Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666330303a3a2f34302d3438203d3e20323033383733.roa
File:                     326130613a363034303a666330303a3a2f34302d3438203d3e20323033383733.roa (raw, json)
Hash identifier:          ZPsrn5fPDmqFAK74GQkr6yDJ7+IBcNBatiTTdJydgM8=
Subject key identifier:   D8:61:EB:8C:E0:92:D8:4B:82:46:9F:1B:89:3A:C0:65:CF:BB:45:23
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       702C6062CD3CB9C702CFEE0B891481C4628A5F16
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666330303a3a2f34302d3438203d3e20323033383733.roa
Signing time:             Fri 09 Dec 2022 08:21:00 +0000
ROA not before:           Fri 09 Dec 2022 08:16:00 +0000
ROA not after:            Fri 08 Dec 2023 08:21:00 +0000
asID:                     203873
IP address blocks:        2a0a:6040:fc00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2c:60:62:cd:3c:b9:c7:02:cf:ee:0b:89:14:81:c4:62:8a:5f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:00 2022 GMT
            Not After : Dec  8 08:21:00 2023 GMT
        Subject: CN=D861EB8CE092D84B82469F1B893AC065CFBB4523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:1c:c6:b1:f1:6a:a2:6b:1c:fe:6f:76:42:
                    70:b3:83:31:27:42:02:49:e0:c8:d1:50:08:71:6b:
                    d3:88:eb:b7:c3:e9:f4:2b:db:d6:89:2b:e9:7e:d4:
                    e0:0f:11:a4:73:c5:c6:1c:25:37:9c:4e:40:bf:31:
                    97:17:de:fb:1f:fe:b4:7c:61:a6:ed:f8:bc:d3:04:
                    d7:da:db:fa:3f:ea:c1:bb:5c:c2:fe:e0:5c:6d:ff:
                    e8:4e:8a:96:74:d3:31:4a:89:10:25:91:10:7b:20:
                    c2:50:80:8e:35:ab:d9:83:c2:06:77:04:a1:f4:84:
                    9d:1a:0a:c4:7c:a4:12:e5:b6:84:96:53:b5:68:93:
                    f3:35:34:42:5a:6b:ac:f9:f8:4c:1a:34:4b:22:72:
                    b4:d9:0d:4a:e4:3b:45:25:f2:e5:63:f7:6d:c9:fc:
                    7c:30:b3:8c:c8:c4:38:ed:ae:f8:07:63:5f:54:a3:
                    db:b0:29:85:a1:b8:bf:4f:05:7a:5d:06:30:72:b1:
                    71:9c:f2:8b:b2:54:0b:e8:3c:7d:8d:e5:f2:6c:7c:
                    07:df:bc:ff:58:d7:f6:99:06:e0:95:ca:f9:ce:09:
                    23:a1:a4:be:fb:de:7f:b0:42:a2:63:58:dc:04:d3:
                    72:f1:ca:2f:8d:c3:49:22:48:16:79:c6:76:d3:90:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:61:EB:8C:E0:92:D8:4B:82:46:9F:1B:89:3A:C0:65:CF:BB:45:23
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666330303a3a2f34302d3438203d3e20323033383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:f6:34:04:81:22:b0:93:18:57:d7:40:4c:80:55:57:05:83:
         d9:cb:83:e3:88:2d:1f:d0:45:df:d2:93:4f:52:85:85:f5:e2:
         e3:fc:56:ab:78:81:b7:4d:32:07:db:4d:9b:27:ec:f6:85:c0:
         2a:12:52:1a:07:fe:97:28:da:f3:79:df:65:5c:1d:f4:09:0d:
         5c:60:87:36:c7:c0:a1:67:fd:01:9f:e2:70:e3:48:85:e8:f5:
         be:01:e1:5a:a1:e5:43:96:3b:fa:9a:ba:ad:d0:00:a8:ad:71:
         f8:d4:fb:47:b5:12:09:60:ca:1f:33:2e:4d:e4:25:42:94:91:
         42:69:cd:78:64:80:92:39:00:99:89:ad:6d:8f:af:46:49:16:
         0b:bf:5c:e4:82:98:7c:3d:09:52:0b:dc:08:db:7e:cd:c0:4d:
         ed:15:d8:a8:0e:0f:54:ee:4f:41:65:29:5d:51:d4:ea:3e:c1:
         2f:3f:39:eb:d4:29:9a:81:05:71:cb:af:4a:17:42:d9:cf:a8:
         73:23:38:de:64:81:e6:89:f5:3a:10:b3:2d:9c:9a:45:c4:c0:
         8b:4c:d1:23:27:da:22:dc:17:fb:1b:46:61:0e:d8:11:3c:03:
         3f:b7:a1:5b:77:d7:03:6e:80:a8:b4:21:95:d2:5b:7a:70:6b:
         f4:7a:bd:84
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUcCxgYs08uccCz+4LiRSBxGKKXxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMDkwODE2MDBaFw0yMzEyMDgwODIxMDBaMDMxMTAvBgNV
BAMTKEQ4NjFFQjhDRTA5MkQ4NEI4MjQ2OUYxQjg5M0FDMDY1Q0ZCQjQ1MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdRzGsfFqomsc/m92QnCzgzEn
QgJJ4MjRUAhxa9OI67fD6fQr29aJK+l+1OAPEaRzxcYcJTecTkC/MZcX3vsf/rR8
Yabt+LzTBNfa2/o/6sG7XML+4Fxt/+hOipZ00zFKiRAlkRB7IMJQgI41q9mDwgZ3
BKH0hJ0aCsR8pBLltoSWU7Vok/M1NEJaa6z5+EwaNEsicrTZDUrkO0Ul8uVj923J
/Hwws4zIxDjtrvgHY19Uo9uwKYWhuL9PBXpdBjBysXGc8ouyVAvoPH2N5fJsfAff
vP9Y1/aZBuCVyvnOCSOhpL773n+wQqJjWNwE03Lxyi+Nw0kiSBZ5xnbTkIcRAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQU2GHrjOCS2EuCRp8biTrAZc+7RSMwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2NjYz
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMzM4MzczMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYED8MA0GCSqGSIb3DQEBCwUAA4IBAQBh9jQEgSKwkxhX10BMgFVXBYPZ
y4PjiC0f0EXf0pNPUoWF9eLj/FareIG3TTIH202bJ+z2hcAqElIaB/6XKNrzed9l
XB30CQ1cYIc2x8ChZ/0Bn+Jw40iF6PW+AeFaoeVDljv6mrqt0ACorXH41PtHtRIJ
YMofMy5N5CVClJFCac14ZICSOQCZia1tj69GSRYLv1zkgph8PQlSC9wI237NwE3t
FdioDg9U7k9BZSldUdTqPsEvPznr1CmagQVxy69KF0LZz6hzIzjeZIHmifU6ELMt
nJpFxMCLTNEjJ9oi3Bf7G0ZhDtgRPAM/t6Fbd9cDboCotCGV0lt6cGv0er2E
-----END CERTIFICATE-----