Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/LMC_2_Af_nN-HbePV0quPvU2tT0.roa
File:                     LMC_2_Af_nN-HbePV0quPvU2tT0.roa (raw, json)
Hash identifier:          rgntNAu+HTh4EUXLxVG+EowxCvu2h3nZ2K/bgDvHyCU=
Subject key identifier:   2C:C0:BF:DB:F0:1F:FE:73:7E:1D:B7:8F:57:4A:AE:3E:F5:36:B5:3D
Certificate issuer:       /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial:       01870E189DF1ED10B73B11FF3AAD8786F30B
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/LMC_2_Af_nN-HbePV0quPvU2tT0.roa
Signing time:             Thu 23 Mar 2023 10:51:46 +0000
ROA not before:           Thu 23 Mar 2023 10:51:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209824
IP address blocks:        217.113.54.0/23 maxlen: 23
                          2a13:e700::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0e:18:9d:f1:ed:10:b7:3b:11:ff:3a:ad:87:86:f3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
        Validity
            Not Before: Mar 23 10:51:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2cc0bfdbf01ffe737e1db78f574aae3ef536b53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:68:54:92:07:3f:b3:44:07:75:a1:8c:33:14:
                    e0:e8:81:50:c6:c0:53:29:c1:8a:15:a3:77:af:6a:
                    41:2e:c4:65:a4:39:b0:ec:dd:d5:da:0c:c3:34:32:
                    97:6b:94:c5:b0:eb:25:89:f7:82:e6:b0:21:65:ef:
                    73:d5:ec:06:fa:45:44:a1:09:25:91:44:df:dd:2e:
                    09:4c:f2:e6:68:a0:d0:da:19:0f:6b:55:67:ee:e7:
                    2c:0c:11:fd:84:d6:64:f1:0f:91:b0:61:e0:f6:de:
                    c5:76:a7:5f:3a:c9:3b:74:6d:5c:77:e3:5c:e9:cb:
                    dc:5c:fe:70:25:f5:59:47:4f:74:43:89:5c:32:52:
                    75:ba:7d:c4:59:ef:c2:2d:cd:6b:7d:03:34:e8:ed:
                    87:d4:3d:28:a0:53:2c:f4:ea:29:6a:83:f6:7f:9e:
                    4d:88:88:b7:34:69:7e:22:07:94:6e:8d:12:5d:c9:
                    67:c6:75:84:36:f1:b6:0f:f1:a0:68:23:ca:a1:d6:
                    3e:ed:5f:0a:ce:7a:47:c6:28:9e:13:d2:b2:2e:7e:
                    c7:3c:e0:2a:d1:9b:96:45:89:d4:6b:6e:e3:df:4a:
                    08:74:7f:2d:b2:af:3b:63:24:d3:9e:2b:b6:61:8c:
                    45:2c:3b:5d:a5:a7:04:09:45:61:bd:6a:74:40:95:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C0:BF:DB:F0:1F:FE:73:7E:1D:B7:8F:57:4A:AE:3E:F5:36:B5:3D
            X509v3 Authority Key Identifier:
                keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/LMC_2_Af_nN-HbePV0quPvU2tT0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.113.54.0/23
                IPv6:
                  2a13:e700::/29

    Signature Algorithm: sha256WithRSAEncryption
         7f:17:74:88:83:e3:7e:cd:a1:ed:51:f5:b2:d0:2f:e8:57:e5:
         b1:0a:2e:a5:97:c1:ab:ec:88:05:ea:b7:30:a2:9a:7b:d2:f6:
         4d:0e:b9:25:b0:d7:60:70:63:0d:8d:d9:29:e4:a5:ed:1c:31:
         6e:04:c3:c3:5c:02:15:da:36:dd:ed:9a:99:45:73:eb:fb:6a:
         c1:d1:4b:b2:18:4f:0a:3a:21:26:83:7a:62:f8:89:cf:64:93:
         f0:a9:65:a1:8d:ed:e5:4f:0b:93:2a:07:7a:c0:50:de:6b:4e:
         0d:ae:e8:21:44:ad:dd:a4:fe:6d:21:67:c9:87:4f:e7:67:6b:
         90:54:c9:3a:dd:61:3f:89:67:96:1f:2b:1f:06:c5:33:58:15:
         2e:b8:c8:f2:94:b2:52:30:69:3b:4c:8d:d1:5f:13:81:ac:3d:
         c8:30:8a:85:5e:aa:23:09:c9:18:6a:cc:ba:b6:23:e9:c6:c4:
         3b:70:e3:4c:5a:cc:e9:64:a9:ab:a9:4a:d9:2d:5d:2b:e5:9f:
         7f:0c:bb:f8:a4:b0:bc:77:29:c0:bc:a3:24:32:db:33:cc:a2:
         99:48:7e:2e:9c:76:4c:48:e9:f0:be:70:53:ec:62:56:89:af:
         ca:45:98:0a:77:c8:f3:40:66:b7:12:17:e4:72:83:d3:49:b7:
         87:8c:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----