Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/C4113EA008F411EDA171269AF1222468.roa
File:                     C4113EA008F411EDA171269AF1222468.roa (raw, json)
Hash identifier:          t1GYKh4wwg9096uWpmY+INM62twBXysrmbp3e5putJ4=
Subject key identifier:   C0:FF:61:FC:38:DE:5D:5C:87:FC:63:50:31:A0:40:6F:D4:C1:52:EC
Certificate issuer:       /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial:       02
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/C4113EA008F411EDA171269AF1222468.roa
Signing time:             Thu 21 Jul 2022 12:58:07 +0000
ROA not before:           Thu 21 Jul 2022 12:58:03 +0000
ROA not after:            Sun 20 Jul 2025 12:58:03 +0000
asID:                     37028
IP address blocks:        41.183.0.0/16 maxlen: 16
                          196.10.112.0/22 maxlen: 22
                          196.10.116.0/23 maxlen: 23
                          196.11.125.0/24 maxlen: 24
                          196.11.126.0/23 maxlen: 23
                          196.11.128.0/22 maxlen: 22
                          196.11.132.0/23 maxlen: 23
                          196.11.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
        Validity
            Not Before: Jul 21 12:58:03 2022 GMT
            Not After : Jul 20 12:58:03 2025 GMT
        Subject: CN=62d94d5f-3250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:49:00:85:92:c6:9e:67:96:52:da:6e:07:
                    d4:3b:04:1b:f5:71:a9:9a:26:f5:c0:02:64:4a:9a:
                    c4:00:1b:c6:ad:8a:ad:0a:11:20:ef:58:9a:62:e3:
                    db:4e:35:c1:65:f4:f8:74:a0:9b:df:0a:c0:8c:9d:
                    ad:26:9c:01:61:3b:89:ca:d3:1e:20:b8:44:fb:fb:
                    81:5f:e2:3c:b3:87:3f:94:a0:9e:8e:fb:9d:55:bf:
                    16:2c:d0:0b:c9:1b:fe:5b:1f:18:01:7c:53:9c:d0:
                    56:7b:89:7b:18:fe:17:aa:b7:5a:69:20:14:fa:99:
                    89:48:c6:24:4b:98:67:ea:4a:ce:cc:bb:7d:4f:19:
                    fc:3e:93:ff:f5:96:cc:27:73:4e:05:8c:11:54:01:
                    14:77:ee:22:4e:ae:ab:01:00:ed:3a:5e:54:a8:b3:
                    cf:bf:57:d3:3f:81:c4:09:1c:09:c5:f6:03:73:8d:
                    05:7e:fc:a4:95:34:60:d3:5d:5f:1a:88:85:c1:2c:
                    86:bc:7b:61:9f:f3:d3:cc:04:f1:2d:6d:8a:8b:82:
                    4b:62:07:41:41:88:d6:7d:1e:76:de:34:fa:e5:13:
                    31:da:99:33:ee:90:a8:0d:4e:92:76:10:01:3a:29:
                    b0:4e:38:b8:a5:7d:54:b7:ab:43:2a:41:f6:1f:8a:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FF:61:FC:38:DE:5D:5C:87:FC:63:50:31:A0:40:6F:D4:C1:52:EC
            X509v3 Authority Key Identifier:
                keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/C4113EA008F411EDA171269AF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.183.0.0/16
                  196.10.112.0-196.10.117.255
                  196.11.125.0-196.11.134.255

    Signature Algorithm: sha256WithRSAEncryption
         24:b1:54:13:bd:34:3f:8b:12:b7:7b:bd:81:06:c2:24:19:37:
         3b:13:65:ed:61:ca:25:b8:ff:2f:7a:50:53:b7:a3:93:fb:b5:
         8e:4c:f5:93:ac:22:1c:36:df:a9:25:cf:d8:ab:1d:2a:5a:1d:
         1e:f1:21:79:ec:d9:46:1e:0f:85:9d:db:ab:8c:fc:f0:e7:ed:
         9b:cf:4c:ad:a3:46:88:3e:69:21:96:fd:85:3a:c2:80:d4:fd:
         d9:6c:68:86:53:94:e6:e1:fa:f1:45:b7:45:ba:ce:75:79:0c:
         c8:65:7e:5f:65:4a:f7:2a:8c:0d:fd:9c:41:17:64:b7:13:17:
         96:94:c3:3a:2f:f2:81:2e:c9:00:14:6c:1e:72:c7:25:8d:27:
         4a:73:d2:f6:e5:fe:41:32:15:15:26:95:21:88:42:4f:37:34:
         8f:e0:35:b4:5c:0d:e6:cb:ab:1c:3d:ac:f6:4d:2d:ab:bc:f7:
         79:7f:ee:f3:a8:98:26:1b:56:a5:f5:27:89:9f:b9:0c:46:3a:
         97:de:70:69:e1:ca:9e:73:11:04:50:bc:43:0b:87:3f:8c:6d:
         a0:7b:4a:f0:db:26:87:33:96:e6:6d:e7:2a:20:14:96:d6:3a:
         0a:26:35:f4:7e:b1:56:38:a1:7f:84:61:ab:07:77:71:15:55:
         45:b1:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----