Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663430303a3a2f34302d3438203d3e20323030393639.roa
File:                     326130613a363034303a663430303a3a2f34302d3438203d3e20323030393639.roa (raw, json)
Hash identifier:          USsMSx3m1RLUyM4sYBQ98hGJuOC9kI32pNEvKL/JMgc=
Subject key identifier:   27:FD:6D:F1:BD:38:A7:C1:1F:D3:B9:76:FC:48:39:25:87:8B:12:08
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       286D3648797FC344C6107B454D425A8BEC453D96
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663430303a3a2f34302d3438203d3e20323030393639.roa
Signing time:             Fri 09 Dec 2022 08:21:01 +0000
ROA not before:           Fri 09 Dec 2022 08:16:01 +0000
ROA not after:            Fri 08 Dec 2023 08:21:01 +0000
asID:                     200969
IP address blocks:        2a0a:6040:f400::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6d:36:48:79:7f:c3:44:c6:10:7b:45:4d:42:5a:8b:ec:45:3d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:01 2022 GMT
            Not After : Dec  8 08:21:01 2023 GMT
        Subject: CN=27FD6DF1BD38A7C11FD3B976FC483925878B1208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:e7:2e:e5:a5:56:d3:7d:c4:de:c7:ad:1d:
                    4c:85:da:47:15:de:b3:dd:c0:07:66:b6:c7:24:fd:
                    b6:9a:37:e5:04:31:b8:89:0e:82:dd:8b:87:cd:47:
                    b6:d3:16:1c:a4:8b:7d:98:fd:e7:c0:72:f7:29:d1:
                    b2:f4:25:db:1c:03:d0:27:80:60:ed:26:ba:5c:9d:
                    64:90:9e:52:ff:9a:6e:26:28:b5:39:61:57:c0:ac:
                    70:40:5e:44:54:5f:9c:cc:79:cf:61:39:ac:72:97:
                    1c:67:a7:a2:8d:17:5a:4d:ed:be:2a:5d:d4:96:0c:
                    18:4c:c4:89:37:1c:39:ef:fc:32:a4:81:ba:34:61:
                    02:fa:bc:f6:04:73:d0:18:30:49:79:27:2e:c5:16:
                    5b:4c:8b:02:d1:01:f6:ac:c8:21:0a:61:b2:b1:bd:
                    59:aa:77:be:bd:ee:17:15:89:f7:36:d6:65:25:fa:
                    d6:b5:d3:90:02:1f:32:de:9a:58:97:06:9b:d2:25:
                    b4:88:d5:34:d1:3f:04:9c:b4:6f:fa:00:e2:3c:d8:
                    1f:44:5d:92:d4:8d:09:71:20:88:99:ba:7f:94:f0:
                    55:f6:65:f5:60:ca:df:13:71:42:3b:0d:7b:cd:51:
                    c5:04:2c:4c:40:5b:46:18:8a:6f:53:f0:bc:ee:a2:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FD:6D:F1:BD:38:A7:C1:1F:D3:B9:76:FC:48:39:25:87:8B:12:08
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663430303a3a2f34302d3438203d3e20323030393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:f400::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:b0:a4:11:d6:f0:d9:d2:11:dd:32:46:de:e9:b6:f0:94:5a:
         ec:18:76:99:96:9b:fd:63:a8:65:4d:7b:09:97:6b:0e:23:c6:
         cd:e4:a7:4a:ce:04:55:c0:44:13:6f:02:2f:5c:be:5a:e4:3f:
         95:d7:19:c0:05:4a:25:75:0b:5b:28:a5:35:da:70:81:5d:ac:
         d4:97:9e:fd:81:57:aa:1d:0b:3f:58:2c:50:4d:95:63:3d:0d:
         f4:eb:3b:8f:22:d3:c9:63:f9:69:1e:80:ef:86:8d:3e:05:ee:
         2d:2b:61:a6:dc:da:1d:e7:28:31:ee:30:29:8f:0b:66:56:96:
         2d:fb:4e:75:d8:16:e0:c0:59:64:8f:f4:aa:05:a4:65:23:7e:
         53:c6:84:c9:b5:6b:56:d4:e2:66:fb:1f:7e:d8:38:00:f3:e7:
         46:64:3c:35:86:e9:b5:d3:65:07:83:bb:6f:34:2e:83:3e:28:
         e2:67:60:2d:eb:a7:d9:12:5e:9d:f4:7f:be:fc:09:53:6b:24:
         11:dd:46:2d:bf:55:1f:1d:b9:5c:f8:b5:b2:5b:f0:ed:e4:a5:
         38:50:c1:9e:2f:3a:d3:64:8c:05:e0:1d:b9:e7:45:92:b9:7a:
         db:be:26:10:c9:e1:27:ec:cc:0a:19:84:9a:45:1e:e5:45:00:
         75:06:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----