Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/7038B7A609AB11ED82026CE0F1222468.roa
File:                     7038B7A609AB11ED82026CE0F1222468.roa (raw, json)
Hash identifier:          g3xN/zpq1mfuKNpKQMYHbcL2Z2bkzfjgVPXgzV/nIQM=
Subject key identifier:   08:A5:1C:E6:E0:C8:9F:CA:F1:C9:37:EA:6D:04:B9:37:54:AC:BE:1B
Certificate issuer:       /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial:       14
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/7038B7A609AB11ED82026CE0F1222468.roa
Signing time:             Fri 22 Jul 2022 10:45:45 +0000
ROA not before:           Fri 22 Jul 2022 10:45:41 +0000
ROA not after:            Fri 21 Jul 2023 10:45:41 +0000
asID:                     37028
IP address blocks:        41.183.0.0/16 maxlen: 16
                          196.10.112.0/22 maxlen: 24
                          196.10.116.0/23 maxlen: 24
                          196.11.125.0/24 maxlen: 24
                          196.11.126.0/23 maxlen: 24
                          196.11.128.0/22 maxlen: 24
                          196.11.132.0/23 maxlen: 24
                          196.11.134.0/24 maxlen: 24
                          2c0f:fdf8::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
        Validity
            Not Before: Jul 22 10:45:41 2022 GMT
            Not After : Jul 21 10:45:41 2023 GMT
        Subject: CN=62da7fd8-f7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:70:e7:c9:4c:09:f0:e5:99:51:83:40:b5:
                    4c:e7:54:01:8f:dc:80:6b:79:83:84:0a:9a:1e:e5:
                    1f:e3:1f:7b:b3:27:9d:c8:53:17:9c:f3:39:61:44:
                    4e:25:7f:c9:e5:34:58:03:47:f9:f5:6a:a1:33:df:
                    22:37:86:57:dc:1a:8a:72:b5:7d:3f:9d:38:fb:d7:
                    47:07:43:08:b5:39:36:d0:c8:60:74:34:3a:68:15:
                    0f:33:21:9e:73:c5:cc:72:d4:c7:c7:27:7d:a4:4d:
                    6f:db:6d:ec:1b:1e:09:2e:74:3e:94:d6:b2:5d:20:
                    0c:b6:e5:80:bb:db:5b:2d:ed:a3:9f:31:82:3d:39:
                    02:24:72:18:2d:eb:5b:c1:80:44:f7:25:1e:20:1a:
                    45:16:a7:fa:b5:ed:e1:8e:07:8e:f7:97:c2:80:f3:
                    1f:b9:3f:03:1d:10:16:8d:1a:12:af:b5:33:5b:7b:
                    55:3e:60:f3:c8:b4:5b:26:12:c2:1b:20:8a:23:e1:
                    29:a7:5d:96:17:31:6d:57:8a:45:98:8b:77:fc:3a:
                    8b:df:3a:89:97:e7:b7:35:69:3a:06:19:b4:c5:6e:
                    82:46:18:10:ae:a5:af:52:26:c7:53:75:2a:5e:02:
                    a1:12:3f:0c:3a:25:58:ae:14:02:75:1c:9c:dd:c3:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A5:1C:E6:E0:C8:9F:CA:F1:C9:37:EA:6D:04:B9:37:54:AC:BE:1B
            X509v3 Authority Key Identifier:
                keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/7038B7A609AB11ED82026CE0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.183.0.0/16
                  196.10.112.0-196.10.117.255
                  196.11.125.0-196.11.134.255
                IPv6:
                  2c0f:fdf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:5a:93:4d:8e:1a:1a:a2:49:aa:87:2d:18:1f:58:7a:54:7c:
         7f:6f:c9:cd:ef:f0:6e:03:37:80:30:e3:41:7d:6b:6f:2c:da:
         ef:13:76:cd:87:29:a0:28:c9:a3:40:82:08:d0:a4:27:86:64:
         d1:35:ec:d1:e1:09:f4:d2:b5:97:0f:e7:d1:5c:f0:74:5f:1e:
         72:5e:9a:46:e9:6d:a0:9d:c7:ac:81:1c:0b:88:25:64:db:5b:
         39:f3:6a:57:f5:e9:44:ae:6c:98:39:44:4a:2c:84:5d:f6:5a:
         15:1a:2a:6e:0e:91:a5:6d:4e:ce:28:6a:d5:a5:22:45:2c:6c:
         7b:51:7f:33:40:cd:1d:3c:ee:d3:98:31:dd:fb:a4:ea:f3:a8:
         0d:a6:8b:d4:72:39:63:95:5e:be:a2:72:13:83:c5:60:86:83:
         f2:55:77:c6:c4:d9:3b:2a:8b:d5:e3:78:da:3e:77:a7:3b:9b:
         4a:ee:26:e6:0a:36:60:d4:c2:cb:09:bf:ef:ef:07:77:ed:7d:
         93:04:42:b7:86:2a:47:a0:b6:23:40:f2:e4:0a:ef:e1:6b:b4:
         5b:dd:16:e8:58:e2:a9:35:48:7a:89:c0:b9:7a:9d:31:b1:e4:
         6c:2b:8e:3c:f2:29:86:09:1a:44:04:db:38:db:ad:fb:e9:18:
         00:98:6d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----