Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613430303a3a2f34302d3438203d3e20323030383039.roa
File:                     326130613a363034303a613430303a3a2f34302d3438203d3e20323030383039.roa (raw, json)
Hash identifier:          flD1dgF1rkUIrBgTgtbmcKx9kJEVO9p6TCLnIa4BTsw=
Subject key identifier:   95:0B:44:63:31:5C:83:19:2F:A2:46:CF:59:68:1A:74:F6:A5:C6:E1
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2C3679710A413BE963469621E66221976055FE64
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613430303a3a2f34302d3438203d3e20323030383039.roa
Signing time:             Fri 09 Dec 2022 08:20:57 +0000
ROA not before:           Fri 09 Dec 2022 08:15:57 +0000
ROA not after:            Fri 08 Dec 2023 08:20:57 +0000
asID:                     200809
IP address blocks:        2a0a:6040:a400::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:36:79:71:0a:41:3b:e9:63:46:96:21:e6:62:21:97:60:55:fe:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:57 2022 GMT
            Not After : Dec  8 08:20:57 2023 GMT
        Subject: CN=950B4463315C83192FA246CF59681A74F6A5C6E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9e:a4:57:cb:bd:23:d6:56:2b:dc:82:75:7e:
                    4b:cf:97:39:33:79:73:92:89:80:ff:af:57:81:fe:
                    2b:33:b1:79:f4:ec:44:e4:c7:9a:5c:2f:e4:5e:eb:
                    c9:23:5d:f9:35:a3:b2:18:36:40:18:db:c3:92:2e:
                    21:b2:03:a5:31:ff:b8:c5:3a:7d:86:51:d1:05:58:
                    96:4e:9f:79:41:80:ab:f1:38:92:b8:86:00:37:0c:
                    33:69:8a:75:ad:e0:aa:1e:b1:09:fc:96:7b:1a:2c:
                    35:26:db:e0:a1:fc:32:11:b9:77:bb:64:4c:e8:7b:
                    97:6a:d9:b9:5d:15:1a:eb:8b:c0:c9:44:ba:e1:f6:
                    e0:40:5a:53:f3:25:ee:e6:61:1e:e5:57:92:e3:64:
                    d0:41:0d:96:d5:22:91:36:fb:aa:df:db:15:b1:d8:
                    b6:99:b7:b0:95:59:e9:d0:e0:f4:a0:20:a9:d4:d9:
                    ed:8a:1c:f4:5a:1a:e0:7a:89:b4:78:1a:8d:2b:43:
                    61:8f:d0:03:08:f9:5b:b1:bc:a3:f7:3b:eb:b8:67:
                    95:50:41:55:0c:f0:d1:98:f5:12:c9:0f:63:f2:f6:
                    dc:5e:cb:ec:39:b7:1d:19:86:7c:bc:00:02:06:cb:
                    93:e0:e2:21:9f:98:2a:83:f8:e5:63:2d:b8:e2:8c:
                    9d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0B:44:63:31:5C:83:19:2F:A2:46:CF:59:68:1A:74:F6:A5:C6:E1
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613430303a3a2f34302d3438203d3e20323030383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:b7:29:39:2b:2b:36:74:c3:d1:04:bd:dd:64:be:c9:4d:13:
         50:7b:1a:55:92:6a:94:33:9d:f6:d1:21:68:b0:af:b9:9f:d7:
         76:75:c7:a8:1d:ec:35:46:0a:c1:19:08:af:7a:8b:72:ad:c0:
         80:3e:ca:26:c2:f8:8c:c1:8c:9b:b1:20:1c:ed:58:ab:71:5a:
         d1:20:9f:9a:c9:06:74:ac:c4:e0:8c:2c:d1:b2:c4:38:24:f0:
         c3:b4:30:d1:13:a6:eb:7c:5c:34:1a:c8:dd:08:63:53:7c:78:
         ca:91:93:19:fd:f4:36:4c:85:4c:31:a9:22:f8:6d:4b:60:e0:
         1c:79:bc:1d:17:c6:cc:df:0e:20:fb:f3:85:44:c9:23:45:6b:
         fd:f9:54:1b:14:61:e9:f8:92:c6:db:60:c4:1c:37:5c:4b:82:
         1c:be:ab:01:cf:28:48:1b:fa:29:85:33:a4:86:28:31:f3:47:
         a0:83:dd:68:e9:da:01:45:cf:1e:a7:4c:d6:e3:4f:68:21:c2:
         ea:5b:50:d2:ff:09:a6:c0:ca:d2:76:dd:4b:f9:1b:ec:14:c2:
         a4:a6:b7:fe:73:2b:20:84:8c:b2:bb:46:c1:01:86:b6:0f:1a:
         e7:ef:84:14:21:d4:53:f8:1f:da:b6:2e:3d:16:e0:b5:b9:e1:
         92:49:d5:c6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIULDZ5cQpBO+ljRpYh5mIhl2BV/mQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMDkwODE1NTdaFw0yMzEyMDgwODIwNTdaMDMxMTAvBgNV
BAMTKDk1MEI0NDYzMzE1QzgzMTkyRkEyNDZDRjU5NjgxQTc0RjZBNUM2RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtnqRXy70j1lYr3IJ1fkvPlzkz
eXOSiYD/r1eB/iszsXn07ETkx5pcL+Re68kjXfk1o7IYNkAY28OSLiGyA6Ux/7jF
On2GUdEFWJZOn3lBgKvxOJK4hgA3DDNpinWt4KoesQn8lnsaLDUm2+Ch/DIRuXe7
ZEzoe5dq2bldFRrri8DJRLrh9uBAWlPzJe7mYR7lV5LjZNBBDZbVIpE2+6rf2xWx
2LaZt7CVWenQ4PSgIKnU2e2KHPRaGuB6ibR4Go0rQ2GP0AMI+VuxvKP3O+u4Z5VQ
QVUM8NGY9RLJD2Py9txey+w5tx0Zhny8AAIGy5Pg4iGfmCqD+OVjLbjijJ0bAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUlQtEYzFcgxkvokbPWWgadPalxuEwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2MTM0
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDM4MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYECkMA0GCSqGSIb3DQEBCwUAA4IBAQA7tyk5Kys2dMPRBL3dZL7JTRNQ
expVkmqUM5320SFosK+5n9d2dceoHew1RgrBGQiveotyrcCAPsomwviMwYybsSAc
7VircVrRIJ+ayQZ0rMTgjCzRssQ4JPDDtDDRE6brfFw0GsjdCGNTfHjKkZMZ/fQ2
TIVMMaki+G1LYOAcebwdF8bM3w4g+/OFRMkjRWv9+VQbFGHp+JLG22DEHDdcS4Ic
vqsBzyhIG/ophTOkhigx80egg91o6doBRc8ep0zW409oIcLqW1DS/wmmwMrSdt1L
+RvsFMKkprf+cysghIyyu0bBAYa2Dxrn74QUIdRT+B/ati49FuC1ueGSSdXG
-----END CERTIFICATE-----