Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666130303a3a2f34302d3438203d3e20333936393938.roa
File:                     326130613a363034303a666130303a3a2f34302d3438203d3e20333936393938.roa (raw, json)
Hash identifier:          9iDlhWtRYZ9pdXFjxQ1wdd+Jpx7kfXg79LNzIMF/1iA=
Subject key identifier:   E0:48:C3:A8:38:A6:6E:81:A8:33:CE:57:6F:E9:7A:0D:EA:0F:81:A0
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7CEB68775534C71CD9B9E2FC54A249CF965E4AED
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666130303a3a2f34302d3438203d3e20333936393938.roa
Signing time:             Sat 17 Dec 2022 09:50:32 +0000
ROA not before:           Sat 17 Dec 2022 09:45:32 +0000
ROA not after:            Sat 16 Dec 2023 09:50:32 +0000
asID:                     396998
IP address blocks:        2a0a:6040:fa00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:eb:68:77:55:34:c7:1c:d9:b9:e2:fc:54:a2:49:cf:96:5e:4a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 17 09:45:32 2022 GMT
            Not After : Dec 16 09:50:32 2023 GMT
        Subject: CN=E048C3A838A66E81A833CE576FE97A0DEA0F81A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:ca:27:8a:27:33:ed:e8:4b:5c:cb:08:f9:
                    33:77:8e:e5:ef:52:cb:77:3d:62:4d:bd:f9:f8:bc:
                    ab:9e:84:db:4b:fe:d0:7c:fb:4d:2c:7a:4a:31:13:
                    7d:13:e3:7c:87:17:d9:cf:c5:95:b1:6e:73:77:8c:
                    8f:d4:85:76:57:0b:68:7e:8d:c4:a6:1b:90:68:1d:
                    9c:fb:04:d4:7e:8d:3b:85:41:3a:3b:66:80:09:92:
                    f1:c2:4a:1b:d0:99:cf:b4:97:c1:eb:39:23:ab:77:
                    3e:25:61:01:75:59:14:c2:1d:5b:39:84:e7:38:87:
                    75:d8:11:9e:c5:52:c2:0c:85:d8:fe:aa:dc:41:37:
                    9a:f3:c3:63:a5:04:c4:8d:ba:16:63:d8:3f:f2:68:
                    72:5d:e7:59:e8:7a:e9:c2:21:69:cc:95:54:43:e1:
                    b1:b1:32:df:78:f4:ad:c8:a8:d1:e4:29:65:52:3c:
                    77:17:d5:ee:50:b6:48:ed:cc:6f:ad:2f:d1:c1:e6:
                    f7:8c:30:7c:f6:da:e3:cb:18:e6:16:b7:62:82:9f:
                    24:d7:95:bc:21:55:c8:5e:87:5a:71:f1:73:fe:3f:
                    b9:e0:da:ed:fc:1e:79:3d:53:4d:70:82:16:b5:00:
                    18:a8:1d:4c:ef:13:d4:9c:a8:a6:f6:81:29:cb:90:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:48:C3:A8:38:A6:6E:81:A8:33:CE:57:6F:E9:7A:0D:EA:0F:81:A0
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666130303a3a2f34302d3438203d3e20333936393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:11:bd:61:f8:38:6c:f6:bf:d3:dc:10:8f:31:43:33:b1:89:
         9a:1e:08:cb:29:60:bd:1a:3f:13:bc:44:5c:6f:f6:81:1f:50:
         18:26:1b:35:76:f0:83:fb:7b:95:21:00:a2:6b:b0:82:41:bf:
         be:76:df:5f:ba:4c:d0:9d:33:fb:79:53:99:3f:3c:09:21:2a:
         15:08:2e:68:92:c4:cf:ba:bc:a8:87:4f:08:c7:c1:7f:b5:77:
         a8:3e:45:24:ba:d1:ec:af:33:4d:42:dc:29:4e:09:20:64:96:
         cd:9b:0f:0c:f7:37:8e:06:28:d5:1c:74:00:6c:af:77:f8:d3:
         48:0a:d6:f4:b1:8e:c5:3d:fe:57:ce:92:90:91:87:f2:e1:80:
         b6:6a:08:3d:03:d0:27:69:09:ed:bd:16:e0:73:5d:a3:df:24:
         25:0e:70:c3:b5:c9:eb:65:bc:07:38:fe:4e:df:1c:d5:6d:99:
         50:ba:7e:e4:19:4a:fb:5b:88:9c:5b:0a:07:a1:ff:fe:b5:09:
         79:fd:ca:87:4d:11:d1:84:5d:d7:ce:a2:7f:2d:f0:32:8d:3f:
         90:fd:6f:20:a0:a5:96:09:35:35:15:43:b2:6d:db:f2:74:a0:
         73:09:a9:05:46:57:1d:dd:7d:67:8a:9e:05:be:59:6d:08:0d:
         22:fc:fe:60
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUfOtod1U0xxzZueL8VKJJz5ZeSu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMTcwOTQ1MzJaFw0yMzEyMTYwOTUwMzJaMDMxMTAvBgNV
BAMTKEUwNDhDM0E4MzhBNjZFODFBODMzQ0U1NzZGRTk3QTBERUEwRjgxQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHsoniicz7ehLXMsI+TN3juXv
Ust3PWJNvfn4vKuehNtL/tB8+00sekoxE30T43yHF9nPxZWxbnN3jI/UhXZXC2h+
jcSmG5BoHZz7BNR+jTuFQTo7ZoAJkvHCShvQmc+0l8HrOSOrdz4lYQF1WRTCHVs5
hOc4h3XYEZ7FUsIMhdj+qtxBN5rzw2OlBMSNuhZj2D/yaHJd51noeunCIWnMlVRD
4bGxMt949K3IqNHkKWVSPHcX1e5QtkjtzG+tL9HB5veMMHz22uPLGOYWt2KCnyTX
lbwhVcheh1px8XP+P7ng2u38Hnk9U01wgha1ABioHUzvE9ScqKb2gSnLkI2vAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQU4EjDqDimboGoM85Xb+l6DeoPgaAwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2NjYx
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMzMzkzNjM5MzkzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYED6MA0GCSqGSIb3DQEBCwUAA4IBAQATEb1h+Dhs9r/T3BCPMUMzsYma
HgjLKWC9Gj8TvERcb/aBH1AYJhs1dvCD+3uVIQCia7CCQb++dt9fukzQnTP7eVOZ
PzwJISoVCC5oksTPuryoh08Ix8F/tXeoPkUkutHsrzNNQtwpTgkgZJbNmw8M9zeO
BijVHHQAbK93+NNICtb0sY7FPf5XzpKQkYfy4YC2agg9A9AnaQntvRbgc12j3yQl
DnDDtcnrZbwHOP5O3xzVbZlQun7kGUr7W4icWwoHof/+tQl5/cqHTRHRhF3XzqJ/
LfAyjT+Q/W8goKWWCTU1FUOybdvydKBzCakFRlcd3X1nip4FvlltCA0i/P5g
-----END CERTIFICATE-----