Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666430303a3a2f34302d3438203d3e20323031353137.roa
File:                     326130613a363034303a666430303a3a2f34302d3438203d3e20323031353137.roa (raw, json)
Hash identifier:          rHSrk6GXo9SX2hJHMc6JvkfQzU/P7Vg5nHZDrQ+YJK8=
Subject key identifier:   B4:FB:CD:0C:DA:7F:7B:BE:F4:72:11:A8:4E:D6:65:79:33:F8:4E:13
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5E4CF83FFE0A5AE9C46DB7F07623150AB1A42451
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666430303a3a2f34302d3438203d3e20323031353137.roa
Signing time:             Fri 09 Dec 2022 08:20:58 +0000
ROA not before:           Fri 09 Dec 2022 08:15:58 +0000
ROA not after:            Fri 08 Dec 2023 08:20:58 +0000
asID:                     201517
IP address blocks:        2a0a:6040:fd00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4c:f8:3f:fe:0a:5a:e9:c4:6d:b7:f0:76:23:15:0a:b1:a4:24:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:58 2022 GMT
            Not After : Dec  8 08:20:58 2023 GMT
        Subject: CN=B4FBCD0CDA7F7BBEF47211A84ED6657933F84E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:e7:63:c8:9d:d3:10:23:92:c0:47:e8:25:
                    6c:fa:38:24:fa:bd:9f:28:61:e7:6b:3f:40:b4:d1:
                    9a:e1:7c:e6:5d:14:23:a4:63:ab:b4:b5:e1:ad:f0:
                    97:bb:98:aa:66:2e:53:ee:40:37:c0:1c:37:36:32:
                    86:7b:86:4e:c0:f9:2b:d0:0d:da:09:12:f8:6d:2d:
                    80:03:41:24:d4:33:75:45:c4:0a:02:d3:ef:6e:71:
                    9e:a5:e3:e0:3f:22:ec:39:2e:ef:ab:6a:04:36:cb:
                    f7:51:8c:38:4c:5a:37:a5:5a:85:6b:4c:49:41:46:
                    53:53:2e:e6:89:8c:3b:bd:a5:fd:80:a9:93:be:2d:
                    70:8e:4a:21:0d:59:fe:4f:e3:90:6e:7b:da:98:09:
                    20:42:60:31:7e:8a:46:68:0b:9f:97:69:af:62:14:
                    7d:36:c1:fd:1e:5d:d3:d4:21:04:1a:40:05:11:d2:
                    20:58:03:8f:a8:e9:d0:6c:d1:71:73:94:de:e7:41:
                    53:c4:8a:d0:ce:be:62:07:fc:9f:8c:01:88:d0:91:
                    87:6f:a0:5c:af:41:97:2a:15:39:b2:bf:1e:be:e2:
                    6b:f2:c9:60:ba:4f:99:79:cf:b8:ed:f8:99:4b:cf:
                    dd:bc:07:08:bc:a3:9e:3b:85:7f:fe:ff:7c:0c:8c:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FB:CD:0C:DA:7F:7B:BE:F4:72:11:A8:4E:D6:65:79:33:F8:4E:13
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666430303a3a2f34302d3438203d3e20323031353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:ff:5a:b1:fc:57:05:21:6b:ce:41:df:71:a8:cf:09:a7:4b:
         ea:b0:2d:55:8a:ae:7a:b5:62:c4:0f:0e:df:97:09:ac:6e:d5:
         bd:f3:e2:8c:7c:c3:a7:bd:66:3f:f7:b3:4f:b2:ca:5b:ec:7c:
         d0:d1:c5:4a:92:4f:a3:d2:0f:38:56:a7:81:c9:89:93:32:fd:
         b5:17:87:e4:a6:10:89:71:55:24:59:3a:af:ac:82:93:3a:e1:
         f2:4b:7f:2d:b4:e6:d8:06:4c:11:92:b3:47:f8:95:43:af:af:
         e6:4e:d8:63:2b:78:d7:01:43:a4:0c:c6:43:c4:a4:f2:26:3f:
         24:40:3b:ad:3c:8e:5c:1f:5f:dd:b2:58:13:db:e4:73:d3:95:
         51:7b:a7:51:9e:20:5e:d7:74:11:7f:b2:2b:43:d6:40:cc:c5:
         d1:b8:da:e5:de:e0:cc:80:82:50:d0:88:74:c7:eb:bd:df:15:
         8b:24:51:7a:40:03:65:69:9a:99:62:37:4f:8a:6b:60:5b:89:
         5a:90:19:74:f3:16:df:5c:a3:db:4b:8f:bf:9a:d9:df:97:18:
         d9:9c:94:65:cf:1d:fc:d5:3b:57:38:3e:df:e0:d2:3d:5b:71:
         cd:ee:75:e0:04:72:2d:51:c3:62:ad:50:24:01:94:a0:56:a8:
         18:bb:e4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----