Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656630303a3a2f34302d3438203d3e20323036323731.roa
File:                     326130613a363034303a656630303a3a2f34302d3438203d3e20323036323731.roa (raw, json)
Hash identifier:          u461sk1jqmDY5TPLmyakv4KzFBrEXaHK4uvdqFtZO6E=
Subject key identifier:   67:4B:2F:78:85:6A:A6:C3:1F:63:4F:AB:81:64:64:D8:2C:B4:2A:4D
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       37AF7EE2E326E7AA7132648F9A95627F69AB2E8D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656630303a3a2f34302d3438203d3e20323036323731.roa
Signing time:             Fri 09 Dec 2022 08:21:02 +0000
ROA not before:           Fri 09 Dec 2022 08:16:02 +0000
ROA not after:            Fri 08 Dec 2023 08:21:02 +0000
asID:                     206271
IP address blocks:        2a0a:6040:ef00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:af:7e:e2:e3:26:e7:aa:71:32:64:8f:9a:95:62:7f:69:ab:2e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:02 2022 GMT
            Not After : Dec  8 08:21:02 2023 GMT
        Subject: CN=674B2F78856AA6C31F634FAB816464D82CB42A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:04:18:6c:62:39:89:e1:19:18:be:f0:8f:
                    6a:8e:a6:95:8e:70:09:e4:39:37:41:e9:00:07:67:
                    c1:f7:8a:6b:3c:87:35:37:e7:8d:f0:a1:39:fc:7c:
                    c9:e8:e1:93:9e:8b:4f:e1:ae:37:dd:14:86:5e:1c:
                    ab:78:75:6e:d9:b7:2b:4c:8f:50:cd:a0:1e:a0:51:
                    ef:b2:31:a7:90:aa:2a:8d:7a:9c:7b:af:db:f2:1b:
                    02:e8:44:4d:ae:58:d1:8a:8d:67:4c:25:f6:44:9c:
                    51:8a:35:1b:d0:0a:68:22:a4:06:fb:0f:e8:e8:2a:
                    0d:46:46:db:40:0d:81:4d:34:64:b7:83:a8:60:b3:
                    48:97:df:8a:52:20:eb:f9:ec:cb:e5:fb:71:e0:72:
                    07:7f:96:50:4c:ac:12:20:ef:df:32:e2:c4:a2:60:
                    aa:d7:94:5a:3b:d3:f3:78:ef:de:62:31:1d:fa:1c:
                    cf:78:2f:bd:21:ec:2c:de:af:54:41:a6:ed:c6:9f:
                    f6:1f:ed:cd:7c:b3:a9:8c:82:b7:fa:75:15:bf:a9:
                    e6:7b:cc:81:d2:71:20:b0:3e:50:0b:0d:10:6a:79:
                    91:8d:f0:86:03:c6:e1:49:10:bb:e1:c2:4b:d1:a0:
                    c6:83:f8:cf:c0:71:40:de:f7:fc:5b:d5:c2:19:b7:
                    23:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4B:2F:78:85:6A:A6:C3:1F:63:4F:AB:81:64:64:D8:2C:B4:2A:4D
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656630303a3a2f34302d3438203d3e20323036323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ef00::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:b3:a9:79:d1:e4:73:a3:5f:54:f2:1a:80:ac:4e:d4:5b:49:
         fc:c3:5a:cb:26:c1:5f:38:f8:76:2b:09:3f:ff:1b:34:c6:8e:
         52:46:0c:e7:c9:f4:65:74:18:28:48:84:86:ad:80:8f:74:4b:
         81:c7:82:3b:da:03:7d:4d:78:96:7a:2e:c5:c1:54:e5:f8:37:
         98:21:05:13:9e:21:70:ef:ad:76:ee:33:b2:e1:ab:aa:5a:35:
         32:82:5a:97:d3:1d:5d:54:d5:bd:f3:df:a3:df:45:95:f3:d7:
         19:bc:16:40:b9:c0:60:af:90:d6:2c:bd:a9:90:fe:a5:c2:f5:
         d1:d0:38:4a:a6:37:cb:52:19:ea:f7:5e:f0:90:82:fc:da:a3:
         0c:c2:56:70:97:b8:be:07:e1:68:69:b6:d3:f6:1e:61:05:98:
         fa:ad:f3:1c:75:0e:2b:ac:90:dc:99:dd:c5:c7:c4:ab:05:60:
         00:e9:0b:16:dd:e8:45:be:50:22:4c:1d:81:dd:06:00:c0:11:
         80:00:69:f9:8f:3b:6d:5f:87:11:d0:73:c5:10:aa:08:23:5e:
         e5:b9:12:7e:9d:d4:c5:08:f6:87:a4:ed:8c:ee:61:40:52:24:
         4f:88:88:c8:31:49:e3:45:2a:75:df:03:8c:df:e7:72:41:c0:
         26:03:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----