Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643230303a3a2f34302d3438203d3e20323030383636.roa
File:                     326130613a363034303a643230303a3a2f34302d3438203d3e20323030383636.roa (raw, json)
Hash identifier:          uCkipzMkdtoYiGKQWdivpE5KH68vvOtEuRrS4PEImg8=
Subject key identifier:   68:FA:E0:9D:78:D5:74:0C:92:24:5E:D1:84:6D:A2:76:36:65:61:25
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       119CA152EAED5C3FD753080EA5B5BEDE9DB4C094
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643230303a3a2f34302d3438203d3e20323030383636.roa
Signing time:             Fri 09 Dec 2022 08:21:02 +0000
ROA not before:           Fri 09 Dec 2022 08:16:02 +0000
ROA not after:            Fri 08 Dec 2023 08:21:02 +0000
asID:                     200866
IP address blocks:        2a0a:6040:d200::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9c:a1:52:ea:ed:5c:3f:d7:53:08:0e:a5:b5:be:de:9d:b4:c0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:02 2022 GMT
            Not After : Dec  8 08:21:02 2023 GMT
        Subject: CN=68FAE09D78D5740C92245ED1846DA27636656125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:38:1c:a1:d9:a6:42:94:50:42:30:b0:65:19:
                    ac:4f:c3:5e:37:e0:bb:45:bf:1b:7a:b7:c8:9e:c7:
                    47:b6:f4:20:8f:01:df:bd:d7:d7:9f:ed:d1:10:27:
                    97:5f:2f:68:a5:65:4c:78:1f:5a:65:21:19:48:92:
                    82:32:ed:c2:11:53:de:b3:f0:eb:6c:84:b8:1a:4d:
                    8f:29:06:65:9e:12:70:3e:b3:a5:47:c1:06:b3:21:
                    9c:5d:6d:9e:2e:10:1c:36:1e:5c:5c:29:a4:88:c0:
                    ec:14:41:c2:f2:b8:64:0f:88:25:f7:56:61:a3:0e:
                    5d:4a:0f:05:1b:82:df:6d:d8:4c:13:38:88:a1:2a:
                    96:c4:6d:27:cd:86:95:29:1e:37:4f:32:9b:da:54:
                    ce:9a:40:3a:35:7b:0a:d6:f4:be:f6:ed:8a:ad:62:
                    97:e3:72:ff:c1:6a:f7:69:9e:c6:e0:fb:90:da:cd:
                    ac:9f:75:8d:f8:85:07:79:51:c3:a9:60:00:af:05:
                    bf:46:ae:58:7a:c0:3d:13:ef:bb:29:b6:dd:32:c6:
                    69:00:6e:5f:58:54:84:cb:4c:40:2f:01:83:c5:3d:
                    11:34:9d:a2:9a:1a:fa:40:df:73:79:7a:d9:21:ba:
                    99:02:26:31:09:6c:51:77:64:1f:96:df:53:6d:3f:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FA:E0:9D:78:D5:74:0C:92:24:5E:D1:84:6D:A2:76:36:65:61:25
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643230303a3a2f34302d3438203d3e20323030383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:81:94:cc:e5:15:e7:aa:c7:e1:09:78:7f:09:e8:6c:cc:c3:
         8a:de:e9:27:c3:a5:9e:c4:d9:a5:b6:7f:5b:2b:ef:af:8a:e4:
         4f:97:96:1a:fc:ce:c8:39:04:5c:e7:50:06:8f:80:d8:fb:f0:
         b7:ca:ea:bf:9b:dd:b3:a9:d0:08:c7:d0:ca:16:5e:90:8d:78:
         8c:a1:6f:43:ac:ac:1e:75:4e:49:4f:c4:5c:35:39:50:e8:e2:
         31:47:ff:a3:1d:de:d7:6f:1b:9f:4e:88:49:15:cc:a9:48:28:
         d1:2d:fd:bd:19:56:e8:8a:cc:95:7d:08:2b:73:de:6f:97:52:
         eb:85:aa:af:fd:07:6a:19:ca:4c:fa:6b:e0:43:b1:07:4e:16:
         36:ca:a7:22:c8:a3:9f:f2:4b:27:9c:b1:e4:09:d9:dc:38:95:
         c1:80:d8:5f:a1:68:95:82:4e:0a:c8:7c:f9:91:c0:c3:1a:0c:
         92:78:97:d2:b1:82:3f:5f:0e:09:fe:ed:eb:d9:76:3e:0f:46:
         8c:46:dd:de:30:8f:e9:67:0a:22:ae:4a:9c:06:a4:00:ee:da:
         6d:3d:aa:c9:af:b1:74:4f:d9:c5:6e:3c:c3:cb:64:c9:84:4e:
         4f:aa:a2:01:2e:ce:c3:7f:49:80:0e:7d:48:87:37:4e:ce:f6:
         63:24:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----