Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623830303a3a2f34302d3438203d3e20323030373331.roa
File:                     326130613a363034303a623830303a3a2f34302d3438203d3e20323030373331.roa (raw, json)
Hash identifier:          pbu2WdYh7anYmAls499UrvPhQaZTcBp/lwYQRhg+770=
Subject key identifier:   58:EF:0B:D2:60:CB:09:34:0B:40:10:7D:58:58:98:A0:D6:4A:82:DC
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       70D8FEA24CCC3CCAD8C4D5AB27A9B7B4C2F11660
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623830303a3a2f34302d3438203d3e20323030373331.roa
Signing time:             Fri 09 Dec 2022 08:21:00 +0000
ROA not before:           Fri 09 Dec 2022 08:16:00 +0000
ROA not after:            Fri 08 Dec 2023 08:21:00 +0000
asID:                     200731
IP address blocks:        2a0a:6040:b800::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d8:fe:a2:4c:cc:3c:ca:d8:c4:d5:ab:27:a9:b7:b4:c2:f1:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:00 2022 GMT
            Not After : Dec  8 08:21:00 2023 GMT
        Subject: CN=58EF0BD260CB09340B40107D585898A0D64A82DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:87:e3:d7:d3:3e:9d:89:b7:61:06:38:4b:
                    fe:da:d7:a5:9b:10:ec:f7:be:97:84:a8:be:6b:c7:
                    8b:ef:f2:03:16:3b:e6:8d:94:e0:5f:b6:99:4d:2e:
                    6e:46:84:27:c7:f1:a5:6a:ac:e1:1c:fe:f2:0f:68:
                    4f:6d:05:56:34:c3:45:cd:3b:c2:19:9e:d2:a5:cf:
                    48:ff:39:d6:dd:0a:47:74:69:7a:23:5b:ea:d0:45:
                    80:26:f1:61:90:dc:9b:09:95:6d:66:35:76:25:61:
                    5d:d2:eb:f3:88:69:a2:f4:15:40:22:8d:46:53:6c:
                    a9:d5:e6:c2:23:13:bc:8a:53:5e:85:b9:e9:71:bf:
                    17:f1:9e:84:c3:19:1f:fd:18:33:81:24:b1:ec:37:
                    ba:90:3b:2d:e9:4c:60:9c:c7:b3:16:50:25:62:3b:
                    b5:19:d1:71:79:46:93:94:c6:d2:a4:57:dc:b9:b5:
                    77:06:32:51:62:18:fc:7c:9a:ac:bf:a8:3c:95:cd:
                    35:72:82:b3:db:2a:ac:da:e2:ad:22:37:be:65:2f:
                    76:b3:7b:e1:a5:fd:1c:1b:c3:35:97:b8:0b:32:4e:
                    74:55:d8:ff:89:3b:be:4a:52:13:19:72:cb:34:dc:
                    a1:73:9a:50:e2:5b:66:f3:4f:66:4d:a2:89:ea:b0:
                    31:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EF:0B:D2:60:CB:09:34:0B:40:10:7D:58:58:98:A0:D6:4A:82:DC
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623830303a3a2f34302d3438203d3e20323030373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b800::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:23:eb:84:6e:fd:5a:15:7c:e9:96:d3:ee:32:7b:06:9b:ad:
         f2:c2:68:b8:0c:17:b1:db:ef:18:99:f9:34:52:82:c5:5e:af:
         90:5d:3b:8b:d5:f0:64:dd:33:d4:03:3a:cf:ea:68:2b:00:dc:
         fb:f4:b5:0c:33:31:e8:f1:16:ba:97:07:6a:57:b9:30:04:71:
         37:67:d9:b1:78:cc:ca:d2:0b:33:21:9b:3b:3a:fd:d0:23:a5:
         dd:d9:8a:5a:fd:9a:72:36:53:81:da:3f:af:aa:da:be:a2:aa:
         10:bd:69:31:9a:80:d7:fa:8f:17:13:6c:00:64:3a:ae:49:fb:
         e3:1d:5d:72:14:9a:03:2c:b0:d2:4e:06:59:10:45:f2:d4:1a:
         02:12:26:0b:cc:cb:96:7b:97:e0:ca:79:fc:d8:8a:5b:dd:21:
         6d:7a:41:4d:72:b1:54:47:53:b4:3e:58:bb:a3:2f:3e:15:eb:
         fa:e7:14:19:9a:ce:76:91:4c:c3:05:10:86:14:a9:8a:eb:10:
         82:03:5c:29:bd:8d:e9:14:36:90:85:6e:93:0a:1e:28:d8:68:
         0b:ae:4a:f8:a7:bd:b2:07:42:1e:b5:10:22:9b:c5:0b:2b:74:
         91:66:21:13:4b:30:e8:ff:33:a2:31:01:ef:c8:22:90:49:f3:
         c8:6f:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----