Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa
File:                     326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          2LRkUUDCHt3+Jqz5lfdh/f/5VviCiDCTcUW/+9PPy+A=
Subject key identifier:   36:7F:08:2D:2A:DC:28:68:90:07:AB:3A:F9:40:9B:74:AB:EC:0D:A2
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       599B689C99064A3B5D5CC17936CD68070F4D604E
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa
Signing time:             Wed 21 Dec 2022 22:19:39 +0000
ROA not before:           Wed 21 Dec 2022 22:14:39 +0000
ROA not after:            Wed 20 Dec 2023 22:19:39 +0000
asID:                     204857
IP address blocks:        2a0a:6040:b000::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9b:68:9c:99:06:4a:3b:5d:5c:c1:79:36:cd:68:07:0f:4d:60:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 21 22:14:39 2022 GMT
            Not After : Dec 20 22:19:39 2023 GMT
        Subject: CN=367F082D2ADC28689007AB3AF9409B74ABEC0DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:af:b3:c0:38:f8:0e:18:5c:e4:d5:a5:cd:
                    9d:69:8d:ab:d3:e2:5a:4c:9a:03:da:23:20:1f:1f:
                    ff:23:7f:8b:9e:ef:49:d8:d4:80:10:10:78:b9:65:
                    fd:24:bf:bf:0c:63:eb:02:f6:a6:b3:e6:e6:5b:fa:
                    8b:aa:f4:1e:d1:a3:bb:13:6f:5f:70:e2:aa:54:b2:
                    4d:2e:08:98:69:40:67:89:b2:62:02:e0:69:3c:18:
                    17:eb:25:1f:74:6d:a5:a2:b3:55:72:79:44:7e:54:
                    d8:c9:ae:b1:a6:6c:b5:ef:d0:51:59:43:ce:b6:4b:
                    0c:37:96:89:f1:74:b4:c2:f1:8c:bc:b4:e4:a4:7e:
                    0d:e2:20:79:04:0a:00:37:09:30:5f:79:f5:d6:c3:
                    ea:0e:f7:bd:49:97:a9:a0:29:7e:42:15:01:2b:0c:
                    7d:ce:c3:b7:c9:be:03:0c:91:e1:4b:7f:b5:36:f6:
                    17:20:c8:cb:6a:24:21:30:b4:94:bf:d8:ea:94:5a:
                    88:ce:3a:50:9f:a0:4c:2a:53:4a:83:7a:95:a4:db:
                    f1:c0:82:15:04:94:33:a4:e9:a5:4f:b0:94:6d:bf:
                    1d:e8:6f:fa:03:16:87:73:24:3e:eb:71:d8:67:8f:
                    c3:9b:8a:18:a9:21:80:cb:e0:f0:b8:83:32:d0:6f:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7F:08:2D:2A:DC:28:68:90:07:AB:3A:F9:40:9B:74:AB:EC:0D:A2
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:d0:81:73:d8:fc:9d:ca:13:48:82:8a:b1:29:9c:ea:d5:6f:
         6c:e3:c2:fd:c1:a9:23:d1:60:0a:ec:ad:ff:06:30:f7:2b:68:
         ec:9b:48:56:56:3d:59:24:61:72:2c:97:bb:47:d8:c4:11:50:
         57:22:67:ab:63:03:3e:28:a4:62:24:c5:f0:4b:5e:30:91:98:
         f6:44:60:d7:84:87:31:ee:7c:f5:fc:f6:95:8c:fc:da:cf:b8:
         79:c3:23:ca:9c:e2:a7:d9:a1:5b:61:fa:64:11:ea:d9:89:4c:
         0e:39:79:53:25:1d:ae:fb:90:9f:b5:30:7f:45:73:83:02:14:
         43:f1:06:cc:29:e6:55:26:fc:42:4c:24:3c:b6:19:a3:35:ce:
         fa:5e:54:94:f3:12:c6:5c:5d:9d:3c:c4:a3:24:6c:8b:84:93:
         c2:e9:1b:1a:ee:b1:dd:ba:8d:1d:d4:d2:9c:b0:5e:80:ac:82:
         de:ec:3a:24:05:9f:5f:52:0c:87:cc:25:ca:31:da:3d:c7:91:
         f3:38:81:b1:52:0c:63:83:42:58:4b:7e:bc:33:93:aa:e2:22:
         64:31:96:23:33:7b:52:07:df:b3:54:a5:a8:17:21:f1:91:d4:
         31:95:1f:69:ad:ea:c5:af:05:35:87:32:ca:a6:7a:24:4b:80:
         c2:6b:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----