Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/2E10D94274B811EF9CCBDE40762E951A.roa
File:                     2E10D94274B811EF9CCBDE40762E951A.roa (raw, json)
Hash identifier:          r6o8xff4hjcIP2qRutSJDw92G5J8PeJKZuFWaUXmdRM=
Subject key identifier:   3F:5D:C0:BF:6D:39:83:3B:84:9F:56:8F:BC:8D:A6:FA:66:4C:A2:D9
Certificate issuer:       /CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
Certificate serial:       02
Authority key identifier: 3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/2E10D94274B811EF9CCBDE40762E951A.roa
Signing time:             Tue 17 Sep 2024 05:46:27 +0000
ROA not before:           Tue 17 Sep 2024 05:46:23 +0000
ROA not after:            Sat 30 Sep 2034 05:46:23 +0000
asID:                     37204
IP address blocks:        196.43.199.0/24 maxlen: 32
                          2001:43f8:9e0::/48 maxlen: 128

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 07:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
        Validity
            Not Before: Sep 17 05:46:23 2024 GMT
            Not After : Sep 30 05:46:23 2034 GMT
        Subject: CN=66e917b3-0f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e7:52:f2:91:a0:d6:d3:3c:8d:41:04:68:e2:
                    bf:24:3f:e2:49:b5:cf:76:f6:3e:8e:3a:de:34:b5:
                    a2:22:2d:79:a2:41:90:3d:25:7a:89:6d:ba:97:12:
                    6e:ff:43:37:f4:78:b7:0a:b4:94:27:52:2f:7e:6a:
                    da:ec:3b:48:8b:33:f5:54:b3:19:d1:93:0c:a9:4a:
                    3a:01:61:c4:41:7e:d1:0e:d9:06:ee:50:a1:d6:45:
                    05:60:f0:60:20:09:ca:ae:79:50:4c:5e:0e:13:e4:
                    09:f2:d2:6a:4a:a7:04:ab:b5:37:8a:94:84:37:1e:
                    0b:f4:80:ec:6d:bc:05:44:06:b2:83:0a:38:62:4d:
                    78:04:a7:25:6e:c9:be:10:c7:b9:e8:af:92:26:58:
                    42:f7:1d:7d:de:21:b3:81:e0:90:2f:54:bb:a1:ab:
                    c4:3e:e2:6c:e6:3b:82:e5:f1:e4:91:b9:09:ff:a9:
                    b2:e8:be:aa:c5:25:d0:de:ce:b1:d8:d3:cc:11:a3:
                    be:b5:c8:e4:ab:2f:87:80:80:48:21:ef:f9:1b:42:
                    df:ca:2f:45:57:20:5f:99:4b:dd:d1:31:7b:8b:c5:
                    b1:e1:2e:ec:37:f6:7c:79:d4:e2:1b:bf:6b:43:2c:
                    06:98:84:1a:49:b7:de:40:ad:48:b0:4c:30:fd:23:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5D:C0:BF:6D:39:83:3B:84:9F:56:8F:BC:8D:A6:FA:66:4C:A2:D9
            X509v3 Authority Key Identifier:
                keyid:3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/2E10D94274B811EF9CCBDE40762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.199.0/24
