Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613930303a3a2f34302d3438203d3e20323030353336.roa
File:                     326130613a363034303a613930303a3a2f34302d3438203d3e20323030353336.roa (raw, json)
Hash identifier:          JQdcslwNXDpKkcYHPi1LaISygben/xi1MyGWMHeogFM=
Subject key identifier:   AF:54:79:DB:E5:6F:43:95:B7:EF:C5:05:60:DC:67:AF:99:12:73:3A
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       343AFDB1135D35623C87A373BA880FFE6F11C959
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613930303a3a2f34302d3438203d3e20323030353336.roa
Signing time:             Wed 14 Dec 2022 11:30:45 +0000
ROA not before:           Wed 14 Dec 2022 11:25:45 +0000
ROA not after:            Wed 13 Dec 2023 11:30:45 +0000
asID:                     200536
IP address blocks:        2a0a:6040:a900::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3a:fd:b1:13:5d:35:62:3c:87:a3:73:ba:88:0f:fe:6f:11:c9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 14 11:25:45 2022 GMT
            Not After : Dec 13 11:30:45 2023 GMT
        Subject: CN=AF5479DBE56F4395B7EFC50560DC67AF9912733A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:12:ae:81:cf:f2:c7:9c:80:a0:a5:bc:b3:
                    9d:9c:28:60:a2:1b:20:fa:d9:42:06:cd:98:b8:fa:
                    fa:a5:14:3b:8d:25:08:0b:9d:0b:b5:f9:b7:8e:49:
                    7e:6b:43:cd:0d:a0:c8:49:fb:21:7a:af:be:67:57:
                    17:4a:8d:4c:e9:22:43:60:09:bf:0c:5e:12:07:e2:
                    6b:0c:29:75:cd:37:56:91:a1:57:30:6e:0f:b2:75:
                    70:a5:d2:7c:bc:43:5b:93:f1:fb:db:fa:44:ec:6b:
                    f9:7d:ae:6a:81:fd:d3:a7:a3:63:d5:17:b0:44:ef:
                    da:bf:5b:f0:2d:71:0d:b9:95:b7:96:84:f5:6a:98:
                    02:d1:d3:d6:30:e7:92:c0:4c:c5:1d:95:56:ba:8c:
                    2f:b7:4f:db:03:0b:e5:26:be:b9:1c:83:31:4e:49:
                    5b:c3:60:67:6e:e4:9d:a9:29:e6:7a:49:f2:bd:4b:
                    26:c9:11:88:5b:b4:f4:f5:f5:36:1e:2c:18:09:2f:
                    20:a1:9f:34:62:ae:e9:7a:57:a8:8b:f5:89:ca:37:
                    e5:32:0e:06:bd:b4:d6:a9:fa:ab:2e:01:5e:01:53:
                    19:61:d7:2d:e3:a5:02:7a:56:9e:61:eb:08:69:ba:
                    db:da:62:9f:cd:18:8b:bb:37:25:37:45:59:87:3c:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:54:79:DB:E5:6F:43:95:B7:EF:C5:05:60:DC:67:AF:99:12:73:3A
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613930303a3a2f34302d3438203d3e20323030353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a900::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:6f:c5:50:c0:65:57:08:93:aa:70:e9:b7:66:32:56:30:cb:
         b7:a1:5b:f4:6d:e5:25:60:7b:69:4c:be:01:ea:36:88:ba:ba:
         4c:8b:9c:7f:cf:af:56:dd:aa:ac:a1:92:ce:a6:7e:13:8e:71:
         4e:f1:1a:79:ef:72:1a:ea:04:c9:b7:95:f9:60:d7:10:34:b6:
         8f:c3:24:61:d7:d7:c2:86:71:45:8f:81:4a:01:a5:5b:ee:a7:
         36:6b:f3:54:b4:f2:b5:b6:7d:1b:7a:af:6e:a4:a8:c0:8f:d5:
         ef:81:2d:63:7f:0b:53:39:62:7d:b7:4f:a2:79:c8:1e:4b:be:
         88:65:61:64:30:bd:52:9d:c0:f0:81:39:95:39:47:fa:8d:86:
         ae:94:ed:b1:d4:77:b0:dd:1f:13:98:ff:3b:3d:d8:15:e5:96:
         ea:81:7c:20:1a:b1:57:5b:a2:7e:0c:4a:94:6b:c3:10:ba:7a:
         d6:ce:41:f4:87:53:40:ba:8c:84:10:32:58:10:6a:7e:13:93:
         ec:a0:10:fe:68:e2:6c:71:c7:28:b0:27:5e:6b:25:c3:5d:e9:
         d2:3a:60:16:73:48:17:74:fc:bb:70:a0:e5:64:e7:0a:10:78:
         d0:9e:37:79:33:ea:1d:05:41:f3:ae:2c:85:37:66:77:ac:9d:
         04:d3:5d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----