Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656530303a3a2f34302d3438203d3e20323030353730.roa
File:                     326130613a363034303a656530303a3a2f34302d3438203d3e20323030353730.roa (raw, json)
Hash identifier:          JzVctQlhmL3D4dK51PKwTkt45B9yMXHxGpzdH8FmfX4=
Subject key identifier:   84:E8:3D:63:7D:62:AA:2D:A0:DE:A6:38:56:58:EC:4F:02:5F:67:59
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1B4559A113927651AD76B4CB15C9F32E343873EA
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656530303a3a2f34302d3438203d3e20323030353730.roa
Signing time:             Sun 18 Dec 2022 09:17:03 +0000
ROA not before:           Sun 18 Dec 2022 09:12:03 +0000
ROA not after:            Sun 17 Dec 2023 09:17:03 +0000
asID:                     200570
IP address blocks:        2a0a:6040:ee00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:45:59:a1:13:92:76:51:ad:76:b4:cb:15:c9:f3:2e:34:38:73:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 18 09:12:03 2022 GMT
            Not After : Dec 17 09:17:03 2023 GMT
        Subject: CN=84E83D637D62AA2DA0DEA6385658EC4F025F6759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:79:6c:46:93:92:12:2c:39:ab:2c:dc:74:
                    6f:cb:67:3c:e1:76:98:0f:9c:92:ba:ca:90:81:94:
                    7f:d5:5f:da:be:f4:50:d9:69:bb:d3:e0:83:a8:65:
                    5c:f6:9d:98:ed:f5:e3:ba:6b:3a:d9:2d:94:fa:a4:
                    f1:1d:cb:0a:5b:09:9d:14:5e:4d:2a:76:a8:39:4b:
                    b6:51:c7:6d:40:01:28:3a:77:83:cb:64:4a:15:9a:
                    78:b2:4f:2a:8b:fb:ff:88:4b:25:29:d0:64:fd:63:
                    5c:ff:00:32:9c:47:12:37:52:f6:d7:8f:fb:71:ff:
                    0b:fe:fa:4c:ac:81:e0:8c:56:53:68:d7:26:be:09:
                    98:ac:e8:3c:0b:34:2d:ee:2d:e5:63:bb:c8:bd:6a:
                    3f:38:d2:0d:c9:c4:73:7f:64:a5:f8:8f:42:fc:11:
                    70:9d:a7:76:ee:42:b9:0f:40:89:5b:8a:e6:3a:a9:
                    82:e9:6c:68:0b:55:8b:2e:2f:52:22:8b:c6:2e:28:
                    2a:ff:4f:9b:8d:c3:72:50:03:ce:06:ba:7f:8c:0c:
                    cc:54:13:47:33:fa:50:ce:3a:5d:5b:e0:1a:ba:4c:
                    a5:93:78:72:d2:88:a1:a2:76:1d:d4:ba:ee:2a:d1:
                    88:b0:36:13:dd:67:a1:0e:93:f2:97:e7:25:3f:0e:
                    e2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E8:3D:63:7D:62:AA:2D:A0:DE:A6:38:56:58:EC:4F:02:5F:67:59
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656530303a3a2f34302d3438203d3e20323030353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ee00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:72:0d:0a:2b:06:ca:16:af:2d:41:41:17:c4:68:d0:b8:cd:
         69:71:9c:b3:92:85:c4:b7:31:be:c6:54:24:a8:92:54:05:3e:
         c1:3b:1b:cd:63:b4:5f:01:0f:39:f2:c1:cb:9b:0f:ac:80:8c:
         62:bb:cf:22:98:6a:4b:20:cd:c8:56:6f:c3:df:1e:04:96:a8:
         73:69:8b:32:7d:24:c6:8a:40:71:34:40:7f:19:8b:2e:31:e7:
         6d:3e:69:77:ad:c1:ee:34:9d:ce:ed:b1:ba:81:4e:a5:36:aa:
         91:68:29:8f:9b:6b:f6:05:41:5c:f0:9f:16:1b:9e:32:9f:f1:
         38:06:35:78:e8:0d:b1:65:a9:b9:75:68:e2:d8:b8:78:b7:26:
         17:fc:a0:73:9e:f6:6d:b0:fc:e8:d8:8f:d6:e1:f1:f0:35:c5:
         5b:a3:70:c6:7d:ff:dd:0c:fd:16:29:cc:0d:ee:cd:d2:6c:a3:
         2e:e9:ea:ea:16:17:91:41:6d:be:e0:b8:30:73:e2:7b:54:a8:
         b5:fc:83:e9:56:40:67:01:7a:05:36:b8:ea:09:bc:ad:97:7e:
         18:9d:18:31:d2:7f:62:33:aa:46:a3:e0:98:2e:8f:a5:0a:31:
         8c:e6:76:d3:e5:3a:e3:c2:61:31:af:55:68:22:fc:05:d8:58:
         37:8e:1d:96
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUG0VZoROSdlGtdrTLFcnzLjQ4c+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMTgwOTEyMDNaFw0yMzEyMTcwOTE3MDNaMDMxMTAvBgNV
BAMTKDg0RTgzRDYzN0Q2MkFBMkRBMERFQTYzODU2NThFQzRGMDI1RjY3NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqAHlsRpOSEiw5qyzcdG/LZzzh
dpgPnJK6ypCBlH/VX9q+9FDZabvT4IOoZVz2nZjt9eO6azrZLZT6pPEdywpbCZ0U
Xk0qdqg5S7ZRx21AASg6d4PLZEoVmniyTyqL+/+ISyUp0GT9Y1z/ADKcRxI3UvbX
j/tx/wv++kysgeCMVlNo1ya+CZis6DwLNC3uLeVju8i9aj840g3JxHN/ZKX4j0L8
EXCdp3buQrkPQIlbiuY6qYLpbGgLVYsuL1Iii8YuKCr/T5uNw3JQA84Gun+MDMxU
E0cz+lDOOl1b4Bq6TKWTeHLSiKGidh3Uuu4q0YiwNhPdZ6EOk/KX5yU/DuKrAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUhOg9Y31iqi2g3qY4VljsTwJfZ1kwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2NTY1
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDM1MzczMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYEDuMA0GCSqGSIb3DQEBCwUAA4IBAQAMcg0KKwbKFq8tQUEXxGjQuM1p
cZyzkoXEtzG+xlQkqJJUBT7BOxvNY7RfAQ858sHLmw+sgIxiu88imGpLIM3IVm/D
3x4ElqhzaYsyfSTGikBxNEB/GYsuMedtPml3rcHuNJ3O7bG6gU6lNqqRaCmPm2v2
BUFc8J8WG54yn/E4BjV46A2xZam5dWji2Lh4tyYX/KBznvZtsPzo2I/W4fHwNcVb
o3DGff/dDP0WKcwN7s3SbKMu6erqFheRQW2+4Lgwc+J7VKi1/IPpVkBnAXoFNrjq
Cbytl34YnRgx0n9iM6pGo+CYLo+lCjGM5nbT5TrjwmExr1VoIvwF2Fg3jh2W
-----END CERTIFICATE-----