                IPv6:
                  2001:43f8:9e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:f5:7a:0a:39:69:1c:bd:01:39:c0:7b:b5:c7:a2:1f:bd:85:
         92:8f:a7:26:8d:5f:d7:e2:18:44:00:b8:27:08:c0:c2:68:a5:
         84:76:d4:1c:89:0f:ff:33:5b:1e:e0:08:af:ac:c7:eb:3d:0f:
         78:e4:83:74:41:87:a4:5d:09:c8:b5:1f:cd:66:5b:a7:3c:4a:
         db:c1:0d:0f:57:58:c5:43:cd:1d:c7:92:3f:60:91:af:2f:44:
         c7:39:a6:3d:96:ad:65:c0:c8:5c:11:82:7a:76:53:4a:56:c8:
         35:ff:97:14:af:64:bd:45:af:42:58:63:86:bc:59:58:5e:c2:
         e4:fb:62:fb:d3:5f:36:b8:52:52:24:3d:55:79:6a:77:7f:7e:
         97:62:37:08:56:5a:b7:f0:c2:93:5f:ae:b9:0a:0c:14:b1:d3:
         83:83:56:c3:95:ca:31:f5:2d:bc:1a:0c:7f:1a:72:cb:98:3b:
         c0:99:eb:d6:63:74:eb:e2:eb:b0:24:14:9a:6d:d5:d2:6d:9d:
         1c:74:4e:bb:27:6e:0e:7b:69:37:8c:cd:32:90:1e:ca:0b:86:
         39:a0:71:0e:18:1f:a1:07:f5:57:39:ed:ee:de:33:5c:44:b6:
         3a:76:0f:00:c1:6f:a3:8e:49:f0:bc:b9:e6:04:f1:83:b6:ee:
         63:0a:10:9c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
RTAwMUFGMTEwLwYDVQQFEygzRkI1QkUzREREQUU2MTRCRTlEMUU2MkU4MDk4MzZF
MjMwMkU3MTE4MB4XDTI0MDkxNzA1NDYyM1oXDTM0MDkzMDA1NDYyM1owGDEWMBQG
A1UEAxMNNjZlOTE3YjMtMGYxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANnnUvKRoNbTPI1BBGjivyQ/4km1z3b2Po463jS1oiIteaJBkD0leoltupcS
bv9DN/R4twq0lCdSL35q2uw7SIsz9VSzGdGTDKlKOgFhxEF+0Q7ZBu5QodZFBWDw
YCAJyq55UExeDhPkCfLSakqnBKu1N4qUhDceC/SA7G28BUQGsoMKOGJNeASnJW7J
vhDHueivkiZYQvcdfd4hs4HgkC9Uu6GrxD7ibOY7guXx5JG5Cf+psui+qsUl0N7O
sdjTzBGjvrXI5Ksvh4CASCHv+RtC38ovRVcgX5lL3dExe4vFseEu7Df2fHnU4hu/
a0MsBpiEGkm33kCtSLBMMP0j7vkCAwEAAaOCArYwggKyMB0GA1UdDgQWBBQ/XcC/
bTmDO4SfVo+8jab6Zkyi2TAfBgNVHSMEGDAWgBQ/tb493a5hS+nR5i6AmDbiMC5x
GDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkUwMDEvODRFRDhBQTA3NEI2MTFFRjk4OEFGM0I2NzYyRTk1MUEvUDdXLVBk
MnVZVXZwMGVZdWdKZzI0akF1Y1JnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUDdXLVBkMnVZVXZwMGVZdWdKZzI0akF1Y1JnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkUwMDEvODRFRDhBQTA3NEI2MTFFRjk4OEFGM0I2NzYy
RTk1MUEvMkUxMEQ5NDI3NEI4MTFFRjlDQ0JERTQwNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMQrxzAPBAIAAjAJAwcAIAFD
+AngMA0GCSqGSIb3DQEBCwUAA4IBAQCl9XoKOWkcvQE5wHu1x6IfvYWSj6cmjV/X
4hhEALgnCMDCaKWEdtQciQ//M1se4AivrMfrPQ945IN0QYekXQnItR/NZlunPErb
wQ0PV1jFQ80dx5I/YJGvL0THOaY9lq1lwMhcEYJ6dlNKVsg1/5cUr2S9Ra9CWGOG
vFlYXsLk+2L70182uFJSJD1VeWp3f36XYjcIVlq38MKTX665CgwUsdODg1bDlcox
9S28Ggx/GnLLmDvAmevWY3Tr4uuwJBSabdXSbZ0cdE67J24Oe2k3jM0ykB7KC4Y5
oHEOGB+hB/VXOe3u3jNcRLY6dg8AwW+jjknwvLnmBPGDtu5jChCc
-----END CERTIFICATE-----