Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663530303a3a2f34302d3438203d3e20323035383438.roa
File:                     326130613a363034303a663530303a3a2f34302d3438203d3e20323035383438.roa (raw, json)
Hash identifier:          H2LYRGTS5dPwvOBqMXEtiDQcBUlFXbebhCoatu7bt/g=
Subject key identifier:   D6:A0:FE:69:B4:C7:50:4F:CB:81:5C:11:BA:A8:E0:D6:36:B4:B3:DD
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       250A0A302E496E0A967EB0B3BCB092160C5657FF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663530303a3a2f34302d3438203d3e20323035383438.roa
Signing time:             Fri 09 Dec 2022 08:21:01 +0000
ROA not before:           Fri 09 Dec 2022 08:16:01 +0000
ROA not after:            Fri 08 Dec 2023 08:21:01 +0000
asID:                     205848
IP address blocks:        2a0a:6040:f500::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0a:0a:30:2e:49:6e:0a:96:7e:b0:b3:bc:b0:92:16:0c:56:57:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:01 2022 GMT
            Not After : Dec  8 08:21:01 2023 GMT
        Subject: CN=D6A0FE69B4C7504FCB815C11BAA8E0D636B4B3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:08:26:73:93:75:0e:91:d0:eb:81:48:7f:
                    6a:d5:b6:85:d0:93:d6:9c:a1:5e:36:a7:06:6d:74:
                    ce:5e:2a:e9:e3:46:09:19:99:58:12:02:13:25:8c:
                    da:34:5a:79:b8:23:ec:06:e2:7c:6f:9a:55:98:d9:
                    6a:8f:ba:16:5e:95:9c:ee:c8:79:e2:f3:d1:f8:32:
                    c8:80:7e:e5:35:1d:e3:ab:bb:b4:76:b1:97:38:c1:
                    93:0e:52:ba:da:81:96:e5:39:8e:00:4b:1b:4b:92:
                    af:53:33:18:ef:9e:34:88:c4:d6:32:f4:8f:be:a4:
                    1f:e5:0f:68:88:f2:56:1c:4c:91:b3:b9:c4:67:7f:
                    44:1f:15:87:6d:c6:56:d3:b2:94:2f:2b:a0:34:97:
                    dd:6c:75:a9:e0:5a:a1:8a:15:48:51:e2:51:b5:56:
                    e7:9f:f1:c9:c7:20:f8:3d:59:76:cb:e4:4a:64:c4:
                    fe:ed:18:cc:52:c0:aa:12:a0:af:8e:77:47:cf:82:
                    fe:2a:ba:fa:60:b2:04:a8:68:c9:ed:4a:23:eb:52:
                    d6:b0:2b:1c:04:06:2c:78:1c:fd:46:9f:71:13:d9:
                    9a:f4:cd:43:3a:4a:83:d1:ba:c3:07:8e:89:36:d1:
                    da:68:78:57:cc:19:89:07:33:05:ff:96:46:f9:2f:
                    e1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A0:FE:69:B4:C7:50:4F:CB:81:5C:11:BA:A8:E0:D6:36:B4:B3:DD
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663530303a3a2f34302d3438203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:f500::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:b2:38:b4:e5:8b:28:23:7e:13:9c:08:08:52:c0:66:a3:6f:
         9d:02:6f:ee:5e:e4:4e:fd:2b:5a:ef:c2:91:9f:3b:b1:9d:b2:
         18:70:52:ff:f6:fb:65:a7:04:ce:f0:fc:8a:00:c1:7a:b8:33:
         1c:e4:01:92:c1:20:9f:23:f2:3f:49:0a:e3:dc:22:2b:e5:56:
         fa:4e:d1:22:2e:61:ca:cc:32:ba:af:ff:ce:35:ad:00:07:38:
         d3:3d:cb:43:d7:0b:e1:51:fb:32:be:8c:e8:10:24:44:9b:73:
         34:7d:bd:8a:ec:7b:bf:7f:4e:ed:e6:27:8e:61:95:44:65:67:
         e6:44:74:33:ff:d4:06:1c:07:fe:e3:67:33:dc:3b:7f:f0:92:
         84:10:96:79:43:e1:42:f9:4f:87:e2:80:d5:38:1c:b1:d1:9d:
         ab:f5:17:44:5e:e7:d4:36:9b:50:95:96:24:d3:78:74:3c:2c:
         5f:04:ea:5c:e4:41:e9:33:7e:8b:40:76:cc:a7:0e:c7:ce:a7:
         0c:96:77:a9:97:e3:a2:39:d3:ef:14:07:98:1a:b0:9c:fe:00:
         93:1b:7e:c1:ce:e6:23:2a:cf:d8:5f:ae:64:c5:22:9e:99:36:
         11:63:4f:d5:e0:c6:5c:94:8b:6c:77:ed:40:f0:8e:58:97:45:
         b4:d1:bb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----