Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666130303a3a2f34302d3438203d3e20323031353031.roa
File:                     326130613a363034303a666130303a3a2f34302d3438203d3e20323031353031.roa (raw, json)
Hash identifier:          Tjp2X2pQKu58G9nPi+rdlWBZLJ1EaNInkMT4UzhX1pg=
Subject key identifier:   BD:14:74:29:8C:53:B4:85:F2:D1:78:0B:78:AB:B2:F7:75:0E:02:20
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       38BC68726685D011FBAD98001D6DBBA26057A42B
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666130303a3a2f34302d3438203d3e20323031353031.roa
Signing time:             Fri 09 Dec 2022 08:20:59 +0000
ROA not before:           Fri 09 Dec 2022 08:15:59 +0000
ROA not after:            Fri 08 Dec 2023 08:20:59 +0000
asID:                     201501
IP address blocks:        2a0a:6040:fa00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bc:68:72:66:85:d0:11:fb:ad:98:00:1d:6d:bb:a2:60:57:a4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:59 2022 GMT
            Not After : Dec  8 08:20:59 2023 GMT
        Subject: CN=BD1474298C53B485F2D1780B78ABB2F7750E0220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:57:b9:d2:e3:51:ce:82:bd:17:0c:13:38:
                    2a:08:d2:8a:fa:dd:a3:43:d4:ef:5d:f4:a5:ac:9b:
                    b8:b6:d6:53:72:ec:f3:18:c2:e9:7b:ee:81:1f:2c:
                    da:44:ff:5e:03:f6:da:c7:81:2a:31:07:b9:05:14:
                    a0:8d:f0:32:f5:28:f2:33:57:57:14:a4:bf:5d:07:
                    98:50:14:6b:e8:ac:7c:59:ab:22:7f:57:22:8f:1a:
                    35:d1:6a:72:4d:9d:73:32:eb:6e:41:99:69:29:73:
                    79:8c:eb:49:e9:ef:9e:89:75:4f:11:e9:58:30:2c:
                    2f:c8:21:7a:b9:6d:0b:bf:76:b5:c2:6e:28:e6:6e:
                    d9:35:c1:79:f4:74:d6:8b:ae:cc:92:3c:2b:e6:78:
                    b8:bf:46:4e:82:f5:af:cb:86:45:01:dc:68:dd:ae:
                    18:52:8e:18:d4:2b:97:a8:2a:b0:14:b1:07:04:3a:
                    b1:ac:4c:82:b8:8a:54:26:ec:14:7d:87:7f:81:e1:
                    ff:4d:23:6d:80:75:cf:2f:f4:00:8d:5f:e2:8b:12:
                    59:24:38:8c:3a:64:b6:80:59:c9:f1:ee:ca:92:86:
                    c5:0a:3c:88:99:14:71:a4:b7:58:cd:58:15:2e:d1:
                    2c:23:35:12:09:ff:86:bb:2e:c9:99:b7:18:0a:fb:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:14:74:29:8C:53:B4:85:F2:D1:78:0B:78:AB:B2:F7:75:0E:02:20
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666130303a3a2f34302d3438203d3e20323031353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:67:76:ce:64:f7:3d:c5:1c:24:a3:d0:e4:f5:03:eb:ad:54:
         d2:6d:e7:98:3f:32:b5:0b:a7:d3:9a:a6:4d:3a:4d:6e:86:1d:
         fb:9f:b9:3d:1a:72:41:e5:0e:0e:0c:f9:f3:40:3f:1c:92:de:
         28:6a:e5:ce:7c:b1:40:7f:af:61:76:19:64:19:3d:0e:3b:22:
         c6:96:b9:5d:26:ab:20:2b:c7:1c:6a:87:89:37:f2:30:c2:eb:
         9a:a7:78:f7:dc:ed:2d:eb:ca:73:ff:bc:c2:1e:63:1c:cf:53:
         48:57:fa:a8:8e:9e:c6:de:79:3e:30:0c:a7:66:98:d3:86:96:
         96:99:6f:10:20:86:82:ce:b4:bd:fd:a3:e4:0c:c8:8b:02:fc:
         db:ac:a6:d3:fa:b7:41:1b:37:dc:84:3d:9e:24:45:da:71:2d:
         04:41:31:a3:80:86:74:36:82:7c:1f:bb:27:6b:81:b3:ff:4c:
         73:0b:e6:7a:09:5d:02:42:fc:f2:60:39:fc:e5:65:ae:c6:a6:
         69:26:d1:4b:77:9d:55:e7:d1:76:8e:c7:68:bd:a9:6b:9c:ed:
         4e:5f:44:6d:ca:ed:46:6c:75:0c:f8:d2:16:98:4d:92:c7:66:
         ef:1b:51:d7:c4:49:5d:06:3b:19:a7:ce:5e:56:7a:8a:1c:3a:
         aa:c3:01:fb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUOLxocmaF0BH7rZgAHW27omBXpCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMDkwODE1NTlaFw0yMzEyMDgwODIwNTlaMDMxMTAvBgNV
BAMTKEJEMTQ3NDI5OEM1M0I0ODVGMkQxNzgwQjc4QUJCMkY3NzUwRTAyMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHsle50uNRzoK9FwwTOCoI0or6
3aND1O9d9KWsm7i21lNy7PMYwul77oEfLNpE/14D9trHgSoxB7kFFKCN8DL1KPIz
V1cUpL9dB5hQFGvorHxZqyJ/VyKPGjXRanJNnXMy625BmWkpc3mM60np756JdU8R
6VgwLC/IIXq5bQu/drXCbijmbtk1wXn0dNaLrsySPCvmeLi/Rk6C9a/LhkUB3Gjd
rhhSjhjUK5eoKrAUsQcEOrGsTIK4ilQm7BR9h3+B4f9NI22Adc8v9ACNX+KLElkk
OIw6ZLaAWcnx7sqShsUKPIiZFHGkt1jNWBUu0SwjNRIJ/4a7LsmZtxgK+wVzAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUvRR0KYxTtIXy0XgLeKuy93UOAiAwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2NjYx
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMTM1MzAzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYED6MA0GCSqGSIb3DQEBCwUAA4IBAQCrZ3bOZPc9xRwko9Dk9QPrrVTS
beeYPzK1C6fTmqZNOk1uhh37n7k9GnJB5Q4ODPnzQD8ckt4oauXOfLFAf69hdhlk
GT0OOyLGlrldJqsgK8ccaoeJN/Iwwuuap3j33O0t68pz/7zCHmMcz1NIV/qojp7G
3nk+MAynZpjThpaWmW8QIIaCzrS9/aPkDMiLAvzbrKbT+rdBGzfchD2eJEXacS0E
QTGjgIZ0NoJ8H7sna4Gz/0xzC+Z6CV0CQvzyYDn85WWuxqZpJtFLd51V59F2jsdo
valrnO1OX0Rtyu1GbHUM+NIWmE2Sx2bvG1HXxEldBjsZp85eVnqKHDqqwwH7
-----END CERTIFICATE-----