Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a636630303a3a2f34302d3438203d3e203631323238.roa
File:                     326130613a363034303a636630303a3a2f34302d3438203d3e203631323238.roa (raw, json)
Hash identifier:          KAX2d1jlmkrUNJ8MogOF4tmjSW5t7qFkJypXpa5Ar8I=
Subject key identifier:   F5:36:76:9B:E0:C8:78:1D:B2:7D:BD:B1:92:3B:31:F7:E5:7D:5A:F2
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       6981F811F6115B86F865325DB01396C0D0CF9C84
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a636630303a3a2f34302d3438203d3e203631323238.roa
Signing time:             Fri 09 Dec 2022 08:20:58 +0000
ROA not before:           Fri 09 Dec 2022 08:15:58 +0000
ROA not after:            Fri 08 Dec 2023 08:20:58 +0000
asID:                     61228
IP address blocks:        2a0a:6040:cf00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:81:f8:11:f6:11:5b:86:f8:65:32:5d:b0:13:96:c0:d0:cf:9c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:58 2022 GMT
            Not After : Dec  8 08:20:58 2023 GMT
        Subject: CN=F536769BE0C8781DB27DBDB1923B31F7E57D5AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:96:7c:c0:e7:22:77:28:d4:37:88:a8:1f:
                    b4:44:25:d4:d2:e3:c7:24:7b:17:55:4e:06:a8:ff:
                    fd:71:cf:e0:85:fa:00:19:ad:92:77:d7:18:93:cd:
                    e1:18:af:a8:64:49:39:67:ec:d0:be:4a:c6:58:a7:
                    ce:9b:38:0a:de:3c:fd:37:df:e2:9c:c7:d3:0c:ae:
                    97:9f:a3:42:1e:38:e6:8f:36:33:87:53:85:31:a4:
                    7b:6b:45:ed:b0:cc:ce:bc:87:12:a3:28:e6:f2:6d:
                    1d:ca:e4:ae:99:18:b5:0d:4d:3f:24:66:16:fb:9a:
                    e1:5c:39:ad:ec:34:ff:62:05:12:13:94:d4:56:67:
                    e3:9e:91:48:97:46:45:67:68:1f:2b:f4:02:0a:dc:
                    20:11:8e:82:60:3e:fa:9f:f8:76:9c:69:ee:64:7f:
                    9d:93:3c:98:92:3e:25:e2:af:db:b3:d7:1e:75:b2:
                    95:2a:cc:14:83:bb:02:f7:b1:34:9a:e8:35:2e:f0:
                    69:06:80:66:85:8d:30:fe:ec:3b:44:3c:8f:1d:86:
                    8b:c3:cf:a1:17:07:4c:89:4b:2d:7e:ab:d6:b7:f1:
                    d5:23:ce:85:27:a1:a2:1a:41:95:3e:68:59:5c:5b:
                    7d:60:f1:ce:a9:55:1a:e8:73:6c:9d:46:6a:60:41:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:36:76:9B:E0:C8:78:1D:B2:7D:BD:B1:92:3B:31:F7:E5:7D:5A:F2
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a636630303a3a2f34302d3438203d3e203631323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:cf00::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:d1:18:f0:b6:46:da:b1:18:98:a6:e5:99:ac:14:33:f2:df:
         10:56:4f:22:0f:a0:07:76:60:be:fd:76:50:b7:36:0c:04:0d:
         e8:bc:4a:ca:db:d8:d7:eb:79:6e:32:8b:4e:15:f2:60:1f:2f:
         b6:53:67:d4:5c:17:1e:31:8d:ff:5d:19:d9:df:56:1d:03:31:
         be:ce:01:aa:d1:bc:5f:61:f1:2a:1e:eb:00:0e:3b:3c:09:d9:
         e8:95:80:48:62:0c:b3:6b:40:67:2d:3a:3d:28:a1:27:8d:11:
         09:78:e4:ad:bc:73:0c:4b:5b:2f:8c:b0:bd:3c:6c:b2:7f:b3:
         56:8e:5e:86:17:a6:f1:38:17:13:9d:46:bd:e4:fb:20:10:0b:
         2d:19:ad:32:fe:08:39:ec:9e:12:38:fa:0d:7a:46:b4:f3:0a:
         f8:8e:9e:bf:27:13:cc:d0:c8:9b:24:21:b5:94:e2:f3:26:f5:
         0c:bb:aa:fb:6c:7e:4f:bb:a7:fc:4a:6c:df:97:3e:01:11:1a:
         96:45:66:c8:e0:c4:c4:df:de:b1:98:1d:4e:89:bd:ac:98:29:
         85:f2:ef:28:bd:a2:d4:2a:ce:d5:30:78:cf:0f:19:94:c2:83:
         e8:bc:f7:29:c4:c7:52:7a:a8:64:26:03:6d:6c:42:a3:36:27:
         32:fe:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----