Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a333130303a3a2f34302d3438203d3e20323030333335.roa
File:                     326130613a363034303a333130303a3a2f34302d3438203d3e20323030333335.roa (raw, json)
Hash identifier:          O9xLBm6j/l0TKrZ/l4yVDykqPrRFJMB9j+lNo5IZ21k=
Subject key identifier:   37:49:AC:84:F4:D9:EA:48:5A:9C:1F:D4:6C:D0:BA:2F:EF:0C:06:22
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0F6922742A802E9204FFDD8F817E6A96E9A494DF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a333130303a3a2f34302d3438203d3e20323030333335.roa
Signing time:             Thu 22 Dec 2022 12:02:39 +0000
ROA not before:           Thu 22 Dec 2022 11:57:39 +0000
ROA not after:            Thu 21 Dec 2023 12:02:39 +0000
asID:                     200335
IP address blocks:        2a0a:6040:3100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:69:22:74:2a:80:2e:92:04:ff:dd:8f:81:7e:6a:96:e9:a4:94:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 22 11:57:39 2022 GMT
            Not After : Dec 21 12:02:39 2023 GMT
        Subject: CN=3749AC84F4D9EA485A9C1FD46CD0BA2FEF0C0622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:a3:fb:1a:a3:75:f5:65:3a:53:d3:1e:fa:
                    8e:21:1b:7a:a3:75:92:fa:db:30:94:f3:30:96:11:
                    d2:8d:61:3b:07:ab:58:fd:72:24:94:b0:0b:42:65:
                    b3:80:0e:75:a0:b8:82:56:ca:5f:21:61:9e:b2:ac:
                    e8:49:8d:e0:03:3c:d3:0b:d5:ce:2b:7b:b2:c0:eb:
                    3d:a2:d4:33:00:51:8d:a2:d7:48:73:62:80:84:af:
                    21:00:59:4a:46:90:01:d2:d8:0c:48:ee:04:02:32:
                    39:db:cf:af:79:ec:86:eb:4e:d5:1b:e5:ce:d7:da:
                    0d:99:2e:b0:9e:11:46:ec:0f:fa:66:f6:cb:9f:dc:
                    db:7a:1b:68:ae:48:02:17:11:3f:fa:47:d8:9c:53:
                    9d:d6:92:6e:00:34:c9:f6:6b:20:c6:78:3b:07:e0:
                    19:ab:c2:5b:08:bc:9e:a7:f4:80:b6:55:95:a0:b6:
                    45:23:45:f5:45:f4:b3:6e:23:37:3e:c8:ce:90:29:
                    29:60:8d:3e:1f:66:76:13:9a:a1:db:24:fb:76:38:
                    a9:f2:81:34:73:ba:62:0a:85:e1:b2:85:6a:03:9a:
                    45:4c:18:73:3c:54:41:64:11:be:28:c3:98:fd:45:
                    85:66:8a:54:ca:fd:8f:fe:0f:3b:65:f1:8f:1c:65:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:49:AC:84:F4:D9:EA:48:5A:9C:1F:D4:6C:D0:BA:2F:EF:0C:06:22
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a333130303a3a2f34302d3438203d3e20323030333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:39:c1:9a:62:4e:52:d4:2d:cf:74:68:26:5b:96:d3:c3:44:
         ee:a9:4b:72:d2:88:9e:5a:df:83:98:89:02:06:03:24:ea:74:
         d2:4b:04:22:2f:1d:9c:f8:99:11:e5:20:fd:17:49:1f:fb:7a:
         c8:a1:f6:16:6e:df:b4:a6:47:d9:4b:36:0f:b7:40:77:a9:b7:
         dd:c6:27:78:b1:be:1a:fa:1b:e9:88:5a:90:10:2b:5a:f9:6a:
         68:16:3a:fd:46:5f:a8:12:25:78:c6:58:63:61:32:ad:7f:79:
         56:2c:8e:84:9a:d9:56:33:b5:f7:18:45:d6:e5:7d:0d:9d:2d:
         00:4b:16:53:11:6d:c2:13:bf:1a:3f:75:f0:25:59:f8:02:f5:
         a4:01:cf:4a:8a:d9:bd:16:5d:3c:e1:0d:6c:5e:f9:87:a6:04:
         c0:3d:15:df:2c:dc:9b:41:a5:5b:ef:ae:94:bb:58:20:ca:77:
         d0:72:bd:9d:f5:5c:2b:fc:29:88:23:7d:b8:7f:80:3b:3b:c4:
         97:fb:92:f5:b6:0a:66:c1:02:91:c1:61:83:ae:bf:af:ae:a6:
         1c:f6:17:d7:8d:35:f9:b1:21:b2:fd:76:af:de:65:62:a6:cf:
         94:5a:46:de:51:bf:50:ea:c4:56:76:bb:ae:e2:b2:0f:e0:09:
         20:e7:62:05
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUD2kidCqALpIE/92PgX5qlumklN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMjIxMTU3MzlaFw0yMzEyMjExMjAyMzlaMDMxMTAvBgNV
BAMTKDM3NDlBQzg0RjREOUVBNDg1QTlDMUZENDZDRDBCQTJGRUYwQzA2MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZMaP7GqN19WU6U9Me+o4hG3qj
dZL62zCU8zCWEdKNYTsHq1j9ciSUsAtCZbOADnWguIJWyl8hYZ6yrOhJjeADPNML
1c4re7LA6z2i1DMAUY2i10hzYoCEryEAWUpGkAHS2AxI7gQCMjnbz6957IbrTtUb
5c7X2g2ZLrCeEUbsD/pm9suf3Nt6G2iuSAIXET/6R9icU53Wkm4ANMn2ayDGeDsH
4BmrwlsIvJ6n9IC2VZWgtkUjRfVF9LNuIzc+yM6QKSlgjT4fZnYTmqHbJPt2OKny
gTRzumIKheGyhWoDmkVMGHM8VEFkEb4ow5j9RYVmilTK/Y/+Dztl8Y8cZXDnAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUN0mshPTZ6khanB/UbNC6L+8MBiIwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2EzMzMx
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDMzMzMzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYEAxMA0GCSqGSIb3DQEBCwUAA4IBAQAPOcGaYk5S1C3PdGgmW5bTw0Tu
qUty0oieWt+DmIkCBgMk6nTSSwQiLx2c+JkR5SD9F0kf+3rIofYWbt+0pkfZSzYP
t0B3qbfdxid4sb4a+hvpiFqQECta+WpoFjr9Rl+oEiV4xlhjYTKtf3lWLI6EmtlW
M7X3GEXW5X0NnS0ASxZTEW3CE78aP3XwJVn4AvWkAc9Kitm9Fl084Q1sXvmHpgTA
PRXfLNybQaVb766Uu1ggynfQcr2d9Vwr/CmII324f4A7O8SX+5L1tgpmwQKRwWGD
rr+vrqYc9hfXjTX5sSGy/Xav3mVips+UWkbeUb9Q6sRWdruu4rIP4Akg52IF
-----END CERTIFICATE-----