Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643030303a3a2f34302d3438203d3e20323030373238.roa
File:                     326130613a363034303a643030303a3a2f34302d3438203d3e20323030373238.roa (raw, json)
Hash identifier:          z1tg4NeI6QOjTGYn8qfx/TH4RkwAv9m+x25Ul2c3wuk=
Subject key identifier:   88:B3:65:39:F6:8B:AD:F0:73:59:EE:DD:C0:57:1F:6C:02:33:42:E7
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2612D2A313EC44D05300988090BCE5E6B96DF5B3
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643030303a3a2f34302d3438203d3e20323030373238.roa
Signing time:             Fri 16 Dec 2022 07:05:13 +0000
ROA not before:           Fri 16 Dec 2022 07:00:13 +0000
ROA not after:            Fri 15 Dec 2023 07:05:13 +0000
asID:                     200728
IP address blocks:        2a0a:6040:d000::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:12:d2:a3:13:ec:44:d0:53:00:98:80:90:bc:e5:e6:b9:6d:f5:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 16 07:00:13 2022 GMT
            Not After : Dec 15 07:05:13 2023 GMT
        Subject: CN=88B36539F68BADF07359EEDDC0571F6C023342E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:a4:0d:de:16:d0:d3:6a:43:a6:25:cb:a5:
                    1d:ca:e2:55:be:81:58:04:0d:e4:0d:66:38:44:31:
                    a6:af:54:da:2f:b0:3b:0a:ad:82:c3:5b:cf:d8:e7:
                    a1:7e:22:67:03:0b:04:e8:8d:64:d7:9a:50:88:c5:
                    1c:fd:95:b1:51:63:70:5e:de:35:a4:d3:4f:5f:32:
                    1a:d4:89:98:2c:d6:d3:35:b0:5d:07:c4:9a:0d:0f:
                    51:bc:18:4f:80:ca:47:8d:f9:a0:b6:a4:6c:7d:35:
                    a3:cd:0a:67:a0:fc:98:23:18:2e:aa:8a:93:16:5e:
                    b1:c6:01:24:11:fa:04:20:97:59:42:5a:d4:5f:4a:
                    7d:4b:36:c7:78:b0:ba:0b:0e:4a:03:5d:de:3c:18:
                    d7:e8:a5:b1:ca:17:f6:79:4f:8b:54:91:35:67:90:
                    91:62:4d:03:30:ca:53:25:cb:3d:82:c2:62:0a:6c:
                    39:bd:77:4d:1d:20:f5:b7:68:f4:10:35:c0:2a:87:
                    35:15:28:7b:27:fb:e1:96:c8:e5:d3:e2:8c:b8:1a:
                    1a:33:e0:9e:69:3e:21:db:23:22:8f:b4:b3:59:2f:
                    c1:9f:44:a7:2b:b8:23:1b:e6:1c:8b:f3:8e:83:f2:
                    22:26:40:63:dd:3b:d4:3d:90:a0:5c:6c:0a:60:ea:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B3:65:39:F6:8B:AD:F0:73:59:EE:DD:C0:57:1F:6C:02:33:42:E7
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643030303a3a2f34302d3438203d3e20323030373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:f1:f9:b2:3e:18:32:a4:df:79:16:2f:cd:1c:ad:ac:cc:
         48:5f:a0:0a:a3:bd:a0:4e:2b:23:d6:7e:3c:69:d4:77:9f:e8:
         ec:b2:28:a9:58:b0:f3:7a:5a:c2:98:a4:15:52:f4:07:ff:74:
         a2:bb:ef:d1:7a:e4:03:9d:d3:13:15:c1:60:8f:8e:4c:f7:76:
         4e:c9:3a:60:1c:0c:e1:ef:16:72:23:f3:3f:af:e0:df:57:8f:
         ec:61:c4:e5:2a:fd:33:d6:ca:76:ad:a1:77:1a:1c:be:80:14:
         3c:69:a5:57:5a:54:fb:bd:0f:69:3a:27:55:06:43:c4:be:e0:
         8a:a2:4d:2d:6c:51:81:4b:da:b7:d0:c9:c2:7e:75:2b:20:99:
         0a:ba:2b:e9:dd:be:69:8a:eb:65:1d:d7:23:e1:f7:2d:ed:57:
         9e:7b:02:8b:75:8f:c3:f2:37:51:20:b5:4f:19:f9:5c:04:89:
         e7:ff:74:37:d0:b9:6e:fb:3d:25:3c:73:1a:ea:8b:50:8a:e3:
         17:6f:82:0e:92:6c:22:e2:cc:a4:0c:94:4c:90:e9:97:8a:b7:
         60:b9:17:b5:f3:40:38:51:0e:c6:db:1b:ac:79:16:97:b6:ad:
         61:49:27:38:c0:2b:db:0f:0a:86:0b:66:5a:a9:89:a9:03:72:
         f1:6e:c2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----