Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643330303a3a2f34302d3438203d3e20323030353932.roa
File:                     326130613a363034303a643330303a3a2f34302d3438203d3e20323030353932.roa (raw, json)
Hash identifier:          r+oBoOOnYtMDfCBkmCtGOm6CJDtej1LXIAiuv3kn7YA=
Subject key identifier:   16:D0:7F:54:B6:26:16:E6:CA:E5:DC:7C:D8:50:9C:49:E2:28:79:73
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2675CF4141D81291440BB17822B98C1FF63F99B8
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643330303a3a2f34302d3438203d3e20323030353932.roa
Signing time:             Tue 13 Dec 2022 09:55:26 +0000
ROA not before:           Tue 13 Dec 2022 09:50:26 +0000
ROA not after:            Tue 12 Dec 2023 09:55:26 +0000
asID:                     200592
IP address blocks:        2a0a:6040:d300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:75:cf:41:41:d8:12:91:44:0b:b1:78:22:b9:8c:1f:f6:3f:99:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 13 09:50:26 2022 GMT
            Not After : Dec 12 09:55:26 2023 GMT
        Subject: CN=16D07F54B62616E6CAE5DC7CD8509C49E2287973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a9:2f:3f:9c:a6:24:98:9a:9d:6e:90:b9:9c:
                    5a:87:df:fa:27:42:ba:ad:31:65:f4:5e:b5:b0:de:
                    e5:6b:71:9d:f2:c7:e6:1d:78:3a:4f:94:57:88:e8:
                    6e:38:e1:4d:e0:70:3f:3d:f4:9e:a1:0d:46:2b:7d:
                    ff:5c:d7:89:fe:e9:de:82:4e:a0:de:62:ed:a9:cc:
                    1a:48:90:68:49:6a:0c:bb:37:ed:15:ee:4d:00:2b:
                    79:3f:f3:e7:33:30:69:61:c3:8c:72:e7:35:b4:2f:
                    72:1b:76:25:59:7f:38:bc:64:96:a3:a0:ed:a4:8e:
                    98:82:fc:94:c5:da:9f:b2:b4:4a:e7:d9:32:10:55:
                    40:f8:82:62:7b:f9:8e:22:4f:e2:46:93:c5:93:b0:
                    b1:b5:89:7a:2e:93:9a:3a:eb:71:bb:54:d4:95:f7:
                    4e:f0:fc:f3:ef:2a:4e:d0:10:53:c0:76:d9:19:4f:
                    1f:fc:17:c3:e3:26:a7:9e:a8:18:f1:f1:82:87:29:
                    9d:5b:7b:4e:b6:58:43:93:44:b5:e4:c3:3d:f3:34:
                    3f:ce:1d:5f:07:25:9e:26:cb:e6:75:01:03:b7:84:
                    cc:d0:eb:53:c7:a9:7c:43:06:20:89:2d:e0:29:f7:
                    8a:03:73:45:53:32:b5:40:63:f0:59:90:60:0a:b9:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D0:7F:54:B6:26:16:E6:CA:E5:DC:7C:D8:50:9C:49:E2:28:79:73
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643330303a3a2f34302d3438203d3e20323030353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d300::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:94:be:eb:02:79:43:bc:0f:c9:df:ed:3c:83:2a:6f:20:
         96:53:a3:41:f9:89:65:ee:bc:52:82:87:8c:8a:4d:0d:cc:85:
         dc:a8:7e:4d:2e:6d:d3:d4:5f:d4:91:31:25:be:5b:7c:94:98:
         40:27:55:1b:07:69:77:95:f1:fb:5c:f4:30:7a:67:98:a8:97:
         ef:90:5d:08:f3:70:08:9c:c0:f9:86:30:df:26:55:da:bb:7c:
         3d:21:5e:8e:48:e9:24:74:e4:a5:98:27:6a:4d:d2:40:9a:77:
         ca:4c:83:3c:15:2a:12:aa:e6:32:2c:77:be:55:2d:86:7e:a8:
         76:ac:50:9c:d5:fa:da:7a:96:14:1d:55:9f:c7:11:3c:90:5d:
         35:c4:70:d1:e1:5e:24:f7:02:27:42:c6:fe:81:bb:d5:36:fe:
         12:e6:73:5a:03:bf:bc:e9:42:d2:83:21:22:4b:f6:1e:c4:0d:
         84:a1:07:ea:64:37:06:50:b6:5f:21:6b:a3:7a:e0:a1:d4:c2:
         5c:ca:d1:c7:4d:50:70:d6:32:e7:30:f8:73:f7:fc:43:0f:34:
         d5:fd:30:74:99:76:d2:30:f2:5a:d1:7b:4c:59:22:7b:37:0f:
         c6:4c:25:92:c8:21:90:ec:0a:09:6c:8d:ea:3a:a0:c5:06:96:
         6a:e7:59:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----