Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643830303a3a2f34302d3438203d3e20323030393439.roa
File:                     326130613a363034303a643830303a3a2f34302d3438203d3e20323030393439.roa (raw, json)
Hash identifier:          QkLnrTpiDh2E+WFn2WIppcG7j5ANpiE+7fSXdwLonCU=
Subject key identifier:   58:2C:57:B4:88:0D:0A:67:8B:5B:6C:9B:EB:3B:90:19:37:98:A4:CA
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1D4050C27C9173B11F431AADDDAAC5C5D2780939
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643830303a3a2f34302d3438203d3e20323030393439.roa
Signing time:             Fri 09 Dec 2022 08:21:01 +0000
ROA not before:           Fri 09 Dec 2022 08:16:01 +0000
ROA not after:            Fri 08 Dec 2023 08:21:01 +0000
asID:                     200949
IP address blocks:        2a0a:6040:d800::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:40:50:c2:7c:91:73:b1:1f:43:1a:ad:dd:aa:c5:c5:d2:78:09:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:01 2022 GMT
            Not After : Dec  8 08:21:01 2023 GMT
        Subject: CN=582C57B4880D0A678B5B6C9BEB3B90193798A4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:27:b7:f5:40:91:33:69:94:8d:e3:02:b1:
                    5e:97:88:08:64:62:80:d1:61:2f:70:70:cd:20:0b:
                    30:45:bd:24:92:cc:18:9a:2c:9b:b4:2c:d9:6f:d5:
                    5b:d6:f1:f8:73:57:d2:44:bd:e7:fc:da:72:ea:52:
                    74:66:61:c0:96:e8:9c:9a:e4:12:c5:50:eb:90:b4:
                    35:9c:56:5f:45:58:84:90:0f:8e:16:0e:a4:52:af:
                    17:cc:1f:26:b5:b0:ea:36:3f:37:4b:e1:7a:77:29:
                    87:8c:1e:bb:39:18:f3:f1:91:66:a3:45:dc:dd:32:
                    ad:70:a7:ac:de:9f:f3:34:bc:1d:4c:2b:f2:7b:67:
                    98:45:66:54:04:4e:92:c4:1d:97:6e:e5:27:78:39:
                    a0:61:4e:b9:21:8c:d0:00:dc:21:af:5d:81:42:9b:
                    a5:91:4c:ab:2c:d0:be:11:33:da:99:8e:7a:0d:4a:
                    a9:c5:34:f6:5c:ef:b7:f2:be:45:a8:3b:d8:0f:92:
                    b0:9d:1f:6f:70:d9:da:72:9f:bb:7a:f4:38:70:a6:
                    56:02:aa:ca:ed:7c:40:ad:8d:2a:66:2d:70:54:ce:
                    ff:cd:14:27:f8:60:91:a4:7e:4c:d1:88:58:f0:c3:
                    7e:15:0d:3b:b6:d9:95:18:16:dc:d1:d8:41:a5:9e:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2C:57:B4:88:0D:0A:67:8B:5B:6C:9B:EB:3B:90:19:37:98:A4:CA
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643830303a3a2f34302d3438203d3e20323030393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:86:78:c0:43:f2:3e:5c:1a:3e:e7:1d:9a:c1:a7:67:a3:87:
         2b:1c:ee:7d:b9:d7:17:b5:6d:27:b6:c9:69:7c:14:95:96:d0:
         fb:c8:e3:fe:01:ad:27:eb:44:6b:48:1e:c7:ac:21:58:d3:29:
         a7:ed:3c:47:09:78:c4:3f:23:d5:f5:ee:cb:21:57:da:c0:c6:
         fe:7c:23:49:ae:10:62:09:30:b9:7d:5b:a3:99:73:16:36:70:
         7f:31:09:37:47:f2:e7:88:1b:f4:a3:52:8d:f4:f8:fb:d0:6d:
         aa:32:57:7d:68:0d:c2:0a:4e:18:12:d8:79:ee:09:ea:9c:88:
         a0:88:9e:65:74:5f:d6:c4:e8:9e:5f:05:46:03:a0:44:bd:06:
         9c:da:d7:90:8f:00:de:ee:d5:4d:6a:b8:ca:22:17:76:95:02:
         18:57:bd:b5:dd:12:c5:7a:6c:ad:77:9a:3a:69:8c:81:6c:31:
         73:20:a9:2a:81:6d:59:ec:d2:98:50:3e:84:39:f4:2e:25:c7:
         38:c2:e5:55:88:e4:e4:e9:e4:11:c1:d8:f1:77:68:9b:aa:be:
         0b:32:ff:00:10:95:d1:1b:27:e5:c4:76:55:fe:10:c7:6d:d5:
         47:7e:30:d5:bd:63:28:40:e7:af:c4:6a:fb:9c:99:fb:c0:c6:
         2d:e2:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----