Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616330303a3a2f34302d3438203d3e20323030333037.roa
File:                     326130613a363034303a616330303a3a2f34302d3438203d3e20323030333037.roa (raw, json)
Hash identifier:          TTmS8pcXS5bQ10lrVDVpTF6DZDGYy5idH3Z6iFU+50w=
Subject key identifier:   10:19:A2:44:24:59:00:29:7D:A7:47:40:72:75:88:4B:EB:22:BB:5B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5B8457A4689500988128BF8814C0375EBE4842F8
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616330303a3a2f34302d3438203d3e20323030333037.roa
Signing time:             Fri 23 Dec 2022 11:56:47 +0000
ROA not before:           Fri 23 Dec 2022 11:51:47 +0000
ROA not after:            Fri 22 Dec 2023 11:56:47 +0000
asID:                     200307
IP address blocks:        2a0a:6040:ac00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:84:57:a4:68:95:00:98:81:28:bf:88:14:c0:37:5e:be:48:42:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 23 11:51:47 2022 GMT
            Not After : Dec 22 11:56:47 2023 GMT
        Subject: CN=1019A244245900297DA747407275884BEB22BB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:81:ca:fc:dc:62:01:85:99:10:2e:ba:93:15:
                    ec:3c:23:82:19:33:5f:75:01:c0:75:33:74:32:cf:
                    7b:52:03:99:68:62:be:fb:6e:4d:f0:9d:54:f0:45:
                    55:3a:a8:84:7b:9a:28:cd:c7:0f:7d:2d:a4:5c:42:
                    7c:87:20:71:16:0c:e5:81:1a:e1:87:7c:75:89:a1:
                    82:5f:a5:ad:39:f7:0e:0c:a6:86:4c:8a:cb:a9:ca:
                    e2:0f:5f:db:83:cb:21:66:01:b5:66:34:85:e8:1a:
                    9c:6c:0b:f0:0a:06:99:7b:43:15:ef:1b:77:6e:c5:
                    bb:58:cc:7a:ed:13:67:9a:e6:78:bb:8b:95:bc:ad:
                    ee:42:ce:8c:63:72:5d:85:35:2f:28:c8:57:c4:c3:
                    6c:eb:5d:ba:f0:fa:ba:e2:0c:5c:23:63:4a:aa:2b:
                    fb:9c:9c:6e:a2:0b:c3:67:2e:98:ec:3f:56:cc:63:
                    d2:87:83:17:97:08:88:d5:88:4b:66:3a:38:22:bc:
                    8b:f9:be:3b:42:0c:1a:34:1c:41:4c:11:76:3f:cb:
                    29:cb:2b:07:7b:b3:61:71:42:63:fd:3a:7a:0c:60:
                    65:59:25:3d:d1:44:e8:e1:9d:b8:24:57:4d:6c:e5:
                    fd:88:b1:c1:96:4d:7b:27:43:34:1d:5f:bf:4b:bd:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:19:A2:44:24:59:00:29:7D:A7:47:40:72:75:88:4B:EB:22:BB:5B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616330303a3a2f34302d3438203d3e20323030333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ac00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:04:6e:a1:d4:01:45:a1:0a:a3:43:49:69:3a:fa:ea:59:4a:
         cf:fd:3e:11:94:f2:8a:6c:d2:81:00:00:fc:62:36:61:d1:f7:
         61:87:cc:b4:4c:6b:33:28:2c:c3:2c:9c:89:ac:de:06:6e:3f:
         11:92:96:19:73:f4:bd:96:2d:3f:a9:be:d4:91:d9:ed:45:98:
         ac:1e:49:ae:c0:91:17:e8:1f:44:81:2d:89:ef:5a:8b:e9:63:
         ad:99:0a:b7:bd:a0:5f:1d:87:da:af:8e:8c:d3:a7:f9:99:86:
         48:1d:44:12:cb:89:1b:1f:a0:c3:f5:9e:ad:f0:61:06:8d:2c:
         0f:ed:b5:da:e6:8b:75:22:89:c6:5d:61:77:24:85:9d:d2:2c:
         93:88:67:97:b2:62:40:b9:28:f3:f0:b3:85:c5:e9:c0:a1:cc:
         14:06:3d:65:ca:18:a5:00:ca:ff:1e:1d:13:b4:52:d4:38:41:
         71:8a:14:19:4b:97:00:d1:da:48:e8:8b:a0:63:ee:fb:78:98:
         48:77:50:59:65:31:90:10:7a:22:67:dd:ec:3a:d7:57:9d:e7:
         04:69:c5:18:2b:5a:24:4f:c5:b3:b8:61:c9:ef:8a:0a:46:04:
         3a:e9:d2:48:23:42:fa:60:31:4a:10:ad:6c:f6:04:2c:cc:3b:
         36:4b:fc:5e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUW4RXpGiVAJiBKL+IFMA3Xr5IQvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMjMxMTUxNDdaFw0yMzEyMjIxMTU2NDdaMDMxMTAvBgNV
BAMTKDEwMTlBMjQ0MjQ1OTAwMjk3REE3NDc0MDcyNzU4ODRCRUIyMkJCNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDegcr83GIBhZkQLrqTFew8I4IZ
M191AcB1M3Qyz3tSA5loYr77bk3wnVTwRVU6qIR7mijNxw99LaRcQnyHIHEWDOWB
GuGHfHWJoYJfpa059w4MpoZMisupyuIPX9uDyyFmAbVmNIXoGpxsC/AKBpl7QxXv
G3duxbtYzHrtE2ea5ni7i5W8re5Czoxjcl2FNS8oyFfEw2zrXbrw+rriDFwjY0qq
K/ucnG6iC8NnLpjsP1bMY9KHgxeXCIjViEtmOjgivIv5vjtCDBo0HEFMEXY/yynL
Kwd7s2FxQmP9OnoMYGVZJT3RROjhnbgkV01s5f2IscGWTXsnQzQdX79Lvd2DAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUEBmiRCRZACl9p0dAcnWIS+siu1swHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2MTYz
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDMzMzAzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYECsMA0GCSqGSIb3DQEBCwUAA4IBAQB7BG6h1AFFoQqjQ0lpOvrqWUrP
/T4RlPKKbNKBAAD8YjZh0fdhh8y0TGszKCzDLJyJrN4Gbj8RkpYZc/S9li0/qb7U
kdntRZisHkmuwJEX6B9EgS2J71qL6WOtmQq3vaBfHYfar46M06f5mYZIHUQSy4kb
H6DD9Z6t8GEGjSwP7bXa5ot1IonGXWF3JIWd0iyTiGeXsmJAuSjz8LOFxenAocwU
Bj1lyhilAMr/Hh0TtFLUOEFxihQZS5cA0dpI6IugY+77eJhId1BZZTGQEHoiZ93s
OtdXnecEacUYK1okT8WzuGHJ74oKRgQ66dJII0L6YDFKEK1s9gQszDs2S/xe
-----END CERTIFICATE-----