Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666230303a3a2f34302d3438203d3e20323030353739.roa
File:                     326130613a363034303a666230303a3a2f34302d3438203d3e20323030353739.roa (raw, json)
Hash identifier:          ZlXT+i/B+69pYgpkjQg2KD0oExYDGjsbTD8VDECdbmM=
Subject key identifier:   78:89:EA:EE:DB:B8:4B:59:68:89:C8:53:50:2E:DA:36:EB:D1:33:8C
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       52537432ACCD9182CBE69758AA26FA4CA3E1CCAF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666230303a3a2f34302d3438203d3e20323030353739.roa
Signing time:             Tue 13 Dec 2022 12:58:57 +0000
ROA not before:           Tue 13 Dec 2022 12:53:57 +0000
ROA not after:            Tue 12 Dec 2023 12:58:57 +0000
asID:                     200579
IP address blocks:        2a0a:6040:fb00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:53:74:32:ac:cd:91:82:cb:e6:97:58:aa:26:fa:4c:a3:e1:cc:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 13 12:53:57 2022 GMT
            Not After : Dec 12 12:58:57 2023 GMT
        Subject: CN=7889EAEEDBB84B596889C853502EDA36EBD1338C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:12:89:92:12:79:c8:04:9b:49:b3:dd:71:
                    56:ec:ee:59:00:2a:e2:c2:1c:d5:d8:98:da:20:9b:
                    48:db:c6:5d:ed:7b:ee:fa:da:16:9f:33:c2:83:ab:
                    4b:34:24:17:a6:84:87:da:0f:f7:ae:6e:9a:6d:3d:
                    f6:e4:19:a2:37:7d:63:1f:65:f8:0e:d3:3e:7d:fd:
                    63:49:a6:7f:a3:c3:4c:43:7b:f0:2f:ed:f1:1e:3d:
                    34:87:86:53:24:32:42:eb:f9:68:d2:c1:84:a7:1c:
                    c6:34:fc:fb:be:eb:14:80:d7:ad:01:ce:46:bc:6b:
                    e8:34:79:44:8d:cf:3d:f7:a4:c5:86:6f:3d:33:bc:
                    fa:b0:f4:e9:f5:d2:85:17:a8:f1:1e:8c:68:9c:ad:
                    a4:76:f1:b6:85:db:cf:cb:e3:d7:b4:91:65:62:1f:
                    b4:a5:40:0e:64:b8:e5:8e:c2:ed:c3:a6:6d:ff:91:
                    32:d0:9f:39:3d:50:e4:20:ce:25:36:59:52:ea:4d:
                    bb:e7:4e:f4:40:91:2a:99:d2:5c:26:ed:ce:b0:18:
                    63:44:04:f9:0b:eb:c6:e3:ab:9c:6c:40:f2:93:ef:
                    d1:2e:ee:5b:18:65:65:42:38:a8:6e:86:c9:7e:4f:
                    6b:72:22:1e:bc:b1:64:14:34:df:ad:8c:c1:95:3d:
                    ab:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:89:EA:EE:DB:B8:4B:59:68:89:C8:53:50:2E:DA:36:EB:D1:33:8C
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666230303a3a2f34302d3438203d3e20323030353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:91:21:3b:d3:b2:9b:ce:2e:2a:cb:04:14:6b:22:56:e8:
         ce:87:cc:9d:b5:27:dc:32:20:f9:02:6c:39:ce:54:1d:44:87:
         68:00:a0:dd:bb:de:85:a0:4a:3e:8d:ac:e2:84:39:0b:b8:8c:
         5c:35:f6:55:8e:dc:7a:21:d5:c1:bc:8c:f0:d4:b4:9f:cc:71:
         0d:eb:f6:31:0a:f3:de:d7:c6:98:ef:5d:0c:b8:d0:cd:e5:af:
         b9:a9:64:ee:9e:0b:29:5f:fe:0c:0b:bb:f3:e1:a5:59:01:e9:
         fb:4a:80:11:a2:c6:ec:ab:b0:79:44:39:0b:f8:f0:c3:f9:df:
         45:27:99:05:87:84:cd:0f:ee:4f:cd:80:95:c5:db:0d:cc:3d:
         cc:e8:9d:a4:73:12:76:42:db:ca:52:f5:c7:16:74:af:1b:8d:
         0b:13:03:6f:08:2a:52:88:5c:8b:59:bd:7b:c5:a3:1c:a6:99:
         d5:a4:7f:2e:59:7b:3d:64:ee:4d:25:a8:77:39:e3:2b:81:45:
         07:b6:7e:52:a4:a5:05:ed:60:aa:93:70:28:90:ae:63:93:2a:
         cd:76:21:f0:ee:5a:46:33:09:4b:b3:51:3a:3e:66:10:92:f9:
         47:91:a7:04:0f:1f:24:06:03:31:c2:32:37:d2:a7:c8:55:6b:
         4f:f9:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----