Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a313230303a3a2f34302d3438203d3e20323131343037.roa
File:                     326130613a363034303a313230303a3a2f34302d3438203d3e20323131343037.roa (raw, json)
Hash identifier:          zVd+s16k/ZNi0I8W7Ot++tXGgjw6a26EsqbLQZ1nuIE=
Subject key identifier:   64:2C:B9:EB:F3:B0:50:F3:96:67:6D:1C:64:4D:64:FF:77:39:94:46
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       6184BE05B33F377989C9172700D0B1919C1A422E
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a313230303a3a2f34302d3438203d3e20323131343037.roa
Signing time:             Fri 09 Dec 2022 22:57:40 +0000
ROA not before:           Fri 09 Dec 2022 22:52:40 +0000
ROA not after:            Fri 08 Dec 2023 22:57:40 +0000
asID:                     211407
IP address blocks:        2a0a:6040:1200::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:84:be:05:b3:3f:37:79:89:c9:17:27:00:d0:b1:91:9c:1a:42:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 22:52:40 2022 GMT
            Not After : Dec  8 22:57:40 2023 GMT
        Subject: CN=642CB9EBF3B050F396676D1C644D64FF77399446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:c3:35:ca:8c:c7:64:ca:ba:a8:f1:45:e8:
                    ef:f4:ee:5c:8b:6e:18:e7:7f:b0:4d:bc:59:9e:89:
                    14:56:e6:00:51:92:90:7a:a9:16:3c:cb:f7:4a:08:
                    66:db:6b:4b:e2:a0:d5:62:f7:86:6b:0a:16:6b:41:
                    9f:46:a3:89:c9:46:3d:12:f9:5a:2a:61:bc:13:e8:
                    19:54:f8:dd:fa:22:d3:b9:af:3d:64:27:02:b7:82:
                    83:0b:8d:92:b3:0c:e9:90:15:3e:1a:4e:13:ca:96:
                    53:7f:dc:f2:86:f3:b1:55:51:97:c1:64:05:87:a9:
                    1e:62:26:a2:34:0c:61:76:4c:93:87:d6:ed:a6:4b:
                    cf:db:9d:0a:aa:41:c9:19:6b:f9:04:91:23:10:e7:
                    55:96:19:c2:31:a0:81:35:34:0f:b5:a7:25:04:4f:
                    74:d7:88:7f:18:02:60:2a:e8:c0:06:58:de:a9:d1:
                    0e:0c:33:a0:bb:46:b5:dd:7a:09:34:7a:87:23:13:
                    4e:3e:06:19:87:16:14:22:6f:6f:02:5f:6a:13:e6:
                    39:72:ba:87:7e:7d:92:36:60:1c:7e:1d:41:5f:17:
                    88:02:a1:9b:6d:70:a4:c3:e4:b2:e4:4f:ab:5d:7e:
                    41:3b:e6:c2:f4:ea:d0:40:f1:b0:3f:02:a4:72:6d:
                    db:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2C:B9:EB:F3:B0:50:F3:96:67:6D:1C:64:4D:64:FF:77:39:94:46
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a313230303a3a2f34302d3438203d3e20323131343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:51:6c:56:75:82:42:ed:70:3e:8d:8b:a1:d2:c9:2b:16:86:
         7d:f5:90:37:46:df:c6:b4:df:ee:60:6d:a4:cb:6e:10:85:07:
         a3:4f:85:e4:b8:3b:e7:34:b8:88:62:54:df:b8:b8:4a:96:82:
         12:8a:0c:bb:ed:01:50:b5:59:45:4e:40:e2:63:eb:e1:a6:3e:
         6f:d2:aa:f1:ee:23:2c:2d:63:7a:a6:ae:05:cf:44:7e:ed:dc:
         76:3b:79:40:f2:dc:dc:fe:b9:de:9b:db:36:67:8c:59:88:e7:
         22:49:e8:64:63:69:07:81:e5:b4:5e:40:28:dc:8d:b4:d0:40:
         83:ba:b0:7a:62:7e:24:6d:3d:bd:51:3d:13:0b:6a:69:83:ae:
         fc:90:e8:10:3b:85:57:52:1d:4d:90:f2:4c:20:28:4d:b7:21:
         70:74:41:cb:31:5d:f1:09:19:d4:0c:0e:db:37:f0:fe:b9:60:
         3c:e5:0d:fa:6d:18:8b:60:83:39:fd:4d:44:f8:90:45:48:3e:
         fc:76:4d:91:fe:a4:5f:cf:a5:27:ca:3d:5f:b5:eb:9a:c8:9e:
         bd:ab:af:d7:cb:32:f4:70:32:ff:56:f2:20:66:b0:57:f9:f1:
         32:46:02:e0:0b:25:f6:fe:07:81:48:2c:66:94:e0:a4:92:98:
         48:e0:ff:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----