Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/SleZMk9MFj_LYeTmxlg_R3pj250.roa
File:                     SleZMk9MFj_LYeTmxlg_R3pj250.roa (raw, json)
Hash identifier:          n0VN/3UWcJ6S12P6b/8ayPFsZxKpncJN6YprFclfWpA=
Subject key identifier:   4A:57:99:32:4F:4C:16:3F:CB:61:E4:E6:C6:58:3F:47:7A:63:DB:9D
Certificate issuer:       /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial:       018B25377E52E077CDF05D923BF583753FBD
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/SleZMk9MFj_LYeTmxlg_R3pj250.roa
Signing time:             Thu 12 Oct 2023 18:47:55 +0000
ROA not before:           Thu 12 Oct 2023 18:47:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35659
IP address blocks:        2a01:130:42::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:25:37:7e:52:e0:77:cd:f0:5d:92:3b:f5:83:75:3f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
        Validity
            Not Before: Oct 12 18:47:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4a5799324f4c163fcb61e4e6c6583f477a63db9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:95:bd:51:44:a0:fe:3b:9e:a5:e2:49:3b:
                    4c:42:3b:b9:7a:46:6d:58:10:75:09:dc:75:c7:3d:
                    0a:cc:a8:93:34:cc:77:f4:79:d8:a3:a6:b3:f3:9e:
                    a9:44:b6:5e:b7:6b:e8:57:04:ca:90:6b:f8:40:2e:
                    96:dc:84:8c:f9:04:49:0c:c7:7a:d6:80:59:3e:47:
                    c7:56:8f:45:9f:fc:ef:2b:05:46:d8:97:27:6a:eb:
                    cd:9a:44:36:74:20:8a:98:81:67:dd:ef:b8:56:b5:
                    71:cd:b1:37:c5:19:59:c9:6a:e6:52:c0:09:19:8a:
                    ba:cd:cd:c8:6d:12:79:6e:d0:39:f6:31:5c:b7:c9:
                    42:db:06:c2:d4:da:39:80:ed:7a:1c:71:87:79:c1:
                    0f:03:ca:b3:24:6d:76:9c:2f:04:25:ac:51:4c:97:
                    8d:3a:4e:47:02:ef:4d:a9:39:24:07:fd:b1:24:f2:
                    d2:08:f6:17:fb:bd:79:20:03:9b:c0:52:49:17:46:
                    cd:28:51:bf:c0:48:42:17:42:7d:ce:a0:11:1b:8d:
                    bc:ba:5a:0f:66:3a:64:47:18:34:f8:ee:d4:95:14:
                    94:58:9d:a9:3e:65:ca:20:55:b0:12:74:a0:a2:2e:
                    4d:2f:82:74:b3:05:a2:72:2d:4d:98:b1:1f:e3:f1:
                    da:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:57:99:32:4F:4C:16:3F:CB:61:E4:E6:C6:58:3F:47:7A:63:DB:9D
            X509v3 Authority Key Identifier:
                keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/SleZMk9MFj_LYeTmxlg_R3pj250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:130:42::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:e3:92:97:5b:ac:6c:26:94:ea:e1:3b:93:b3:fd:18:5c:79:
         bb:18:9f:74:95:de:4d:ee:a3:2c:9d:7a:07:a6:e2:00:a9:e3:
         90:7b:51:4f:35:72:8c:78:66:d4:95:0b:46:e3:2c:8b:1f:bb:
         f9:c3:9c:8c:81:77:94:1f:d3:d7:9a:e9:8e:0c:51:35:7a:ce:
         64:de:74:85:3f:c1:78:4b:53:f4:89:8e:d3:1d:42:09:7a:15:
         c4:fb:b5:1e:67:c6:74:35:b0:cd:e7:50:7d:79:b5:80:a8:a3:
         00:b1:8d:9d:12:8f:9f:40:bd:21:8a:bd:3d:85:78:c0:36:e2:
         f3:e4:de:07:c7:e9:45:a1:9d:e5:98:d1:f4:6f:cf:3a:b3:12:
         15:3b:d2:93:d4:b5:3d:42:6f:ba:fc:ef:de:03:4a:30:32:75:
         4f:54:b6:a4:ef:27:13:cb:57:db:f8:d8:a4:06:59:fd:f3:1b:
         16:9e:c9:40:d5:1d:23:71:ed:7f:ac:eb:9b:03:22:08:a5:4e:
         9b:dc:dc:d6:8e:f3:18:b3:1a:10:7c:eb:4b:da:57:23:45:08:
         04:8d:a8:4f:54:fb:d5:f2:d1:88:84:0d:3f:64:f1:04:0d:6f:
         10:ee:ec:36:9d:80:92:f5:ff:0b:8e:47:d5:45:d6:a8:1a:7e:
         a6:6c:20:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----