Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653530303a3a2f34302d3438203d3e20323030393539.roa
File:                     326130613a363034303a653530303a3a2f34302d3438203d3e20323030393539.roa (raw, json)
Hash identifier:          Z5ggsH9hc2q/KUu7eEsZZ4Z2ue4Tu+qY79vfiqrg1Yc=
Subject key identifier:   0A:9D:7A:31:82:26:CD:16:4B:A1:64:9C:4B:3C:A9:2F:C8:CD:E5:3C
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0E316B18606999E5036010504609AE9668AA56C4
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653530303a3a2f34302d3438203d3e20323030393539.roa
Signing time:             Fri 09 Dec 2022 08:21:02 +0000
ROA not before:           Fri 09 Dec 2022 08:16:02 +0000
ROA not after:            Fri 08 Dec 2023 08:21:02 +0000
asID:                     200959
IP address blocks:        2a0a:6040:e500::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:31:6b:18:60:69:99:e5:03:60:10:50:46:09:ae:96:68:aa:56:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:02 2022 GMT
            Not After : Dec  8 08:21:02 2023 GMT
        Subject: CN=0A9D7A318226CD164BA1649C4B3CA92FC8CDE53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:32:fc:25:95:9c:59:e1:06:b5:a3:1f:4d:
                    a9:5c:46:27:cb:bd:e8:8a:df:01:3e:31:82:c7:0a:
                    a3:37:5d:12:23:45:34:11:68:a0:0c:70:27:0d:e3:
                    7c:73:74:34:db:a8:04:44:ef:54:0f:e0:50:c9:29:
                    1c:0d:e9:1b:7f:bd:33:1a:de:dc:42:a1:db:ca:a8:
                    cd:51:8b:89:85:b3:da:00:67:84:85:05:b0:92:d4:
                    ad:af:36:71:38:2f:74:90:96:8f:7f:e0:f6:71:c7:
                    65:25:60:fc:7b:5c:02:24:1e:ef:f3:5b:da:57:8c:
                    2d:d7:ed:01:18:cf:37:95:09:55:8b:1a:4f:dc:28:
                    3a:f3:7f:cc:86:38:5d:65:36:1d:06:0f:ff:1a:01:
                    fa:1e:17:46:f5:b7:2f:a2:0e:8a:6e:c7:4e:32:78:
                    cf:ad:83:21:a9:96:d4:e1:0f:7a:ca:11:0f:13:a4:
                    1f:55:d6:6f:63:c7:57:44:02:e7:c5:9a:96:bf:8f:
                    a5:7f:69:4a:b7:51:2d:47:09:24:9f:32:c0:6b:aa:
                    b2:62:df:77:03:bd:6a:77:cd:68:04:e1:07:eb:08:
                    3d:14:ba:c5:6e:d2:e6:d7:24:b2:d1:31:e6:82:fd:
                    b4:13:41:8d:69:b3:7a:02:fa:07:7f:ff:57:0c:a1:
                    4f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9D:7A:31:82:26:CD:16:4B:A1:64:9C:4B:3C:A9:2F:C8:CD:E5:3C
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653530303a3a2f34302d3438203d3e20323030393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e500::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:6d:ba:67:d8:fc:7c:35:d5:c6:b0:03:4d:b5:00:f5:b8:0e:
         03:8b:ac:c1:e7:97:76:20:44:78:bc:dd:a3:6f:a8:01:90:e3:
         74:f1:76:5a:ee:e3:55:58:32:a5:33:74:f4:d4:5f:db:41:a6:
         f6:84:0b:7a:0f:cd:6e:bb:8c:d3:7f:eb:d4:03:30:e8:b1:e4:
         a3:ad:23:9d:ec:ef:f9:8e:d7:5e:54:ab:e6:b0:c9:8c:27:bb:
         42:08:81:2e:38:f4:d3:d6:8d:fd:06:ad:c5:4b:d0:cd:b1:20:
         cd:9e:f1:e9:06:ba:f8:91:c8:57:b6:72:7c:ef:32:65:1b:48:
         ea:89:1e:ec:df:1d:a3:91:e2:ec:9e:da:b2:9d:09:8c:81:cd:
         03:9b:ab:24:fa:4c:90:da:d7:47:cb:10:05:f9:6d:a0:58:48:
         98:9e:59:b7:6a:00:8e:49:52:da:7f:6a:34:0a:06:ab:a3:07:
         fa:89:6a:6e:4f:69:69:f7:7b:0e:e9:fd:81:32:ca:f7:74:8d:
         cc:23:f0:fe:99:2f:41:3f:75:40:00:ec:c9:74:9d:61:ea:b0:
         31:7e:d5:3c:a2:4a:89:8a:df:8d:16:d2:d8:fc:e4:5b:9a:4d:
         5b:84:ec:17:4f:a0:94:15:46:34:53:de:2d:02:49:ce:0c:0a:
         f6:05:a9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----