Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633630303a3a2f34302d3438203d3e20323030383533.roa
File:                     326130613a363034303a633630303a3a2f34302d3438203d3e20323030383533.roa (raw, json)
Hash identifier:          2tLnZrMRDTlS+4/TEnislCnMxEx90ydKrgBlKxRc1jA=
Subject key identifier:   55:1D:A8:94:09:12:24:43:78:72:1B:36:10:A3:F0:71:D1:86:15:F6
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7771763F1CFC5E1137904EEFEB64E0CDF2E78DC3
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633630303a3a2f34302d3438203d3e20323030383533.roa
Signing time:             Fri 09 Dec 2022 08:21:02 +0000
ROA not before:           Fri 09 Dec 2022 08:16:02 +0000
ROA not after:            Fri 08 Dec 2023 08:21:02 +0000
asID:                     200853
IP address blocks:        2a0a:6040:c600::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:71:76:3f:1c:fc:5e:11:37:90:4e:ef:eb:64:e0:cd:f2:e7:8d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:02 2022 GMT
            Not After : Dec  8 08:21:02 2023 GMT
        Subject: CN=551DA8940912244378721B3610A3F071D18615F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:db:42:8b:4d:53:f0:2b:16:e0:37:d5:60:
                    a7:eb:22:b0:db:ac:69:ef:a1:07:bf:5c:bc:0d:cd:
                    34:93:09:5d:91:f5:2b:5a:a3:73:9c:22:89:25:2e:
                    94:5d:46:cd:d4:39:3a:d6:93:61:25:2c:0e:0c:77:
                    87:f0:18:b3:20:57:97:bc:6b:d1:c1:6d:56:10:08:
                    16:19:d4:2a:97:7c:db:52:a5:e2:cc:e5:f3:80:d2:
                    c1:73:16:cf:21:e2:8c:fa:85:cf:e8:a9:39:70:93:
                    e3:d7:1e:5c:00:97:15:9f:d4:a6:cd:54:2a:7e:b9:
                    1c:47:65:ab:0a:52:05:59:40:12:f8:5c:81:89:bc:
                    d8:53:14:15:fb:7a:ba:26:b3:ed:d2:da:ce:d3:38:
                    3d:e4:7f:ba:47:d5:38:a6:6d:6c:b4:05:ba:59:ce:
                    5b:79:9e:c3:7c:4a:2d:e3:93:19:45:47:6e:9d:29:
                    70:7d:20:b5:00:05:13:65:29:0e:d5:11:66:62:20:
                    db:9d:11:e3:72:ed:56:82:b8:27:97:82:9c:ac:64:
                    48:68:e8:9a:26:b0:bd:40:b1:c3:d2:3a:71:f5:61:
                    bb:2c:95:95:72:c6:d2:4c:bb:47:6f:b0:a2:05:b2:
                    21:05:e5:26:ad:5c:e7:c4:44:81:ea:f4:d0:d6:ed:
                    99:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1D:A8:94:09:12:24:43:78:72:1B:36:10:A3:F0:71:D1:86:15:F6
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633630303a3a2f34302d3438203d3e20323030383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c600::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:26:1a:6c:88:81:92:41:29:04:11:f1:11:a1:55:e5:10:72:
         13:a2:ca:0e:75:81:5b:f1:b6:82:89:d4:c9:eb:5c:df:ed:e8:
         d3:b4:fd:e7:c0:17:84:cc:e1:13:88:54:3e:31:8e:54:d5:be:
         d9:35:69:cd:83:90:de:5e:5f:ec:8e:9e:e6:9a:7c:96:3f:fd:
         5b:ff:fb:0e:92:2a:0e:df:fc:66:27:e5:90:a9:bd:06:aa:01:
         48:f9:ac:13:03:09:0b:57:61:f4:af:77:5e:22:f5:e1:7b:df:
         2d:79:96:32:0d:02:23:ec:3c:aa:97:d6:2d:02:aa:9a:c1:f0:
         7d:c2:9a:95:ff:71:ea:18:0a:3b:1b:64:ff:84:80:95:fb:62:
         7a:e4:bd:08:fa:4b:ee:76:82:27:5b:ce:01:10:cf:63:a8:92:
         68:11:17:7c:61:29:a6:da:29:2f:50:73:59:56:69:61:f3:cc:
         0a:20:12:e0:9c:1d:bc:ea:f3:6e:ac:41:6f:69:6b:7e:61:63:
         d6:21:36:9c:47:5c:2c:86:db:4d:84:33:0c:56:f9:10:b5:48:
         95:0d:14:85:5b:7e:80:a4:25:e1:3d:df:47:78:06:1f:34:58:
         d5:a5:7a:97:9b:cf:f3:b7:b2:d0:39:36:62:69:01:7d:c3:56:
         21:c9:9a:3e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUd3F2Pxz8XhE3kE7v62TgzfLnjcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMDkwODE2MDJaFw0yMzEyMDgwODIxMDJaMDMxMTAvBgNV
BAMTKDU1MURBODk0MDkxMjI0NDM3ODcyMUIzNjEwQTNGMDcxRDE4NjE1RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KttCi01T8CsW4DfVYKfrIrDb
rGnvoQe/XLwNzTSTCV2R9Stao3OcIoklLpRdRs3UOTrWk2ElLA4Md4fwGLMgV5e8
a9HBbVYQCBYZ1CqXfNtSpeLM5fOA0sFzFs8h4oz6hc/oqTlwk+PXHlwAlxWf1KbN
VCp+uRxHZasKUgVZQBL4XIGJvNhTFBX7eroms+3S2s7TOD3kf7pH1TimbWy0BbpZ
zlt5nsN8Si3jkxlFR26dKXB9ILUABRNlKQ7VEWZiINudEeNy7VaCuCeXgpysZEho
6JomsL1AscPSOnH1YbsslZVyxtJMu0dvsKIFsiEF5SatXOfERIHq9NDW7ZkRAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUVR2olAkSJEN4chs2EKPwcdGGFfYwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2MzM2
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDM4MzUzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYEDGMA0GCSqGSIb3DQEBCwUAA4IBAQCHJhpsiIGSQSkEEfERoVXlEHIT
osoOdYFb8baCidTJ61zf7ejTtP3nwBeEzOETiFQ+MY5U1b7ZNWnNg5DeXl/sjp7m
mnyWP/1b//sOkioO3/xmJ+WQqb0GqgFI+awTAwkLV2H0r3deIvXhe98teZYyDQIj
7Dyql9YtAqqawfB9wpqV/3HqGAo7G2T/hICV+2J65L0I+kvudoInW84BEM9jqJJo
ERd8YSmm2ikvUHNZVmlh88wKIBLgnB286vNurEFvaWt+YWPWITacR1wshttNhDMM
VvkQtUiVDRSFW36ApCXhPd9HeAYfNFjVpXqXm8/zt7LQOTZiaQF9w1YhyZo+
-----END CERTIFICATE-----