Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3430303a3a2f34302d3438203d3e20323030343535.roa
File:                     326130613a363034303a3430303a3a2f34302d3438203d3e20323030343535.roa (raw, json)
Hash identifier:          O9kK98yGnOK7qR8ooNxdrJTYzt1XcG0d8oF7PzVU+g0=
Subject key identifier:   D9:44:77:27:64:17:FE:89:29:E0:35:77:02:A0:72:5E:26:61:78:38
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       16A7352674F0068010D3FA8437D10E2F11816C83
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3430303a3a2f34302d3438203d3e20323030343535.roa
Signing time:             Mon 19 Dec 2022 10:06:35 +0000
ROA not before:           Mon 19 Dec 2022 10:01:35 +0000
ROA not after:            Mon 18 Dec 2023 10:06:35 +0000
asID:                     200455
IP address blocks:        2a0a:6040:400::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a7:35:26:74:f0:06:80:10:d3:fa:84:37:d1:0e:2f:11:81:6c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 19 10:01:35 2022 GMT
            Not After : Dec 18 10:06:35 2023 GMT
        Subject: CN=D94477276417FE8929E0357702A0725E26617838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:f5:d3:07:5e:21:6d:f5:8e:a7:a4:c1:b2:
                    3d:ce:13:27:f4:b4:9e:71:8f:78:80:93:7c:21:9a:
                    9d:73:a6:32:74:6f:79:35:c7:e8:17:14:9c:2f:7b:
                    7c:9c:32:18:88:5b:ad:a0:6d:bd:f3:64:d9:1a:18:
                    b1:01:24:cb:92:ad:26:6a:65:7b:f0:5b:f0:1c:05:
                    87:ae:49:c3:90:4d:9e:13:c3:d4:d2:bf:75:18:f5:
                    c4:1f:66:74:ae:2e:ed:a6:1d:b1:83:28:1f:11:39:
                    ad:6c:90:ef:10:80:05:4f:04:e3:2d:1f:6b:96:6c:
                    8c:b8:10:3a:65:42:c6:d9:05:f5:70:87:ff:a8:e4:
                    07:cd:2c:c4:57:22:f6:a1:d9:6d:fd:dd:b5:f3:be:
                    2c:5b:0e:ff:dd:32:57:b7:22:c6:32:d4:11:e0:c6:
                    17:be:56:16:00:bc:9e:83:82:1d:23:f8:3e:a4:58:
                    4a:5c:10:0b:da:23:07:d5:36:db:4e:69:61:7f:b6:
                    67:f6:7b:bc:ee:7e:88:f4:9c:8a:ee:d1:0a:7d:e2:
                    1e:66:2e:a3:ca:4d:99:7d:f3:df:fc:47:e3:bc:a2:
                    a8:7d:19:ca:d9:4a:2f:5a:ef:a7:4f:79:77:0c:45:
                    12:4d:80:fe:b4:65:e1:5c:cc:b7:1e:19:78:38:40:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:44:77:27:64:17:FE:89:29:E0:35:77:02:A0:72:5E:26:61:78:38
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3430303a3a2f34302d3438203d3e20323030343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:a1:f6:6e:16:4e:6c:46:f2:61:11:c9:1e:d5:7b:a7:93:c6:
         73:9b:e9:d7:a9:14:48:5c:d6:52:6d:a6:e2:c4:eb:2f:76:1e:
         ff:85:26:be:7e:8e:52:2d:11:8f:9d:3f:31:61:88:fb:4c:65:
         63:a4:df:f1:8b:c7:66:d0:37:5e:4f:a7:d4:ef:88:9b:48:de:
         57:5b:2b:c2:ee:c4:91:dc:0d:19:76:64:a2:26:d6:0e:02:68:
         77:77:f5:f1:e4:d2:b4:45:3f:71:8b:46:3d:7e:37:3d:53:f3:
         fc:68:c8:93:7b:c3:bc:6c:a8:43:14:15:28:fe:5e:48:e2:ed:
         9b:2c:f4:82:ca:5e:71:0d:2c:fd:62:c1:9c:03:61:ce:93:65:
         b7:2d:27:58:f3:79:a2:00:1e:83:79:ef:d9:92:44:cd:93:85:
         de:4b:dd:1e:24:db:0c:f9:c5:91:2b:3b:87:2c:74:a1:9a:eb:
         c8:12:cf:4a:96:61:88:b9:c0:cf:e8:7e:a2:6b:05:6c:cd:ca:
         6f:37:d0:b4:94:eb:ab:1b:00:a2:5d:b5:b2:b9:79:99:bd:56:
         1e:1e:9e:10:29:99:be:3b:d9:89:d4:a4:11:a0:e6:5f:0a:8e:
         f3:fd:e6:a1:e9:98:7e:24:84:43:7d:61:01:cf:37:8d:77:16:
         aa:29:43:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----