Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616630303a3a2f34302d3438203d3e20323033333333.roa
File:                     326130613a363034303a616630303a3a2f34302d3438203d3e20323033333333.roa (raw, json)
Hash identifier:          Q3eu8hQ3FukJMnR+4aSY2Ds5hdCMDAonacqZjSi8CIk=
Subject key identifier:   81:91:C7:AE:3C:4C:29:33:CC:30:06:50:C4:F4:1D:9D:35:31:11:5B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       629E508CAF9D976165574400A769D5F9B33B2B93
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616630303a3a2f34302d3438203d3e20323033333333.roa
Signing time:             Wed 21 Dec 2022 22:19:15 +0000
ROA not before:           Wed 21 Dec 2022 22:14:15 +0000
ROA not after:            Wed 20 Dec 2023 22:19:15 +0000
asID:                     203333
IP address blocks:        2a0a:6040:af00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9e:50:8c:af:9d:97:61:65:57:44:00:a7:69:d5:f9:b3:3b:2b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 21 22:14:15 2022 GMT
            Not After : Dec 20 22:19:15 2023 GMT
        Subject: CN=8191C7AE3C4C2933CC300650C4F41D9D3531115B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:8a:1a:14:a2:20:96:e4:7e:23:81:79:11:
                    58:16:51:21:2a:a4:dd:63:58:47:1c:07:00:2e:c0:
                    77:10:5a:6d:d2:44:2d:39:8c:26:8a:ad:ca:f2:a9:
                    66:03:30:0e:10:39:0e:09:9b:99:7b:d0:0e:f9:55:
                    9a:90:70:23:b1:2c:9f:ff:47:fc:f1:c0:53:97:e9:
                    2d:5b:e0:4d:60:7c:f4:a0:41:50:69:4e:87:e7:43:
                    2f:48:9b:da:5e:07:42:b7:14:f3:31:8e:f2:4e:68:
                    81:16:cd:db:27:f6:a8:60:d0:cb:0c:39:47:29:ab:
                    b7:35:f3:c4:16:fa:9f:b4:5a:0d:52:7d:9f:42:9a:
                    d0:82:69:3a:e2:3e:a9:a5:5d:bb:d7:7f:ca:b9:00:
                    ea:2e:18:db:62:38:f5:06:6c:63:b9:ed:01:c7:f4:
                    e5:be:56:65:d5:21:6b:72:8e:c4:01:a2:c3:91:4f:
                    d3:29:3c:8b:20:0d:5a:df:8d:60:9b:51:a6:0c:69:
                    ab:29:e8:c8:a0:42:5b:64:6d:76:77:4d:66:8d:61:
                    bd:60:da:30:7c:8d:e8:e2:cd:a1:ff:90:3f:c4:43:
                    dd:3c:79:74:fc:76:52:7e:59:72:ae:27:d8:78:84:
                    ab:dc:4b:22:00:dc:54:fc:7b:ec:2f:1b:25:fe:91:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:91:C7:AE:3C:4C:29:33:CC:30:06:50:C4:F4:1D:9D:35:31:11:5B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616630303a3a2f34302d3438203d3e20323033333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:af00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:f5:f3:db:11:fa:cc:55:e9:17:c9:9a:e5:ba:f3:e5:56:f4:
         34:a0:0f:1e:04:a3:46:a5:c8:40:4f:f6:3f:94:21:22:65:e3:
         8f:08:6d:8b:d1:7e:f1:58:f1:2d:21:1a:0f:7f:ea:86:64:e9:
         9e:83:26:a9:21:df:20:94:58:c9:c2:31:b8:e3:1e:34:fc:2e:
         75:ef:7e:81:22:98:fb:1e:a7:e5:be:df:58:a8:5e:a2:12:98:
         89:96:54:ed:8b:95:6c:5b:41:7b:72:c8:21:8c:eb:f7:86:eb:
         4d:97:f2:ea:d3:47:83:89:6f:83:e5:1f:97:c9:bc:54:9a:17:
         7f:a9:79:ed:75:a3:cd:9f:d2:94:c9:57:17:df:07:47:c6:a2:
         45:d7:a9:c0:fa:cc:49:40:10:27:42:52:c1:86:50:8f:25:69:
         40:1a:c3:d1:f6:2f:6e:ab:46:9c:33:75:f1:b0:63:4a:ca:c4:
         6b:42:23:2e:38:50:09:bc:9b:76:9d:4f:5f:17:d9:68:aa:5c:
         d0:3a:a8:24:4c:a6:9a:a3:f3:63:55:e7:4a:2b:36:dc:d4:19:
         35:ee:a4:d5:0a:e9:53:47:ee:61:74:64:31:3b:ce:ff:e8:ec:
         f8:ce:03:23:28:19:73:9f:24:b4:ab:66:14:76:6c:48:3f:be:
         88:aa:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----