Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663230303a3a2f34302d3438203d3e20323030383739.roa
File:                     326130613a363034303a663230303a3a2f34302d3438203d3e20323030383739.roa (raw, json)
Hash identifier:          4ixDMjOctwdfIU2Ka3naZSnTnxaHnY9VXG4kgit56gg=
Subject key identifier:   C9:BF:EB:B9:00:6E:2E:B8:C4:EE:CD:84:81:92:C5:40:78:87:50:35
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       422B0D0C55016C5E7ED2328738F1AE09468DF64D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663230303a3a2f34302d3438203d3e20323030383739.roa
Signing time:             Fri 09 Dec 2022 08:21:01 +0000
ROA not before:           Fri 09 Dec 2022 08:16:01 +0000
ROA not after:            Fri 08 Dec 2023 08:21:01 +0000
asID:                     200879
IP address blocks:        2a0a:6040:f200::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2b:0d:0c:55:01:6c:5e:7e:d2:32:87:38:f1:ae:09:46:8d:f6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:01 2022 GMT
            Not After : Dec  8 08:21:01 2023 GMT
        Subject: CN=C9BFEBB9006E2EB8C4EECD848192C54078875035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:fd:a4:bb:f7:1e:48:8e:c0:0f:27:10:e0:
                    95:9d:4b:63:a0:25:3b:b8:ea:29:3f:c1:a3:56:1a:
                    3e:6c:c7:f1:fd:d6:99:39:03:ff:e2:ee:e6:d6:da:
                    42:02:95:3f:99:eb:49:1d:28:ba:62:02:5e:6d:7d:
                    c3:e3:dc:ff:3f:8d:67:15:fe:b7:75:9b:a1:85:f1:
                    f8:2e:88:3f:5a:ea:fc:fb:68:e4:8a:be:9b:62:83:
                    2d:11:65:e6:b2:c5:37:59:7f:fb:37:40:f0:ec:3d:
                    9f:2d:89:44:59:b1:4d:69:55:26:3f:6f:7c:5f:6f:
                    29:5d:a6:3a:c0:4e:a0:d1:84:5f:19:c8:4e:13:8b:
                    eb:84:31:d0:2c:bb:1f:46:28:89:d5:ce:e3:16:60:
                    bb:3a:e8:66:63:42:9b:b4:20:0b:a8:1e:dd:4b:85:
                    30:05:2d:9a:61:36:4c:ae:fb:f3:5b:f7:51:30:50:
                    df:55:86:0d:30:f7:ba:6d:48:e2:b6:2f:2e:fe:ba:
                    1c:87:9d:17:e2:dd:d3:38:12:90:99:41:f2:a9:f1:
                    61:f8:0e:de:61:38:f0:7e:b2:04:a3:7b:01:32:2e:
                    73:70:b0:73:ef:88:cf:af:b2:86:98:13:88:94:dd:
                    9b:5d:56:60:48:42:53:ee:cd:7f:04:e5:8e:ed:b5:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BF:EB:B9:00:6E:2E:B8:C4:EE:CD:84:81:92:C5:40:78:87:50:35
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663230303a3a2f34302d3438203d3e20323030383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:43:6d:35:0a:2b:80:e9:53:3f:37:ce:24:ff:38:48:f5:6f:
         01:44:89:5a:20:df:8d:22:55:66:db:fe:b1:2e:55:70:38:1e:
         a3:c8:f0:26:b6:cb:83:56:97:14:da:83:ec:c8:12:d8:d0:b6:
         22:e8:6c:d1:47:2d:05:30:e5:05:ff:91:db:aa:6d:93:a2:9c:
         72:64:e4:74:f3:46:8e:58:b4:88:52:6e:a1:ae:7c:99:0f:91:
         7b:a7:14:87:96:dc:1c:4e:d8:76:42:d8:cb:37:92:98:ac:3a:
         5c:e6:e9:5b:ec:a4:85:fd:97:b2:bd:7e:a9:6b:b0:26:9b:77:
         4e:6a:fd:30:9d:86:61:71:89:26:49:8a:2a:94:cc:b7:67:fb:
         fa:05:76:b4:1d:ca:80:98:0e:0f:f6:69:ec:57:54:c3:f6:f4:
         be:8c:a6:9e:97:2a:c4:ce:41:9d:7e:0a:db:83:d3:57:5e:fd:
         99:0f:8d:ae:74:58:71:70:41:7f:6e:24:be:32:3e:02:27:58:
         ce:9d:b6:38:31:0a:d5:19:91:08:8a:53:31:1c:f5:c5:e3:69:
         43:b7:f1:48:fe:29:f8:7a:4a:70:1c:fb:5e:ac:01:17:62:aa:
         20:51:fe:60:4d:6f:ad:4b:4c:38:37:18:08:25:9e:ec:0d:c0:
         61:5c:8c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----