Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623130303a3a2f34302d3438203d3e20323030363736.roa
File:                     326130613a363034303a623130303a3a2f34302d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          IkqRKFZ3qs1rx0xtR6kRsZMNV2G1ai1Cpuxy+l5Qbo4=
Subject key identifier:   AB:82:A1:DB:54:1D:DD:2B:8F:AB:3C:AA:F0:8B:20:F3:B7:6D:BC:36
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1B5F47B62CC71550545D0941A09BC69F08595ACB
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623130303a3a2f34302d3438203d3e20323030363736.roa
Signing time:             Fri 09 Dec 2022 11:00:01 +0000
ROA not before:           Fri 09 Dec 2022 10:55:01 +0000
ROA not after:            Fri 08 Dec 2023 11:00:01 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5f:47:b6:2c:c7:15:50:54:5d:09:41:a0:9b:c6:9f:08:59:5a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 10:55:01 2022 GMT
            Not After : Dec  8 11:00:01 2023 GMT
        Subject: CN=AB82A1DB541DDD2B8FAB3CAAF08B20F3B76DBC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:dc:70:57:25:82:e7:de:a5:a2:b9:63:99:
                    ae:e7:db:73:43:71:ee:02:3b:e2:87:22:22:89:5a:
                    a8:8a:84:60:6b:4d:1b:b4:00:26:16:3c:f7:ea:8c:
                    14:17:f1:b5:b0:9b:a6:84:00:e6:ef:79:24:a1:d4:
                    b8:09:29:0b:ab:66:dc:82:f6:8f:f7:9a:4a:2b:69:
                    d3:85:b5:1e:3e:4d:92:67:4e:0d:e5:b6:e5:68:18:
                    1d:78:09:7f:1b:4b:6b:5d:d1:1a:73:31:56:1e:b9:
                    b8:8f:c0:35:c3:ca:43:5c:7c:e0:dc:02:30:fa:21:
                    e5:3d:5a:a6:df:3a:a9:ae:9f:ae:c8:3f:5d:1e:f0:
                    c3:2f:88:f8:42:99:c3:e2:48:de:b3:e2:1c:fa:60:
                    6f:9f:ab:eb:29:42:da:64:40:75:ca:13:eb:b2:62:
                    f6:1f:89:f6:de:75:49:a8:2b:b6:2a:39:b3:90:0d:
                    08:a0:c6:04:fa:0b:49:e6:13:d9:01:2f:02:58:2a:
                    b3:ee:7a:1b:51:51:99:c9:c0:ac:19:ad:06:93:24:
                    b4:25:14:d2:eb:14:5d:18:1e:44:7f:85:e8:3e:f8:
                    49:d1:68:2a:f1:a9:d4:6e:87:df:59:61:6f:7b:5f:
                    b0:2b:d5:cb:13:0e:7e:ce:e5:44:58:06:85:4e:e5:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:82:A1:DB:54:1D:DD:2B:8F:AB:3C:AA:F0:8B:20:F3:B7:6D:BC:36
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623130303a3a2f34302d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:dd:8f:61:af:c2:b6:4f:5e:ae:04:cd:9b:9a:83:b4:78:58:
         10:85:5d:51:78:1c:1b:41:fc:3b:de:18:f4:65:78:58:ad:43:
         9c:2b:4e:b1:96:67:c1:38:98:ad:c8:9d:ac:54:02:fc:2d:5d:
         4b:a5:fe:38:a2:d9:37:dd:2c:f4:be:51:47:22:b6:9d:22:44:
         a5:02:0b:de:d1:00:d4:4b:67:5e:aa:7a:42:fb:a9:e9:2a:8b:
         3e:0b:e0:37:cf:de:d7:bd:13:f1:1c:a2:f8:47:1a:23:58:76:
         b0:d0:a2:e0:fb:0b:da:8a:0e:43:32:7f:dd:81:8b:47:f0:ad:
         4c:30:32:99:4f:45:8c:a4:5a:2d:c4:6b:90:ce:57:9b:c7:ed:
         28:9c:86:38:0e:c1:7a:4c:17:dc:3f:2a:05:01:3f:8d:2b:75:
         c0:15:08:89:ce:d7:47:13:65:02:55:95:73:65:d9:56:18:0d:
         73:de:31:9f:c8:09:83:91:a5:4f:c0:3f:8a:98:e1:31:02:c1:
         fb:73:2a:56:18:6e:96:0a:6f:8b:34:c1:ae:95:43:77:fb:7a:
         83:7f:5d:28:dd:6c:fb:b4:d8:4e:57:44:ad:39:c1:94:ed:bb:
         88:80:7e:99:1d:24:6b:fb:97:28:6c:94:cf:e7:65:88:8c:b4:
         cf:67:4f:c3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUG19HtizHFVBUXQlBoJvGnwhZWsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMDkxMDU1MDFaFw0yMzEyMDgxMTAwMDFaMDMxMTAvBgNV
BAMTKEFCODJBMURCNTQxREREMkI4RkFCM0NBQUYwOEIyMEYzQjc2REJDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVNxwVyWC596lorljma7n23ND
ce4CO+KHIiKJWqiKhGBrTRu0ACYWPPfqjBQX8bWwm6aEAObveSSh1LgJKQurZtyC
9o/3mkoradOFtR4+TZJnTg3ltuVoGB14CX8bS2td0RpzMVYeubiPwDXDykNcfODc
AjD6IeU9WqbfOqmun67IP10e8MMviPhCmcPiSN6z4hz6YG+fq+spQtpkQHXKE+uy
YvYfifbedUmoK7YqObOQDQigxgT6C0nmE9kBLwJYKrPuehtRUZnJwKwZrQaTJLQl
FNLrFF0YHkR/heg++EnRaCrxqdRuh99ZYW97X7Ar1csTDn7O5URYBoVO5dCZAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUq4Kh21Qd3SuPqzyq8Isg87dtvDYwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2MjMx
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDM2MzczNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYECxMA0GCSqGSIb3DQEBCwUAA4IBAQCj3Y9hr8K2T16uBM2bmoO0eFgQ
hV1ReBwbQfw73hj0ZXhYrUOcK06xlmfBOJityJ2sVAL8LV1Lpf44otk33Sz0vlFH
IradIkSlAgve0QDUS2deqnpC+6npKos+C+A3z97XvRPxHKL4RxojWHaw0KLg+wva
ig5DMn/dgYtH8K1MMDKZT0WMpFotxGuQzlebx+0onIY4DsF6TBfcPyoFAT+NK3XA
FQiJztdHE2UCVZVzZdlWGA1z3jGfyAmDkaVPwD+KmOExAsH7cypWGG6WCm+LNMGu
lUN3+3qDf10o3Wz7tNhOV0StOcGU7buIgH6ZHSRr+5cobJTP52WIjLTPZ0/D
-----END CERTIFICATE-----