Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa
File:                     326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (raw, json)
Hash identifier:          F7p1f6b9a2MGwT8ny7bvMptrs1F8XvPqhASX7HVAcqc=
Subject key identifier:   49:41:5F:FA:EA:6D:0C:AB:AE:81:84:90:61:40:3D:D2:A0:CD:EB:14
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       35A105988C96C58DA837F7181A6CA7A9D2B3A052
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa
Signing time:             Sat 10 Dec 2022 05:10:12 +0000
ROA not before:           Sat 10 Dec 2022 05:05:12 +0000
ROA not after:            Sat 09 Dec 2023 05:10:12 +0000
asID:                     51019
IP address blocks:        2a0a:6040:1300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a1:05:98:8c:96:c5:8d:a8:37:f7:18:1a:6c:a7:a9:d2:b3:a0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 10 05:05:12 2022 GMT
            Not After : Dec  9 05:10:12 2023 GMT
        Subject: CN=49415FFAEA6D0CABAE81849061403DD2A0CDEB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:11:cb:7b:a3:e5:5c:1b:cb:5a:dd:9b:eb:
                    79:ab:3d:72:4d:f4:7a:0f:54:34:c2:fb:60:ed:78:
                    d3:68:45:35:f5:0c:ac:b2:a4:1a:a0:e3:9b:c7:06:
                    b2:a1:dd:03:15:cd:74:ee:58:8a:1c:01:27:d3:18:
                    36:cb:b8:00:fc:3b:25:b5:ad:98:74:4f:3e:1e:39:
                    49:67:92:59:92:0a:b0:bb:b7:b1:b1:38:cc:b0:4f:
                    0c:8b:16:18:55:11:a5:4a:64:23:a6:9b:3b:1c:46:
                    9b:aa:2d:21:51:10:5c:33:1c:35:79:23:fd:29:ae:
                    d6:27:47:78:c3:a4:c5:39:29:30:77:2f:ca:0d:1a:
                    69:4c:cb:90:d2:7f:a2:1c:5f:74:d7:b3:19:f2:5f:
                    39:e7:6f:b7:05:b5:11:c9:5b:10:c5:8b:fe:95:d3:
                    1a:c5:e3:80:9a:39:a4:68:53:c0:33:48:c1:3c:2c:
                    19:52:8c:b6:bf:78:80:59:85:d8:48:44:ee:ee:de:
                    b2:35:89:00:c8:0b:c7:0b:71:55:69:77:f1:5e:d5:
                    2b:f8:2f:5a:bc:ea:4c:ce:67:1d:8b:5b:f6:fa:82:
                    cd:dd:95:82:b2:71:cc:8d:9c:8d:e5:de:c0:35:1a:
                    f4:fb:36:a5:46:72:26:7d:d8:55:f5:b4:14:6e:10:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:41:5F:FA:EA:6D:0C:AB:AE:81:84:90:61:40:3D:D2:A0:CD:EB:14
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:7a:fa:af:8c:33:64:cc:4a:b8:75:3c:1f:d4:f9:06:95:c6:
         a3:eb:f3:6c:1b:d5:41:10:4c:80:8a:d7:1b:6a:29:08:c4:7c:
         38:cf:07:48:0f:a9:f5:d1:57:2c:8f:e7:f0:82:08:84:5f:d7:
         29:cf:0d:22:8b:bd:ed:cd:be:6a:5d:81:5c:61:a0:df:85:df:
         08:ab:af:50:8b:13:70:70:7e:d4:09:b4:37:2b:d4:7f:2b:98:
         4b:47:b9:e4:18:1f:1b:6e:58:28:8c:06:db:a9:95:6b:6f:25:
         39:65:d7:3f:b7:02:f6:7a:74:4d:33:c5:3c:33:8d:03:27:81:
         4a:0f:94:29:ce:8a:b5:a8:a3:25:9c:7e:e1:32:79:a7:6a:74:
         ad:b0:aa:b9:2d:92:aa:c7:ca:cf:0c:5a:f1:b9:52:80:ed:8f:
         c2:d2:41:51:ad:4a:ea:25:a8:c3:a1:f3:91:1f:91:fe:ff:9d:
         2e:be:ad:73:e3:78:a1:e2:c9:52:fe:c3:53:3a:d0:26:f8:0a:
         22:24:0a:7c:4e:f2:e7:f9:2b:fb:7c:7f:d2:63:f9:36:2f:28:
         e1:98:10:af:9e:c5:cc:f0:2a:9e:66:b1:d0:50:7d:f7:67:0e:
         80:09:cd:c4:3e:30:c4:67:36:79:97:2b:b6:13:d7:ab:b3:f3:
         9b:c8:7e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----