Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e20323033363335.roa
File:                     326130613a363034303a623030303a3a2f34302d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          bGdjEuW7alKp883KJcYpFv19i1PV6NciexEFOGSZsrc=
Subject key identifier:   84:8B:CC:3F:C1:40:58:22:89:5E:77:79:F8:A9:26:26:C6:C2:B7:57
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0401E66B987EE0AA8132AC6FE5494CC99844221D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e20323033363335.roa
Signing time:             Wed 21 Dec 2022 22:14:20 +0000
ROA not before:           Wed 21 Dec 2022 22:09:20 +0000
ROA not after:            Wed 20 Dec 2023 22:14:20 +0000
asID:                     203635
IP address blocks:        2a0a:6040:b000::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:01:e6:6b:98:7e:e0:aa:81:32:ac:6f:e5:49:4c:c9:98:44:22:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 21 22:09:20 2022 GMT
            Not After : Dec 20 22:14:20 2023 GMT
        Subject: CN=848BCC3FC1405822895E7779F8A92626C6C2B757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:a7:a5:ec:0f:99:76:b5:ec:23:50:53:8d:
                    d7:3c:64:ac:e9:31:ae:a0:82:2b:00:b3:3b:7b:3b:
                    96:6b:b7:c7:0b:a5:f5:7b:c7:00:ac:47:9c:43:46:
                    60:bc:d4:11:59:3c:4e:1c:04:f2:e2:72:1c:3b:f9:
                    d8:a6:3d:70:0d:46:d5:e7:b7:a5:3d:35:8c:f7:be:
                    d3:a9:01:1d:42:de:57:bd:4d:a6:44:7b:46:e9:29:
                    54:87:f3:6b:44:9e:61:9d:79:bd:53:27:95:26:08:
                    00:7e:95:38:e1:2d:fe:dd:07:55:58:a2:a3:db:f3:
                    7d:02:af:b8:a9:e8:f0:e0:5b:b9:ae:51:b6:6c:05:
                    5e:80:61:ae:87:c1:c0:13:fe:0e:6e:99:3a:69:bf:
                    ee:ef:f4:c2:22:68:85:e6:82:7f:c0:0e:62:17:99:
                    02:a0:2a:b9:12:ee:a6:6e:3f:85:69:1f:30:ad:5f:
                    47:78:48:f2:13:d2:f4:5d:f5:00:e8:ff:74:fd:bb:
                    f7:12:e4:db:6a:60:a7:75:72:de:df:04:81:ca:8d:
                    6f:ce:26:91:e5:72:58:69:52:87:0c:8e:57:26:64:
                    c3:9b:ae:ec:dc:b5:89:46:15:6f:4d:1d:bf:dd:7f:
                    5f:d1:9d:7b:e2:14:2b:b8:76:68:9c:e0:96:f7:88:
                    29:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8B:CC:3F:C1:40:58:22:89:5E:77:79:F8:A9:26:26:C6:C2:B7:57
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:9a:57:86:da:fa:95:9e:ca:f2:ad:32:5f:1b:13:45:1a:
         d9:37:3d:71:0f:14:cb:ca:d2:9d:c3:31:b2:c6:70:51:83:0c:
         b0:99:8b:65:8d:9b:25:61:b0:0f:9d:46:9b:06:6d:e5:4c:b8:
         7e:ee:20:5b:c2:cf:b6:15:f2:e9:88:a3:7c:e7:21:5d:2b:ce:
         12:77:1b:92:7b:ff:5f:f6:35:25:43:ea:89:1a:ac:c2:8d:67:
         b9:16:4e:42:c3:fc:fc:d2:c7:bd:2c:73:8e:a8:bb:db:dc:18:
         ea:e9:20:19:96:af:5c:fb:48:d0:c1:95:2f:be:a4:f7:27:ef:
         90:df:db:4e:77:78:af:bc:d4:ec:c7:0f:7d:22:1f:d4:2b:da:
         39:5f:d3:7c:80:05:57:8c:05:da:b8:92:e4:a0:8a:18:04:d5:
         c5:72:ce:c7:d1:b9:2b:b1:0d:6d:72:05:ea:d6:9c:ee:f2:ef:
         f4:fd:ec:c9:41:44:94:19:05:f5:1c:c1:b3:be:d6:dd:76:78:
         c9:2e:9a:dd:dd:a7:96:fe:95:43:31:8a:70:0b:bc:60:8b:c7:
         f8:ec:fd:4f:0d:72:ba:10:1e:bf:16:8f:83:23:78:95:cb:cb:
         25:ca:64:f6:ac:23:0e:79:97:c5:ec:6d:1b:e4:79:45:41:42:
         be:f2:a8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----