Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a316130303a3a2f34302d3438203d3e20323030383039.roa
File:                     326130613a363034303a316130303a3a2f34302d3438203d3e20323030383039.roa (raw, json)
Hash identifier:          WO0T503LgAMu7xPQqZG9LFMhVngvynH1wEmgxmGNMjQ=
Subject key identifier:   8A:10:9B:18:5C:09:23:43:32:1E:A1:7A:CC:4C:F3:08:25:7C:78:3C
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2C2D929C2AB6956D570E061D0E6B4413CD990891
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a316130303a3a2f34302d3438203d3e20323030383039.roa
Signing time:             Tue 13 Dec 2022 02:33:11 +0000
ROA not before:           Tue 13 Dec 2022 02:28:11 +0000
ROA not after:            Tue 12 Dec 2023 02:33:11 +0000
asID:                     200809
IP address blocks:        2a0a:6040:1a00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2d:92:9c:2a:b6:95:6d:57:0e:06:1d:0e:6b:44:13:cd:99:08:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 13 02:28:11 2022 GMT
            Not After : Dec 12 02:33:11 2023 GMT
        Subject: CN=8A109B185C092343321EA17ACC4CF308257C783C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:e8:00:cb:ba:79:f1:a3:30:50:ea:a9:35:
                    3b:0c:79:b9:86:3a:5c:7e:d0:b6:52:e8:28:4d:55:
                    ca:f7:20:61:83:b5:e8:52:a3:e9:54:be:7b:8d:43:
                    17:85:45:95:c5:77:64:74:89:0f:87:1e:2b:1c:43:
                    a6:fc:7d:24:89:85:de:47:9e:4e:54:48:ab:98:4a:
                    5d:05:d4:dd:37:46:c5:01:63:40:c9:1e:25:72:dc:
                    6c:f3:5b:f4:f9:9f:2c:c2:8c:fc:80:df:d4:19:26:
                    25:3f:94:ab:8f:e6:62:90:6b:72:93:f6:4f:cd:04:
                    18:ba:e1:63:3e:fd:e9:b7:25:5c:b3:97:d8:e6:c1:
                    03:38:f7:ea:b3:46:07:f1:e1:49:06:e6:0d:9e:fb:
                    a2:94:ca:a3:e8:17:50:93:c0:69:7b:8f:7d:81:05:
                    66:a7:13:01:c0:b3:15:f0:47:3d:2a:82:a5:5d:98:
                    8b:59:10:78:7d:02:29:e2:a8:9d:81:ed:fb:8c:cf:
                    35:43:b2:77:9f:62:ee:18:3a:27:42:32:71:83:f8:
                    38:18:b4:5c:64:4f:81:7d:bd:59:14:ab:23:6f:d6:
                    f9:7e:ad:a4:20:60:b4:63:90:30:3c:50:b3:ed:52:
                    97:e2:90:33:d3:47:3c:7e:62:3f:59:5e:e6:71:8e:
                    39:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:10:9B:18:5C:09:23:43:32:1E:A1:7A:CC:4C:F3:08:25:7C:78:3C
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a316130303a3a2f34302d3438203d3e20323030383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:4e:92:e5:98:fe:1a:6c:31:6a:bf:9e:a5:8f:fc:51:d1:
         57:bc:cc:74:ea:40:a2:90:43:c2:2c:3a:47:7d:f0:1b:ac:3e:
         0e:9e:25:2e:90:9f:be:aa:f5:d4:e4:b6:ff:38:4f:6b:6a:f7:
         1e:9d:0e:f7:62:56:56:f1:58:ca:e9:ce:19:2a:2d:c6:03:e7:
         fe:00:d1:12:02:71:92:6d:51:eb:a8:ed:4c:dd:1f:91:a8:ca:
         5c:8d:89:22:b2:15:60:d5:3a:d3:52:f7:b3:51:a0:f1:80:d3:
         93:db:0a:9e:84:7b:dc:9d:e5:ad:45:27:c1:6d:f3:7a:03:85:
         07:52:df:50:bc:4f:08:5b:6c:12:29:a3:45:26:1b:a2:3c:12:
         ab:f1:d0:3b:41:49:c9:b2:8e:b0:a5:4a:dc:fb:28:0a:80:2a:
         6a:15:49:2e:88:67:a6:56:f4:64:5c:35:eb:c6:9f:ec:57:12:
         e0:0f:5d:e7:6c:03:17:9f:9f:a0:f9:28:c5:16:3d:2f:b3:e7:
         a8:f4:e2:7a:8f:b3:72:85:15:8a:43:12:aa:f5:d0:af:f8:bf:
         ba:13:34:d7:e1:d4:bf:2a:34:cb:f9:53:22:20:8b:75:d8:91:
         10:42:1f:ac:31:d4:44:eb:8f:72:26:18:c0:d2:1d:4d:fc:8a:
         38:f3:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----