Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633830303a3a2f34302d3438203d3e20323032373332.roa
File:                     326130613a363034303a633830303a3a2f34302d3438203d3e20323032373332.roa (raw, json)
Hash identifier:          5J/+eAZqJvG50jRsK9Al9862jQNMXvoJssXHBC+0EV8=
Subject key identifier:   97:E9:4B:D6:62:B8:17:A7:89:A4:40:57:6D:EA:96:75:03:9B:06:70
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       24B777941EF648C688C5AA1FA18B3A8EB6A831C3
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633830303a3a2f34302d3438203d3e20323032373332.roa
Signing time:             Fri 16 Dec 2022 01:01:09 +0000
ROA not before:           Fri 16 Dec 2022 00:56:09 +0000
ROA not after:            Fri 15 Dec 2023 01:01:09 +0000
asID:                     202732
IP address blocks:        2a0a:6040:c800::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b7:77:94:1e:f6:48:c6:88:c5:aa:1f:a1:8b:3a:8e:b6:a8:31:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 16 00:56:09 2022 GMT
            Not After : Dec 15 01:01:09 2023 GMT
        Subject: CN=97E94BD662B817A789A440576DEA9675039B0670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:44:0f:12:1b:e0:cc:62:02:1a:b0:3e:62:
                    cd:8b:2b:b0:2f:16:57:9e:45:5a:58:28:b5:a3:9d:
                    10:63:c3:52:2f:26:91:4a:f5:52:3c:9e:26:3f:2d:
                    40:68:b3:4f:73:b1:9a:26:84:53:d2:c7:5f:57:2a:
                    e6:ba:f2:80:92:d1:13:86:1d:7e:c0:e4:6a:ff:67:
                    86:fe:48:eb:5b:eb:1a:4d:dd:02:dc:db:4d:d5:5b:
                    33:64:db:33:d0:11:20:a7:e7:21:59:86:9f:4d:e0:
                    3b:b3:af:8f:2b:3c:26:59:75:ff:75:c3:e4:8c:84:
                    05:9d:ed:46:e7:68:da:0f:9a:d9:a8:b3:5f:d2:a1:
                    ae:ab:98:64:07:67:36:3a:ca:e8:ad:3a:0d:62:df:
                    e4:d3:90:66:5d:98:b8:b2:e2:60:e3:ff:a8:be:fe:
                    65:9f:21:90:d1:ab:61:a6:a2:61:c8:da:8c:0a:72:
                    1b:97:0e:0b:4f:db:88:d9:f0:4d:59:21:89:7b:cf:
                    c8:6a:34:1b:6d:04:82:4c:e0:92:d4:7b:95:d7:7e:
                    f4:f5:d9:b8:df:a1:4b:c7:39:26:31:6e:b8:58:0c:
                    92:ea:1c:f9:cb:af:7a:46:f9:74:77:c9:63:59:41:
                    91:da:53:36:65:1f:dc:4b:57:82:ba:d9:68:c9:46:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E9:4B:D6:62:B8:17:A7:89:A4:40:57:6D:EA:96:75:03:9B:06:70
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633830303a3a2f34302d3438203d3e20323032373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:6a:7f:f8:6d:9c:b8:42:e1:4a:42:a2:3c:98:a8:96:41:1b:
         0d:78:a9:98:99:c8:d2:26:51:9e:45:f2:c8:2f:92:67:f2:bd:
         76:3c:33:d0:ec:8f:0d:9a:f6:72:38:03:1f:27:35:01:31:33:
         d7:08:9d:57:4c:24:34:94:f4:ac:92:20:7f:2d:2f:51:a9:ee:
         20:5d:0d:fc:ed:25:47:fa:44:e1:a4:4c:44:f3:a2:7e:6b:04:
         81:26:03:fc:74:d2:60:bc:e3:90:40:62:67:7b:c9:6b:e7:9f:
         22:72:9a:53:1c:45:42:45:bb:d8:c2:ec:93:47:87:9e:53:b8:
         12:3f:cd:c2:83:f8:5c:a9:78:01:ae:43:18:ea:0c:7a:ac:31:
         c2:2f:95:14:48:bb:d3:77:4e:94:81:05:d4:23:fd:2e:d5:6f:
         8f:1d:ca:8c:fa:25:9b:25:c8:28:ce:22:f3:a6:1c:9b:71:fd:
         58:52:d0:4e:86:12:84:f6:21:b2:21:77:60:77:45:69:bd:4d:
         5c:78:7d:da:62:77:76:70:17:8d:0d:68:34:60:4f:87:8c:f8:
         bd:14:f2:3d:cb:42:57:76:5d:da:03:08:6f:26:93:e3:a6:53:
         90:72:ee:f5:68:98:87:06:19:d5:41:fc:19:ae:b1:84:f8:7f:
         1d:bf:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----