64:e3:
                    7d:8b:33:e0:3b:0c:b1:4e:5d:15:d5:e0:8a:4c:c2:
                    9b:c9:7a:c6:74:b9:67:b7:d5:41:23:57:74:a4:bf:
                    35:1c:af:bf:32:bd:90:51:48:5f:0c:5b:fd:e1:f3:
                    ea:22:5a:05:7d:34:0a:7a:14:93:39:34:9d:2a:aa:
                    a7:2e:cf:81:20:01:e9:de:25:49:88:b3:42:13:bd:
                    19:ad:b5:20:0e:25:eb:ba:88:e9:80:5b:56:2f:7b:
                    d7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:00:96:21:27:BE:A3:3F:18:E8:02:5E:BA:87:79:08:4C:EF:F6:1A
            X509v3 Authority Key Identifier:
                keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/5CF4D986098811EDA8DF68F2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.183.0.0/16
                  196.10.112.0-196.10.117.255
                  196.11.125.0-196.11.134.255
                IPv6:
                  2c0f:fdf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:e2:7c:dd:f5:b4:d0:86:69:a4:df:2b:9a:b2:54:ef:db:ad:
         92:c2:ae:d0:de:41:61:c3:d6:e6:18:72:8a:f7:5e:cd:42:cc:
         eb:f0:b5:89:b1:fa:2a:d1:8d:d3:3d:86:34:2c:7c:77:43:0b:
         f2:19:98:20:8d:0e:7a:f6:8e:b4:56:c4:fa:1e:9a:dc:a7:4a:
         91:43:2c:1d:6e:4e:ac:5c:f2:ff:d0:b8:9e:1c:ce:7c:85:33:
         08:96:33:c2:35:9a:48:d1:7b:21:8c:97:9e:0a:59:14:12:f3:
         fa:47:6c:3b:81:da:e5:39:8f:02:8e:56:ab:af:db:a4:b0:21:
         7e:f0:ef:91:3f:bd:41:0d:00:f0:ce:88:0a:1a:84:1d:89:20:
         36:85:78:41:29:3a:33:8f:b4:dc:21:9f:da:73:7e:21:a9:b1:
         7d:81:86:02:f1:d7:73:c9:d1:9a:d7:d9:e1:6a:83:1b:62:5b:
         8d:ed:8b:ba:ce:95:b0:a6:86:a5:24:eb:42:56:95:31:13:b2:
         50:67:86:75:7e:61:81:23:01:f5:4f:95:2d:73:57:fe:25:bf:
         1e:11:27:b9:e7:82:bb:ca:8a:38:c7:2c:ba:47:35:96:ab:be:
         10:95:11:43:99:4c:e1:c8:de:dd:59:25:ad:ae:65:d8:e4:c4:
         82:03:e2:20
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZG
ODU0QUFGMTEwLwYDVQQFEygzNjg5MjY3OUIyRTBDODVGNTU2RDk0N0RGMjE5MTYx
OUJBMkFCRkU2MB4XDTIyMDcyMjA2MzQzNVoXDTIzMDcyMTA2MzQzNVowGDEWMBQG
A1UEAwwNNjJkYTQ1MDAtMjFkMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ+FYvSEula3Dka9+z0K6WPLS/MMHJNJQy5tQ5EkjpEryS/4vsmJP8gUdzhU
dRW+ThwNw1u6bHG1/Jo5ud0fyfW2HBhwZP2XiGRL2GD1m8TdZvLWmofjJUPed4WW
WiPfYJsubeYhstrkJjCdshBj/dsxBQm6Z0MXVyaYkeW4qUDg+Uer5o2Mt5gDOrzd
pMyLObt6IZ944Y+B54v3mi8Q2P0/m2TjfYsz4DsMsU5dFdXgikzCm8l6xnS5Z7fV
QSNXdKS/NRyvvzK9kFFIXwxb/eHz6iJaBX00CnoUkzk0nSqqpy7PgSAB6d4lSYiz
QhO9Ga21IA4l67qI6YBbVi9718MCAwEAAaOCAs8wggLLMB0GA1UdDgQWBBRxAJYh
J76jPxjoAl66h3kITO/2GjAfBgNVHSMEGDAWgBQ2iSZ5suDIX1VtlH3yGRYZuiq/
5jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Rjg1NEEvMjAyRUQyMDIwOEY0MTFFRDkyN0MwRDk4RjEyMjI0NjgvTm9rbWVi
TGd5RjlWYlpSOThoa1dHYm9xdi1ZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTm9rbWViTGd5RjlWYlpSOThoa1dHYm9xdi1ZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Rjg1NEEvMjAyRUQyMDIwOEY0MTFFRDkyN0MwRDk4RjEy
MjI0NjgvNUNGNEQ5ODYwOTg4MTFFREE4REY2OEYyRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDBJBggrBgEFBQcBBwEB/wQ6MDgwJwQCAAEwIQMDACm3MAwDBATECnADBAHECnQw
DAMEAMQLfQMEAMQLhjANBAIAAjAHAwUALA/9+DANBgkqhkiG9w0BAQsFAAOCAQEA
veJ83fW00IZppN8rmrJU79utksKu0N5BYcPW5hhyivdezULM6/C1ibH6KtGN0z2G
NCx8d0ML8hmYII0OevaOtFbE+h6a3KdKkUMsHW5OrFzy/9C4nhzOfIUzCJYzwjWa
SNF7IYyXngpZFBLz+kdsO4Ha5TmPAo5Wq6/bpLAhfvDvkT+9QQ0A8M6IChqEHYkg
NoV4QSk6M4+03CGf2nN+IamxfYGGAvHXc8nRmtfZ4WqDG2Jbje2Lus6VsKaGpSTr
QlaVMROyUGeGdX5hgSMB9U+VLXNX/iW/HhEnueeCu8qKOMcsukc1lqu+EJURQ5lM
4cje3Vklra5l2OTEggPiIA==
-----END CERTIFICATE-----