Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a333430303a3a2f34302d3438203d3e20313432323830.roa
File:                     326130613a363034303a333430303a3a2f34302d3438203d3e20313432323830.roa (raw, json)
Hash identifier:          LOXCSuaRl13fcGsBvQZCa8hsIFjiUyqOK0KplymQ6c0=
Subject key identifier:   36:B4:6D:18:D7:91:CC:34:41:E5:C3:04:F7:D3:A0:64:74:91:56:92
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4F140871F07A9E006F9B9C6D1A5DBCB8D3494DBE
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a333430303a3a2f34302d3438203d3e20313432323830.roa
Signing time:             Mon 26 Dec 2022 10:40:26 +0000
ROA not before:           Mon 26 Dec 2022 10:35:26 +0000
ROA not after:            Mon 25 Dec 2023 10:40:26 +0000
asID:                     142280
IP address blocks:        2a0a:6040:3400::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:14:08:71:f0:7a:9e:00:6f:9b:9c:6d:1a:5d:bc:b8:d3:49:4d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 26 10:35:26 2022 GMT
            Not After : Dec 25 10:40:26 2023 GMT
        Subject: CN=36B46D18D791CC3441E5C304F7D3A06474915692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c3:8d:0f:ab:50:13:75:52:a5:03:1e:1f:6b:
                    04:76:21:f7:9e:e5:d2:c9:b2:18:c7:dd:15:07:bf:
                    38:ec:ac:c6:ee:3e:ba:24:46:e5:86:43:b7:39:c2:
                    52:0a:fc:81:81:7d:42:c6:d4:9e:93:32:6f:e8:ad:
                    bf:6e:15:07:2b:a9:c9:db:63:71:9c:76:4d:18:f4:
                    51:79:19:b7:6d:70:bd:07:8d:73:df:32:8f:d8:b3:
                    5c:99:5e:4a:07:28:32:d9:19:85:ae:1a:81:b6:c6:
                    64:18:4d:df:e1:c6:e0:76:44:20:e3:68:5f:9d:7b:
                    74:c0:df:2c:66:a5:14:a7:34:18:22:6c:1f:7a:ae:
                    a6:e3:34:81:cc:49:12:5c:21:5a:c3:02:99:32:ae:
                    37:cd:13:08:5f:fa:9c:79:2f:d8:5f:4e:4c:27:0f:
                    35:db:eb:d7:4b:62:fe:e6:1d:cf:94:a2:c4:b7:aa:
                    94:89:c9:ef:a0:a2:23:56:cf:8e:85:d2:cc:b2:e1:
                    4e:d9:bb:a2:32:29:97:b0:aa:1b:b1:76:e3:06:70:
                    1c:91:bb:4a:ba:05:82:02:7e:de:89:24:9d:2f:d9:
                    f3:0a:bf:ae:cf:5f:7a:fa:e9:48:73:fe:86:c9:d3:
                    eb:b8:33:8c:26:f6:cc:e6:45:ca:f7:cb:c1:62:0b:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B4:6D:18:D7:91:CC:34:41:E5:C3:04:F7:D3:A0:64:74:91:56:92
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a333430303a3a2f34302d3438203d3e20313432323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:ba:b9:94:11:ab:6a:44:21:ad:25:b2:06:ca:32:f8:33:
         f6:4b:7e:c7:09:0f:b6:73:e7:39:aa:6d:9c:6c:53:3d:b7:a4:
         8c:c7:00:49:d1:b3:1f:09:80:d8:3c:b9:9d:3d:44:46:ee:a0:
         1c:64:d1:75:b4:bc:5b:22:a0:b6:97:31:09:cc:51:cd:d7:d0:
         22:5c:f9:07:87:05:85:6b:dc:39:ed:34:3b:42:fd:eb:a6:e1:
         e2:ed:e2:dd:37:88:0f:10:24:a3:1b:0f:f2:65:a6:cc:69:d0:
         fc:1b:f5:c9:0b:e0:d3:cc:3f:b8:14:c0:27:db:ee:01:eb:eb:
         bf:31:56:96:dd:8a:e6:5f:ac:68:4e:bd:8e:53:f6:5e:7b:2c:
         17:ef:73:43:64:8b:1c:85:6f:0e:9f:60:2d:a9:b6:64:ff:7f:
         95:fd:e4:36:95:b4:a7:25:1d:0f:70:94:ec:69:74:2d:12:d6:
         6f:65:00:ef:42:bd:c3:72:f6:ef:91:42:39:be:6a:11:62:88:
         49:a8:27:3e:4c:b1:c9:9f:ee:3a:20:8a:3c:83:03:ce:fb:fb:
         65:17:5c:17:bf:f4:ff:dd:f3:ab:42:d0:d4:ad:94:e5:a9:f7:
         07:c7:93:5f:51:57:b4:4b:27:be:ca:d5:75:2e:d8:ed:2d:62:
         e8:94:1c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----