Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a636430303a3a2f34302d3438203d3e20323035303237.roa
File:                     326130613a363034303a636430303a3a2f34302d3438203d3e20323035303237.roa (raw, json)
Hash identifier:          3GH0Zknv8scNzl1U3gBvILLsqCb38lLM9VvWLXAoOps=
Subject key identifier:   77:36:BA:BE:43:98:CD:ED:B8:F5:75:27:1D:6A:D7:86:5B:D6:0B:B0
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       68F34BEC08DBD74DC5E0D67F5F6237BF42E9629E
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a636430303a3a2f34302d3438203d3e20323035303237.roa
Signing time:             Mon 12 Dec 2022 12:37:50 +0000
ROA not before:           Mon 12 Dec 2022 12:32:50 +0000
ROA not after:            Mon 11 Dec 2023 12:37:50 +0000
asID:                     205027
IP address blocks:        2a0a:6040:cd00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f3:4b:ec:08:db:d7:4d:c5:e0:d6:7f:5f:62:37:bf:42:e9:62:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 12 12:32:50 2022 GMT
            Not After : Dec 11 12:37:50 2023 GMT
        Subject: CN=7736BABE4398CDEDB8F575271D6AD7865BD60BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:46:99:79:1a:a7:e3:5e:71:24:4e:59:bc:
                    44:10:dd:e3:b6:fb:37:42:94:94:59:01:7e:39:e2:
                    10:08:f8:06:47:1f:fc:2a:17:5a:c5:d9:cb:c7:fe:
                    00:3c:68:51:a3:0a:70:86:5f:74:73:48:a1:5c:36:
                    90:2c:18:6f:8e:95:fa:a0:23:0f:58:75:87:3d:4b:
                    e4:de:17:d3:07:ee:20:bc:1f:0f:db:a5:9d:a9:3f:
                    e9:cd:df:04:d7:6c:96:1f:d9:75:5c:a2:41:b3:34:
                    26:b8:28:d0:03:3c:1e:62:87:be:b6:5f:fc:89:db:
                    44:ab:c5:d3:59:6f:a3:20:c7:65:fe:bd:0f:3c:f6:
                    11:dc:77:28:df:87:79:e8:9a:c2:db:56:0f:80:5d:
                    25:0f:67:59:4f:68:b6:d7:71:17:47:0a:55:0f:46:
                    0e:5d:1b:52:ef:f6:b3:89:05:12:37:ff:1c:f6:96:
                    ac:72:9a:8d:72:0f:c4:65:32:a1:7a:19:9d:83:c4:
                    4a:f9:b2:04:44:4a:0c:b4:43:0c:a9:51:a6:3f:24:
                    17:17:7d:f3:5e:12:40:8c:b3:45:2d:6e:64:66:71:
                    0d:40:64:cd:c5:ec:27:f0:64:2b:d9:31:8b:43:cd:
                    87:01:f9:c4:87:3e:34:4e:22:59:52:f8:7e:8b:d6:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:36:BA:BE:43:98:CD:ED:B8:F5:75:27:1D:6A:D7:86:5B:D6:0B:B0
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a636430303a3a2f34302d3438203d3e20323035303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:cd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:7e:25:5d:87:e7:fa:2d:05:f6:d2:73:68:74:b7:94:e7:80:
         76:47:07:55:8f:6e:14:7a:e2:e4:d3:0b:b3:e6:28:22:75:5d:
         25:28:00:5f:49:de:80:82:8c:bc:1a:63:7a:61:64:53:24:e0:
         e9:49:40:0c:c2:1b:ff:08:51:ec:0f:9c:e2:5a:7c:cc:5d:27:
         69:a5:36:6c:b1:0a:03:34:b4:bd:e0:16:a1:8b:66:42:c6:c1:
         26:42:a2:c1:a0:b5:72:7f:39:09:61:a0:63:f8:89:47:7f:bc:
         27:a1:63:06:69:aa:c3:f8:02:14:18:9f:73:bc:21:02:c9:1b:
         a2:c9:9d:06:1a:85:d3:67:00:ac:21:91:63:81:7a:45:b0:44:
         a6:20:68:84:f4:fc:fb:46:58:d8:2a:74:d0:e3:51:2f:ba:49:
         2c:4b:95:34:98:ee:94:cc:f1:2e:11:ab:bb:96:e9:1b:c0:2b:
         ad:dd:0e:05:42:0b:3c:b3:66:a6:9e:9e:f9:d2:86:12:c1:18:
         4a:c7:ca:44:6d:c0:27:c9:bc:4c:3a:a7:c5:89:25:e5:1b:35:
         46:f5:77:8f:11:75:14:fb:40:1b:46:38:de:e6:43:eb:16:70:
         c9:73:93:8d:cb:3e:ad:d0:ac:d6:b2:ad:24:b3:26:8e:51:3e:
         72:b4:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----