Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633430303a3a2f34302d3438203d3e20323030383430.roa
File:                     326130613a363034303a633430303a3a2f34302d3438203d3e20323030383430.roa (raw, json)
Hash identifier:          N2qVAPq8ZJclbR2AS5AF8sZg8tcbVghr0NkQRnzJL08=
Subject key identifier:   53:C1:61:5C:81:EB:CE:76:78:A2:DC:DA:6A:97:2E:C3:D4:19:E2:6C
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       51D59CC4F696ED17849C6F2E37583C97AD31A728
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633430303a3a2f34302d3438203d3e20323030383430.roa
Signing time:             Fri 09 Dec 2022 08:20:59 +0000
ROA not before:           Fri 09 Dec 2022 08:15:59 +0000
ROA not after:            Fri 08 Dec 2023 08:20:59 +0000
asID:                     200840
IP address blocks:        2a0a:6040:c400::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d5:9c:c4:f6:96:ed:17:84:9c:6f:2e:37:58:3c:97:ad:31:a7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:59 2022 GMT
            Not After : Dec  8 08:20:59 2023 GMT
        Subject: CN=53C1615C81EBCE7678A2DCDA6A972EC3D419E26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:1b:09:ab:d3:4d:e7:58:1c:1c:5e:f3:dd:
                    b0:fd:ed:91:b7:36:d0:79:4a:80:15:b9:39:66:32:
                    ea:b9:83:c5:cb:dd:f3:71:b8:c6:3d:ec:ee:21:1d:
                    23:33:9c:6d:e4:8c:78:7c:f6:8b:2f:1e:cb:9f:a8:
                    58:10:3b:e3:fc:e8:93:9e:b9:48:31:04:0f:5f:23:
                    88:01:4e:4c:c6:13:12:a2:48:55:f4:16:86:f6:5a:
                    c9:7d:97:7f:1e:18:1d:25:15:5a:e6:7c:b0:93:96:
                    86:6f:c8:ad:1d:fe:75:50:b9:7c:83:ea:a4:a7:21:
                    67:b7:3f:6c:f8:52:57:60:62:48:9c:b9:11:8c:ce:
                    c4:14:29:5a:9b:64:76:d3:9a:b9:1c:1f:3b:0a:ea:
                    2e:00:06:f7:e8:8f:c0:75:6c:e7:95:69:29:71:93:
                    69:1a:1e:5f:29:86:c6:7c:e0:61:b7:ca:f2:72:dc:
                    75:56:6a:a8:ad:c0:64:bd:a9:66:48:25:17:3f:56:
                    84:af:9a:26:5f:60:f8:98:d3:b4:ce:5b:40:90:dc:
                    9c:1c:47:e9:b1:92:81:2a:a7:6a:a2:2d:53:31:94:
                    34:e2:13:9a:05:96:db:e8:88:c4:0e:e5:99:33:b2:
                    27:cc:06:d2:76:50:8c:03:e9:fe:52:95:6f:0c:e7:
                    40:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C1:61:5C:81:EB:CE:76:78:A2:DC:DA:6A:97:2E:C3:D4:19:E2:6C
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633430303a3a2f34302d3438203d3e20323030383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c400::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:09:da:e6:47:d9:ae:b8:21:ad:fb:d7:cd:f5:ff:89:fb:29:
         8b:ad:7a:f7:c9:1d:15:25:2a:55:90:56:35:b2:93:23:07:99:
         f3:f7:9a:89:60:4e:c7:cd:d7:e2:3a:31:72:92:dc:93:6b:a2:
         ea:04:5e:8c:d9:52:38:42:9c:43:23:86:20:9f:ed:69:1d:c3:
         1c:dc:c5:b5:42:0f:eb:e1:7e:12:b3:2b:a4:50:c8:72:56:8a:
         bf:07:4e:22:a9:d3:45:9d:2d:06:36:b1:1f:70:0c:6f:61:c1:
         5d:83:23:06:0d:81:6c:bf:9e:53:7a:98:f1:60:8a:dd:51:84:
         63:57:ac:65:05:47:39:72:e8:87:58:4d:5d:69:63:cb:34:0e:
         20:51:dc:bd:f7:bb:e4:03:68:6b:36:6a:56:1c:84:c6:32:72:
         fc:63:ea:cf:f5:ac:dd:b0:e6:83:a5:89:0e:95:d0:b9:bb:9e:
         0a:0b:f7:3b:d0:ae:14:a7:cf:8f:d4:d1:a9:44:c4:85:d9:7f:
         55:fc:63:ae:06:ae:91:fa:0e:0c:31:96:a9:e6:02:0a:80:89:
         e7:75:c4:f8:57:90:cb:21:10:fc:06:a9:90:72:d0:12:d5:44:
         2a:8d:0e:70:1e:2d:ae:5c:b9:25:ab:0a:39:3c:e6:18:fe:93:
         1c:5d:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----