Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a316530303a3a2f34302d3438203d3e20323030373038.roa
File:                     326130613a363034303a316530303a3a2f34302d3438203d3e20323030373038.roa (raw, json)
Hash identifier:          UaOTxeBVfmwG080RCF2IF+mdE4znQSYRKEfcOjZmzbM=
Subject key identifier:   04:7C:11:D9:55:0A:71:6A:87:D4:B6:63:72:44:97:A1:AF:F5:B4:12
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       3A52947131CAC3008007C949AD29647887B5ACB4
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a316530303a3a2f34302d3438203d3e20323030373038.roa
Signing time:             Tue 20 Dec 2022 23:35:25 +0000
ROA not before:           Tue 20 Dec 2022 23:30:25 +0000
ROA not after:            Tue 19 Dec 2023 23:35:25 +0000
asID:                     200708
IP address blocks:        2a0a:6040:1e00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:52:94:71:31:ca:c3:00:80:07:c9:49:ad:29:64:78:87:b5:ac:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 20 23:30:25 2022 GMT
            Not After : Dec 19 23:35:25 2023 GMT
        Subject: CN=047C11D9550A716A87D4B663724497A1AFF5B412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:dd:fc:f5:5f:46:49:f4:e4:d5:97:0f:2b:
                    49:6e:fa:e8:e6:be:f0:18:ca:f4:1c:43:8e:33:03:
                    7d:3a:de:d9:07:52:b6:75:26:49:39:8a:df:36:37:
                    80:08:75:98:3e:fe:e4:7c:e6:b5:04:45:ee:d5:4a:
                    e7:44:75:7f:85:45:98:85:ef:5a:a4:ac:c5:0d:8f:
                    37:25:85:b9:99:38:cc:1a:9a:b5:4b:8d:92:af:db:
                    97:95:24:0b:60:6e:75:71:fb:89:f7:ef:23:95:49:
                    93:4b:d1:50:d5:41:5c:23:c3:42:28:37:a6:06:7a:
                    2f:d3:b0:65:3f:a2:cb:e1:d9:db:d9:2a:b0:6a:e2:
                    94:40:eb:4d:17:13:7f:b2:5a:7e:f2:52:5a:89:e6:
                    5b:e5:ec:f5:1a:b5:3b:53:bf:c7:b1:ae:da:51:ea:
                    14:ba:0a:43:96:17:92:0a:7c:7e:b8:6a:a9:c5:37:
                    9f:f8:f2:b2:8b:5b:2b:db:d2:b5:6d:63:30:0c:65:
                    f0:f9:26:f3:e2:49:04:bc:9b:aa:12:e1:fd:1a:ce:
                    d2:c4:a6:0a:8f:58:c0:da:e0:b7:1d:15:15:8f:da:
                    7d:ae:dc:da:f3:25:9c:66:23:22:7e:30:26:50:34:
                    2b:cc:35:63:28:1c:54:b2:ea:0e:aa:b6:f3:45:c0:
                    b0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7C:11:D9:55:0A:71:6A:87:D4:B6:63:72:44:97:A1:AF:F5:B4:12
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a316530303a3a2f34302d3438203d3e20323030373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:27:1e:fe:72:64:be:09:89:f7:12:e5:5f:10:b6:3e:a9:39:
         32:19:b3:05:b3:95:1d:3b:8f:60:fa:84:f9:7f:52:51:e8:48:
         f4:97:ed:ba:c7:13:63:c0:6c:d1:d4:bc:f5:8e:65:42:66:80:
         4f:d6:1d:30:a8:ea:71:27:e1:2a:d9:88:36:4e:53:fc:1b:66:
         94:43:f1:d8:8e:b2:9b:fd:a9:ba:30:99:00:33:d1:1d:30:14:
         cc:a2:f4:33:40:c5:f5:b3:28:05:db:42:af:25:fa:06:dd:a3:
         b7:7a:26:90:02:c6:9a:d7:9b:78:b2:8a:39:c6:3f:f8:83:4f:
         be:25:ad:09:ac:7c:f4:04:ee:3b:7c:63:07:f6:64:da:d0:2c:
         60:63:21:15:7a:ef:69:e4:36:64:99:ba:61:36:14:4c:fe:61:
         31:2f:18:4e:9b:a7:c6:2b:09:3c:d6:2d:49:61:26:fe:5a:1c:
         b3:bd:71:c1:88:32:79:de:75:6f:38:46:57:b5:43:cf:88:22:
         7c:85:02:ce:b9:f9:29:c8:de:36:0e:02:1a:7d:ce:b8:90:25:
         0f:8c:1e:a0:af:13:69:06:12:5d:cc:ef:78:dc:13:97:af:be:
         f2:f2:24:25:75:ea:4c:d3:63:7b:cc:b6:1c:fb:d1:f2:21:52:
         4d:e0:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----