Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3a2f34302d3438203d3e20323034383537.roa
File:                     326130613a363034303a3a2f34302d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          felKdYLjyH5uThGclY5xvLaqCesn1DHvx04P/twEf3g=
Subject key identifier:   BA:67:85:FC:75:B1:C6:7B:6C:4D:17:86:BE:D4:31:BA:2C:66:3C:06
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5D2E60F4E4B21A7222D2AF8E8BD9BE20D908E27C
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3a2f34302d3438203d3e20323034383537.roa
Signing time:             Tue 13 Dec 2022 12:05:41 +0000
ROA not before:           Tue 13 Dec 2022 12:00:41 +0000
ROA not after:            Tue 12 Dec 2023 12:05:41 +0000
asID:                     204857
IP address blocks:        2a0a:6040::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2e:60:f4:e4:b2:1a:72:22:d2:af:8e:8b:d9:be:20:d9:08:e2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 13 12:00:41 2022 GMT
            Not After : Dec 12 12:05:41 2023 GMT
        Subject: CN=BA6785FC75B1C67B6C4D1786BED431BA2C663C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:55:d0:13:77:74:31:ad:87:cf:15:94:28:df:
                    b0:bb:64:e8:19:8b:a3:a3:65:39:9e:8e:5f:3f:a2:
                    ac:33:52:ad:0e:0b:f2:90:6e:70:1e:8e:9a:8b:6d:
                    4d:66:17:cb:b6:f9:45:a5:90:c7:6a:5e:8f:d0:0c:
                    6e:00:6f:5a:09:8d:9b:9b:55:2e:d7:7a:62:2e:53:
                    43:33:1e:c6:af:c6:3e:a3:03:06:0e:ca:6f:d0:6b:
                    ca:b1:e1:27:30:07:39:ce:2d:ae:bd:2b:b0:8d:85:
                    89:c6:d3:3d:b1:5b:0a:f4:b8:11:f8:cf:1a:06:93:
                    16:b4:3d:32:b4:df:19:38:5c:5c:cb:dd:4a:7e:a0:
                    98:61:b1:24:ce:8e:b7:87:9d:28:43:43:49:e3:c7:
                    d6:7f:4f:8c:3a:7e:a0:25:45:41:36:eb:d1:ae:ea:
                    f9:d8:7b:e9:2d:67:3b:df:34:f3:13:d4:c9:53:88:
                    58:e3:62:83:14:04:9e:2d:79:a9:48:0f:86:6d:ff:
                    5e:cc:ae:76:05:c5:de:d5:b6:60:1d:12:d8:0d:c3:
                    f9:28:c1:72:e9:79:dd:5a:55:41:f0:65:20:56:b4:
                    c2:fe:a3:ec:52:ef:39:9c:ee:a9:d3:2f:6e:f2:a2:
                    20:b7:c0:75:eb:6d:45:f2:8b:71:6f:98:26:89:a8:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:67:85:FC:75:B1:C6:7B:6C:4D:17:86:BE:D4:31:BA:2C:66:3C:06
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3a2f34302d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:04:1d:00:44:32:68:6c:8d:75:8b:d7:0f:9e:22:60:84:0f:
         31:3c:43:4f:f3:d1:68:8f:a4:c5:0a:8a:ff:e4:14:c7:05:77:
         b3:af:8e:fd:8f:f4:61:38:86:04:bf:93:45:8a:34:75:64:68:
         81:73:dc:81:40:e2:9d:e5:32:e7:eb:b6:33:1b:94:7d:44:eb:
         a4:0a:fb:72:8b:7f:34:8a:fd:87:f2:bf:1c:dd:1d:95:13:e2:
         cd:3a:77:f1:c1:23:9f:1b:25:17:c7:03:cd:9a:35:d1:56:0c:
         89:50:c9:86:f2:43:e0:c8:8c:e1:a8:6b:fd:51:4d:51:44:a5:
         ad:54:01:30:ee:e8:0e:05:70:73:73:8f:fa:c6:21:d1:cd:43:
         02:c9:aa:c6:fa:13:56:0c:65:09:f0:43:99:62:b3:2b:12:80:
         98:2c:0b:9f:0a:69:03:db:67:a3:2b:81:f2:f7:14:41:21:9b:
         5b:02:eb:55:2a:9d:58:22:79:a0:31:23:39:f3:ca:6d:1a:99:
         10:d3:6c:8d:65:53:b3:c2:09:dd:3c:ce:8a:8f:ca:47:e2:38:
         f8:17:d5:59:34:15:16:f6:23:3b:ba:14:e7:c2:f7:2d:c0:5e:
         34:c0:b0:fe:62:cc:81:26:34:79:2b:c7:78:f5:61:fe:72:f9:
         40:e8:04:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----