Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633930303a3a2f34302d3438203d3e20323030373330.roa
File:                     326130613a363034303a633930303a3a2f34302d3438203d3e20323030373330.roa (raw, json)
Hash identifier:          vAIqpWT0IvnySy6yZ2oqTqvcgV8OhkuUvqRBHmERCxs=
Subject key identifier:   D4:A1:F8:01:86:1D:05:E4:27:42:9E:84:56:07:0F:59:99:42:6E:8D
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       538568C71E866A3249EF79B2E85552C70C8959E1
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633930303a3a2f34302d3438203d3e20323030373330.roa
Signing time:             Fri 09 Dec 2022 08:21:02 +0000
ROA not before:           Fri 09 Dec 2022 08:16:02 +0000
ROA not after:            Fri 08 Dec 2023 08:21:02 +0000
asID:                     200730
IP address blocks:        2a0a:6040:c900::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:85:68:c7:1e:86:6a:32:49:ef:79:b2:e8:55:52:c7:0c:89:59:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:02 2022 GMT
            Not After : Dec  8 08:21:02 2023 GMT
        Subject: CN=D4A1F801861D05E427429E8456070F5999426E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5a:29:2c:1c:c6:a4:a7:d7:8f:54:46:45:31:
                    e7:e7:0a:20:29:2c:7e:42:ff:e2:39:ad:c2:c2:b6:
                    ab:d9:0b:d4:67:94:40:e4:d4:16:32:d1:8c:30:d7:
                    ae:c7:60:72:26:66:63:df:19:9c:31:61:1b:91:9a:
                    7c:82:62:80:63:be:c7:6c:64:cc:be:48:ac:12:c8:
                    80:77:da:95:66:b0:e8:a5:74:b9:d0:e4:e5:7f:30:
                    bb:30:d4:e7:6c:f4:4f:50:1e:6b:91:b5:31:e1:fd:
                    39:77:5e:6a:2d:e9:be:67:2a:64:ee:f7:15:3d:52:
                    77:59:03:b5:9f:2c:b6:bf:0a:f7:11:6a:b2:b2:33:
                    77:a1:1d:43:d7:01:af:5d:1d:39:f7:2e:ed:3d:75:
                    a5:18:19:20:ae:81:5e:bd:73:47:86:63:2f:9c:66:
                    35:d0:27:86:7e:b7:d2:82:62:2b:29:d5:01:c9:20:
                    99:6b:c1:78:14:48:62:10:49:83:bb:32:68:be:93:
                    c9:1b:20:25:51:25:6e:08:4b:5a:2d:ed:f6:03:1a:
                    2c:86:2d:84:bc:41:29:d8:b7:47:9c:b7:d8:4a:cf:
                    69:4b:37:3f:33:7c:0b:0f:4a:49:b4:5f:6d:54:c1:
                    9c:a8:35:e0:02:08:0a:ba:a4:e8:08:96:bf:20:96:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A1:F8:01:86:1D:05:E4:27:42:9E:84:56:07:0F:59:99:42:6E:8D
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633930303a3a2f34302d3438203d3e20323030373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c900::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:78:a0:9c:ed:2e:fa:f3:ab:d9:4e:a0:70:20:8d:61:20:
         2b:55:85:24:99:4b:ab:18:26:9b:4d:72:01:0e:15:06:97:d3:
         9d:92:ba:f6:06:4e:5c:af:56:5b:a5:44:81:60:9f:4d:74:5d:
         32:ce:9a:40:3b:d9:ae:69:12:a9:93:24:58:83:f0:fb:3b:d2:
         23:12:ee:b6:35:59:94:e3:a5:25:9b:ca:04:86:49:09:9f:66:
         0a:22:3e:1b:de:93:06:71:a6:74:ff:9d:45:91:c7:8d:90:35:
         ac:58:cf:95:40:2d:8b:10:9d:4e:8c:9b:2f:98:bf:7d:77:e2:
         97:f8:73:93:9d:d4:89:4c:9b:d8:3c:94:68:fe:a5:86:36:60:
         6c:6e:84:38:43:96:95:88:6d:e4:40:5f:b6:ed:12:f4:73:96:
         cb:87:50:b3:61:04:b7:f4:f6:ef:b7:3d:7d:95:3b:00:b0:5d:
         c6:d5:5b:aa:02:b4:36:d7:65:2d:a3:0f:1b:62:15:be:6b:49:
         79:91:02:d0:ee:43:f4:da:b4:7d:35:59:5a:2c:c6:69:c7:1b:
         f4:49:a2:68:c2:38:ec:00:31:6a:93:90:de:87:e7:9a:01:ae:
         d9:08:a2:85:2f:b9:9c:3c:36:ac:5a:24:5c:47:c5:a4:52:e8:
         73:45:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----