Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623930303a3a2f34302d3438203d3e20323030343437.roa
File:                     326130613a363034303a623930303a3a2f34302d3438203d3e20323030343437.roa (raw, json)
Hash identifier:          hzJy+wqJfsBaikeHi9nVOQ7G8cEUn7GWn7t7UxbtpJM=
Subject key identifier:   0D:18:A6:B9:3B:30:4F:3D:8F:45:77:E8:74:2D:EA:59:85:F8:64:93
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5ED32AA380AC50054B3F2D51003D5373CDBBC3DD
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623930303a3a2f34302d3438203d3e20323030343437.roa
Signing time:             Mon 19 Dec 2022 12:07:44 +0000
ROA not before:           Mon 19 Dec 2022 12:02:44 +0000
ROA not after:            Mon 18 Dec 2023 12:07:44 +0000
asID:                     200447
IP address blocks:        2a0a:6040:b900::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d3:2a:a3:80:ac:50:05:4b:3f:2d:51:00:3d:53:73:cd:bb:c3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 19 12:02:44 2022 GMT
            Not After : Dec 18 12:07:44 2023 GMT
        Subject: CN=0D18A6B93B304F3D8F4577E8742DEA5985F86493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:d4:4a:88:87:36:0a:66:ba:40:3b:f0:b1:
                    56:0a:e9:69:7d:21:c9:f5:d3:75:a5:c6:54:42:8a:
                    93:81:22:8a:10:99:7d:be:84:f9:fa:29:c7:e7:55:
                    11:0f:87:86:cb:33:d8:3a:5e:08:0b:73:79:05:fc:
                    c6:7d:33:3d:7c:09:f0:57:05:fa:5b:16:97:c6:c5:
                    42:5d:31:87:c8:e1:c8:3e:20:da:e2:9e:6f:07:7c:
                    3b:c5:b9:a0:2c:c1:39:22:a7:af:40:b6:65:8f:91:
                    85:62:e0:42:9e:c2:2c:e8:bd:cf:e8:ad:24:5d:49:
                    b2:2e:6c:0c:9d:04:24:52:f2:65:50:02:22:d1:03:
                    3f:3a:b2:8b:3a:13:a8:4b:b5:0b:76:5c:82:bf:63:
                    20:f5:5f:9e:4c:3f:3c:07:eb:8c:8f:a2:c8:fa:e6:
                    df:c3:e5:1f:d5:89:ea:75:33:f9:05:57:b4:8e:b9:
                    1b:2e:4e:98:a5:f8:cc:59:53:a9:3d:cd:57:01:5e:
                    97:79:cc:1d:fd:0d:2a:b9:5c:47:48:4a:3a:95:7f:
                    f6:c7:17:6f:61:91:f0:f4:62:2a:d5:e5:ab:f9:35:
                    d0:f3:ba:dc:19:3c:93:4c:3c:85:8c:00:15:5d:5b:
                    5f:a2:3e:2c:3c:a8:7f:5b:d1:b9:52:85:a3:98:a3:
                    89:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:18:A6:B9:3B:30:4F:3D:8F:45:77:E8:74:2D:EA:59:85:F8:64:93
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623930303a3a2f34302d3438203d3e20323030343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b900::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:21:af:42:88:f5:27:a0:00:ed:59:92:14:74:3a:ce:c3:f7:
         7e:3f:de:6c:f9:e4:10:db:19:c4:5b:75:b9:b8:74:54:14:0e:
         d1:45:4a:51:07:3e:3d:8d:5b:d6:91:fe:cc:28:c8:08:90:dd:
         b6:77:56:59:61:12:c9:b7:61:8b:87:83:ab:69:16:a2:d6:b8:
         87:ea:99:59:5e:f3:6c:6f:cb:dd:8a:b4:4a:bf:d6:36:d1:01:
         4d:41:a8:a7:75:37:14:8c:39:48:d7:9e:0f:3b:ea:44:61:93:
         39:8a:5d:cd:a1:ec:04:16:85:6c:e1:1d:28:e7:22:5b:bd:01:
         d0:1a:c0:56:d3:1c:e0:66:25:57:02:f2:a3:cc:87:18:a4:fb:
         a1:00:7c:8e:bc:0c:ec:d5:20:44:73:c8:09:01:26:80:2e:da:
         78:ac:17:b6:90:90:84:66:50:0e:6d:3d:9b:e3:28:43:dd:84:
         49:9f:54:70:e6:89:74:45:e6:ee:dc:da:3a:9a:79:a2:86:ba:
         29:d5:40:14:fe:1c:ab:71:84:c2:2f:29:c5:ad:e2:79:b6:d7:
         b1:51:aa:10:74:b3:4a:18:fc:81:30:94:f1:85:14:a0:67:59:
         d1:90:5a:97:a5:c6:6c:e1:c7:a3:d3:fb:c6:38:24:9e:6b:9f:
         14:63:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----