Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656330303a3a2f34302d3438203d3e20323035373934.roa
File:                     326130613a363034303a656330303a3a2f34302d3438203d3e20323035373934.roa (raw, json)
Hash identifier:          HZq/tsEyNfgqJDc26ALlzdt3eOY1lepqNGQEI8aaHLA=
Subject key identifier:   31:93:94:E2:62:58:35:4E:B4:B2:C1:AA:CB:F8:11:AB:74:DB:66:0E
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       6453C63FC49172C5D529E1BEDDFBE06A38841471
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656330303a3a2f34302d3438203d3e20323035373934.roa
Signing time:             Fri 09 Dec 2022 08:21:00 +0000
ROA not before:           Fri 09 Dec 2022 08:16:00 +0000
ROA not after:            Fri 08 Dec 2023 08:21:00 +0000
asID:                     205794
IP address blocks:        2a0a:6040:ec00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:53:c6:3f:c4:91:72:c5:d5:29:e1:be:dd:fb:e0:6a:38:84:14:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:00 2022 GMT
            Not After : Dec  8 08:21:00 2023 GMT
        Subject: CN=319394E26258354EB4B2C1AACBF811AB74DB660E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f6:79:54:e6:c2:25:7e:68:a5:c2:5c:13:70:
                    e5:f6:2f:e4:e7:15:df:5c:48:2a:a5:46:c6:a8:f9:
                    64:76:10:68:f4:f6:10:98:04:58:83:5b:cf:18:d1:
                    d6:72:1f:60:47:2b:05:b9:4f:71:b8:a2:69:e2:66:
                    ee:a0:dd:f5:8b:62:b1:97:56:58:48:9e:d9:54:63:
                    19:22:81:63:b1:64:9f:b5:50:2d:ce:c4:12:7e:c4:
                    04:0d:fc:75:e3:3b:80:c2:71:2b:9d:f2:dd:46:65:
                    24:a1:c9:ac:7f:d4:d8:76:8f:06:11:fa:3f:1d:2e:
                    29:5f:1f:de:f5:f4:ea:62:53:cb:86:42:91:7e:38:
                    db:a1:3d:7c:e3:83:5e:e0:05:da:93:ce:77:45:12:
                    43:cd:45:ea:53:d4:77:26:6f:1d:15:79:41:70:0c:
                    10:07:9c:6a:f9:c3:3f:a6:d2:24:2d:81:7f:92:d2:
                    51:14:5c:5e:29:98:8b:00:7b:60:73:5d:e8:d6:22:
                    44:82:59:1a:64:c6:10:6a:8a:00:42:19:7d:45:bf:
                    bc:64:79:70:61:c3:08:58:16:17:0b:ee:16:3d:37:
                    69:f6:ba:d2:52:6f:5c:87:d7:db:43:c1:cd:33:17:
                    67:a1:35:99:bf:97:e0:b5:f9:dc:1a:f5:1a:93:b2:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:93:94:E2:62:58:35:4E:B4:B2:C1:AA:CB:F8:11:AB:74:DB:66:0E
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656330303a3a2f34302d3438203d3e20323035373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:48:77:18:a1:cf:3d:48:17:67:a4:94:22:7d:92:a4:6c:3f:
         94:9d:c1:df:36:14:59:69:f4:ea:8f:bc:03:cf:9e:2e:ad:a4:
         93:77:ce:60:dc:42:8d:3e:19:ee:fa:89:b4:73:48:7e:5b:cf:
         dc:7c:1b:13:a1:07:6a:92:45:50:3a:7b:a2:52:57:19:ca:27:
         04:00:a4:90:8c:ec:f0:50:8d:b6:34:04:fb:3d:11:9a:f3:a5:
         6b:19:b8:71:3f:8e:03:e4:31:8d:57:8e:c3:a9:2b:67:8c:3d:
         55:cb:c5:2f:09:6d:8f:1d:b4:9a:86:39:3b:c1:e9:3a:8f:59:
         f9:49:7d:23:9b:07:0b:36:c9:22:78:8d:5d:e0:16:f0:97:09:
         1c:c2:87:bc:29:c1:d0:07:67:e0:e2:15:17:3c:94:c7:59:4c:
         f2:3a:20:b9:7c:d6:72:9e:e8:e9:09:3a:57:ef:f1:34:01:3c:
         ad:24:f4:5f:58:70:9a:c7:2a:ff:a2:55:0c:c8:a8:17:16:9d:
         c9:ba:cd:7f:40:44:c4:c0:cc:c2:8c:13:21:f2:90:23:e9:73:
         8d:87:07:27:70:8a:9e:08:17:3d:45:00:e0:d1:94:f0:6c:1e:
         05:ae:6f:2a:28:4a:1d:be:de:f9:45:01:e2:8d:66:b8:52:f1:
         a4:d0:c7:6a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUZFPGP8SRcsXVKeG+3fvgajiEFHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMDkwODE2MDBaFw0yMzEyMDgwODIxMDBaMDMxMTAvBgNV
BAMTKDMxOTM5NEUyNjI1ODM1NEVCNEIyQzFBQUNCRjgxMUFCNzREQjY2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf9nlU5sIlfmilwlwTcOX2L+Tn
Fd9cSCqlRsao+WR2EGj09hCYBFiDW88Y0dZyH2BHKwW5T3G4omniZu6g3fWLYrGX
VlhIntlUYxkigWOxZJ+1UC3OxBJ+xAQN/HXjO4DCcSud8t1GZSShyax/1Nh2jwYR
+j8dLilfH9719OpiU8uGQpF+ONuhPXzjg17gBdqTzndFEkPNRepT1Hcmbx0VeUFw
DBAHnGr5wz+m0iQtgX+S0lEUXF4pmIsAe2BzXejWIkSCWRpkxhBqigBCGX1Fv7xk
eXBhwwhYFhcL7hY9N2n2utJSb1yH19tDwc0zF2ehNZm/l+C1+dwa9RqTsmwVAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUMZOU4mJYNU60ssGqy/gRq3TbZg4wHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2NTYz
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzNTM3MzkzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYEDsMA0GCSqGSIb3DQEBCwUAA4IBAQB7SHcYoc89SBdnpJQifZKkbD+U
ncHfNhRZafTqj7wDz54uraSTd85g3EKNPhnu+om0c0h+W8/cfBsToQdqkkVQOnui
UlcZyicEAKSQjOzwUI22NAT7PRGa86VrGbhxP44D5DGNV47DqStnjD1Vy8UvCW2P
HbSahjk7wek6j1n5SX0jmwcLNskieI1d4Bbwlwkcwoe8KcHQB2fg4hUXPJTHWUzy
OiC5fNZynujpCTpX7/E0ATytJPRfWHCaxyr/olUMyKgXFp3Jus1/QETEwMzCjBMh
8pAj6XONhwcncIqeCBc9RQDg0ZTwbB4Frm8qKEodvt75RQHijWa4UvGk0Mdq
-----END CERTIFICATE-----