Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a626530303a3a2f34302d3438203d3e20323030373935.roa
File:                     326130613a363034303a626530303a3a2f34302d3438203d3e20323030373935.roa (raw, json)
Hash identifier:          dAKm0y1htCOfIiOZCcufBa8hcZajJngZqTsVsVBbbzY=
Subject key identifier:   F3:DE:91:EB:B3:49:B9:20:E2:AB:44:74:8F:37:65:95:67:36:F9:75
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       6D445AC7F807D3737879A29F96AB6DAEECC49453
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a626530303a3a2f34302d3438203d3e20323030373935.roa
Signing time:             Fri 09 Dec 2022 08:20:57 +0000
ROA not before:           Fri 09 Dec 2022 08:15:57 +0000
ROA not after:            Fri 08 Dec 2023 08:20:57 +0000
asID:                     200795
IP address blocks:        2a0a:6040:be00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:44:5a:c7:f8:07:d3:73:78:79:a2:9f:96:ab:6d:ae:ec:c4:94:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:57 2022 GMT
            Not After : Dec  8 08:20:57 2023 GMT
        Subject: CN=F3DE91EBB349B920E2AB44748F3765956736F975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:79:35:35:46:90:41:83:f7:f1:a5:76:d4:
                    f5:46:52:3e:b2:ef:8d:fb:37:aa:93:25:a2:03:b2:
                    b5:74:88:bf:b1:2f:d1:31:06:16:05:fa:a4:e2:26:
                    1e:cd:4c:b3:88:fb:80:91:21:6a:20:2a:86:bc:96:
                    5d:fa:11:ea:fb:d4:06:b9:d4:0d:89:b2:9b:45:62:
                    03:a7:08:27:81:51:01:9a:e4:3f:5f:20:41:91:e2:
                    50:14:59:f8:dd:ad:ac:4c:bd:e3:71:6d:f5:e4:b5:
                    aa:ba:15:f2:99:35:e1:1c:3c:38:37:6f:84:0b:f7:
                    61:10:eb:b9:96:05:58:22:bd:67:6f:1d:13:4b:3a:
                    f6:e0:ac:c9:1f:9c:ca:6c:54:2d:b8:15:44:bd:3b:
                    d4:2d:f6:56:a3:db:28:ae:3c:40:38:5e:5d:e7:c2:
                    db:46:92:e1:a1:74:32:36:4b:c8:37:b8:7b:40:70:
                    1f:c5:2b:01:3d:7f:ee:be:81:57:38:64:12:32:a3:
                    db:38:0a:41:c5:d4:0e:92:1b:d4:d1:9f:4e:a5:d6:
                    24:5d:ac:78:74:a4:23:a0:e4:3a:6c:bb:f5:92:c0:
                    85:30:dc:5d:d7:28:ef:12:ce:b4:3e:26:ba:41:aa:
                    7c:31:76:0f:d1:fd:88:80:e7:ec:a2:c9:64:ec:14:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DE:91:EB:B3:49:B9:20:E2:AB:44:74:8F:37:65:95:67:36:F9:75
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a626530303a3a2f34302d3438203d3e20323030373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:be00::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:8c:74:57:09:64:0d:1a:ea:85:cb:f3:f2:0b:7f:03:06:15:
         5f:97:92:06:8b:b5:3b:65:24:67:ab:1b:6b:98:2b:b9:89:1c:
         ec:93:fd:ce:90:ae:00:52:92:a7:df:8e:d4:78:dc:9e:1e:6d:
         22:63:24:a7:95:be:b8:7f:45:0b:ca:32:68:0c:cc:44:87:7c:
         f2:bd:fb:fe:6c:c0:9e:4f:e3:f1:15:ea:c5:b8:37:f4:ba:88:
         34:82:95:1a:32:dd:46:7b:2a:f5:ec:ec:6b:24:b6:14:8b:15:
         a8:75:b4:a1:30:e2:e3:70:2b:32:dd:81:65:36:f5:cb:7c:d4:
         ce:07:90:a5:4a:aa:e4:22:b7:83:53:e1:2a:e9:e3:4d:5c:45:
         ce:d0:91:ab:7e:42:55:14:ba:17:41:a1:5e:c2:65:39:98:3f:
         d9:4a:95:80:64:22:2c:77:f2:d8:58:ee:be:a6:8d:a0:30:8b:
         61:6f:b5:f8:d5:cc:55:f3:10:d9:c4:34:23:6a:59:2d:76:75:
         58:74:4e:c9:b8:a7:77:4b:7b:80:a0:d0:b9:42:38:9e:8d:d9:
         a9:d5:ba:bf:ba:1b:92:a7:d4:47:01:2e:67:58:51:61:e6:1c:
         30:bd:e9:a0:c8:15:b3:08:ee:1e:a9:56:ea:75:5a:cb:b3:e0:
         bc:90:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----