Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653430303a3a2f34302d3438203d3e20323030393132.roa
File:                     326130613a363034303a653430303a3a2f34302d3438203d3e20323030393132.roa (raw, json)
Hash identifier:          lgUgELVbu35wPI/pS7beYe5Z4TBFHQn4NHMXPhjGqmY=
Subject key identifier:   06:1C:BE:DF:D4:83:25:FD:16:F9:0B:76:9D:11:C8:43:8D:17:E8:43
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7901680878CF516249BFD9B47C6BC145EF0A49F8
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653430303a3a2f34302d3438203d3e20323030393132.roa
Signing time:             Fri 09 Dec 2022 08:21:02 +0000
ROA not before:           Fri 09 Dec 2022 08:16:02 +0000
ROA not after:            Fri 08 Dec 2023 08:21:02 +0000
asID:                     200912
IP address blocks:        2a0a:6040:e400::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:01:68:08:78:cf:51:62:49:bf:d9:b4:7c:6b:c1:45:ef:0a:49:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:02 2022 GMT
            Not After : Dec  8 08:21:02 2023 GMT
        Subject: CN=061CBEDFD48325FD16F90B769D11C8438D17E843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:90:38:60:49:d6:81:4c:78:6e:81:30:77:
                    b3:36:2d:ae:b7:04:ef:4b:e9:d6:8c:4f:11:2e:b4:
                    29:aa:4a:60:fa:ea:be:ac:28:8d:a7:de:68:5a:a1:
                    bd:16:39:d6:74:62:27:bd:74:80:21:91:a1:1d:06:
                    03:90:d0:d3:16:23:da:2f:24:0c:dc:21:4e:d3:4c:
                    64:39:be:b5:0c:06:9c:92:a1:f9:9c:9c:17:9d:44:
                    1f:05:a4:55:74:b2:e2:c6:93:3d:5b:59:7e:1b:e8:
                    dc:9a:bf:e6:a2:ae:5a:2d:d0:2e:70:62:00:de:8f:
                    8d:29:ef:94:c5:14:04:3b:86:83:84:60:92:4d:2b:
                    43:2b:76:bc:a8:fe:b6:40:f5:18:a4:5f:c2:cc:37:
                    ef:4d:4b:45:f5:e5:45:b3:5e:94:37:58:c0:c3:1d:
                    58:46:77:a5:66:34:bf:6b:ce:e9:f4:48:4d:4d:f2:
                    63:5d:83:68:67:f9:6f:6c:1b:99:06:09:a7:61:07:
                    14:cc:c5:31:20:66:81:97:d9:6e:8d:c4:6d:11:30:
                    76:bf:0a:13:40:1d:97:39:91:fc:b8:2c:62:aa:ba:
                    62:31:6a:a8:8f:ea:57:4b:c3:3a:09:5d:80:b1:8c:
                    a1:3d:f7:08:ec:8b:66:bc:2f:53:e6:21:0d:7a:af:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1C:BE:DF:D4:83:25:FD:16:F9:0B:76:9D:11:C8:43:8D:17:E8:43
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653430303a3a2f34302d3438203d3e20323030393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e400::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:93:41:dc:b6:f0:89:30:3e:c1:18:df:e3:e6:2b:46:90:09:
         d2:67:b6:bf:29:b9:e6:9c:0e:32:3d:b1:3e:1e:a2:07:36:8b:
         60:c9:be:32:d3:82:f8:1a:47:83:a3:72:cf:68:44:47:d0:4e:
         7a:83:85:be:00:40:c3:ab:e5:dc:c0:5c:81:72:02:83:72:2a:
         da:97:f5:ee:72:5d:86:d3:4d:1e:71:3d:77:31:14:c4:f2:4f:
         f7:d6:c0:6f:5d:eb:c7:56:48:a7:e9:e9:99:59:cd:23:76:90:
         42:0a:f5:70:5f:4b:e6:d8:a5:27:9c:a1:c9:c9:0a:91:58:9f:
         71:06:10:c3:a5:1a:1a:11:52:c6:32:f8:9f:30:fc:80:82:0a:
         86:89:fe:5f:16:e5:c4:13:6f:c0:cc:e8:e4:5b:47:66:e1:5c:
         29:df:b5:c9:86:72:75:ae:6c:07:b8:5f:38:92:7c:27:5b:fd:
         c1:50:6c:0a:0e:8f:1a:ed:8a:bb:0b:ee:4a:98:10:5c:d3:9c:
         4f:30:fc:cb:52:87:f9:c2:e3:1b:85:d0:da:f6:03:b1:95:d4:
         e0:7c:aa:78:7f:69:28:cc:5a:12:ae:07:5b:a5:84:9d:fd:05:
         26:53:54:b1:75:a1:4c:2c:26:94:4f:7c:37:fe:3e:5c:76:cd:
         0b:01:37:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----