Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a313430303a3a2f34302d3438203d3e20323030353537.roa
File:                     326130613a363034303a313430303a3a2f34302d3438203d3e20323030353537.roa (raw, json)
Hash identifier:          FYcH1mmomO+Qz6uy1qLdss11HFA4JnGyn5DwB1nraas=
Subject key identifier:   7B:11:72:B2:69:6E:4A:A4:F2:2C:1D:AB:FF:71:06:22:8A:7C:01:E5
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       72F4D44CA6383DB1085F324C34C8AA519F64D948
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a313430303a3a2f34302d3438203d3e20323030353537.roa
Signing time:             Tue 13 Dec 2022 21:47:15 +0000
ROA not before:           Tue 13 Dec 2022 21:42:15 +0000
ROA not after:            Tue 12 Dec 2023 21:47:15 +0000
asID:                     200557
IP address blocks:        2a0a:6040:1400::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f4:d4:4c:a6:38:3d:b1:08:5f:32:4c:34:c8:aa:51:9f:64:d9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 13 21:42:15 2022 GMT
            Not After : Dec 12 21:47:15 2023 GMT
        Subject: CN=7B1172B2696E4AA4F22C1DABFF7106228A7C01E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ff:00:51:ee:5c:da:37:0e:0b:7e:4d:d0:a5:
                    9b:9e:ca:3a:b6:df:3b:7f:13:c6:c2:26:dd:3e:05:
                    98:df:89:83:d4:08:7a:10:dd:bc:a8:35:e6:80:b6:
                    f1:d6:f6:b0:be:bf:01:88:30:21:4b:0e:18:20:b3:
                    c1:a1:f6:31:4f:9d:dc:86:51:d5:83:70:8e:2e:e7:
                    d0:7a:64:56:78:ed:61:fb:86:c7:e9:94:99:8c:2a:
                    38:e1:1b:ff:f5:65:c2:66:ae:ad:8d:26:a8:da:c6:
                    69:ff:3a:03:4f:db:a9:fd:0b:e2:fc:7b:2a:6e:6c:
                    c0:af:68:80:3a:63:c1:40:ec:28:b2:65:e2:a2:49:
                    88:57:e0:7b:a5:64:4c:45:95:93:2e:2c:0e:18:9f:
                    29:86:77:9c:a5:3c:1e:5c:a1:d7:f9:a0:22:37:dd:
                    b7:6b:21:38:1e:07:3c:a5:16:6f:b5:ad:5f:f2:10:
                    e4:d3:26:fa:ee:bf:5e:0b:86:84:52:b7:73:3a:8c:
                    80:ec:23:4f:09:27:37:ad:9b:7c:4d:f5:c3:39:f0:
                    19:26:cc:1c:b0:88:e8:65:4f:6b:a1:43:e0:fb:ae:
                    68:26:2e:6b:67:cd:a6:ea:93:97:31:b7:62:51:ea:
                    bc:0e:98:5a:ca:5e:50:27:df:d9:f0:f8:82:aa:3a:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:11:72:B2:69:6E:4A:A4:F2:2C:1D:AB:FF:71:06:22:8A:7C:01:E5
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a313430303a3a2f34302d3438203d3e20323030353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:03:f0:97:02:fd:b7:97:73:10:6c:1c:1f:b1:c7:c1:94:a8:
         20:09:34:46:f2:05:b9:65:c5:db:00:41:11:9c:88:82:82:ef:
         57:a6:57:58:3a:ea:0c:51:2b:90:23:eb:d2:c6:40:b3:b1:51:
         88:f8:72:49:2a:c1:a6:9f:69:84:fa:7f:b4:6b:0d:5b:b6:28:
         ef:f9:80:63:2f:38:4d:9f:73:3c:be:44:55:98:dc:4e:d0:46:
         9e:d0:64:71:13:a9:d6:7e:c2:2d:e6:89:cf:35:bf:69:e4:32:
         0d:11:98:87:bc:cb:f2:8f:a7:e6:47:f1:3c:03:7f:81:32:52:
         c5:65:78:74:72:6e:cd:ce:34:5b:4d:98:05:16:7d:51:15:9b:
         a2:d6:fc:ad:cd:8b:52:b3:82:68:5c:b2:06:5d:07:77:d2:98:
         74:dd:08:15:59:f2:fa:7a:81:66:18:ac:45:ad:1f:0b:d6:ad:
         af:2f:4c:af:64:0b:78:2c:77:1a:f9:41:c4:dd:07:8b:d3:23:
         02:83:8c:2e:1d:46:c2:eb:49:2a:b0:23:08:0a:36:2b:d3:a3:
         78:ba:aa:18:79:8b:db:50:f4:0d:01:c9:f9:26:e2:5f:bd:da:
         ec:ee:40:a9:fb:c4:d8:37:a1:4f:e5:7f:fc:72:61:7a:4f:f3:
         a9:81:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----