Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200227.roa
File:                     AS200227.roa (raw, json)
Hash identifier:          FFp+/hh3Vo0E4LRkPi9X3UnZ2H0JnVY6Y6W0YNv/eD4=
Subject key identifier:   0C:C5:D8:0E:38:61:21:48:88:89:C9:F4:D7:18:A0:B9:60:F1:01:4E
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       452F20D3305EF6CC1029907956891369790C3BFF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200227.roa
Signing time:             Wed 11 Jan 2023 08:09:56 +0000
ROA not before:           Wed 11 Jan 2023 08:04:56 +0000
ROA not after:            Wed 10 Jan 2024 08:09:56 +0000
asID:                     200227
IP address blocks:        2a0a:6040:5300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2f:20:d3:30:5e:f6:cc:10:29:90:79:56:89:13:69:79:0c:3b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jan 11 08:04:56 2023 GMT
            Not After : Jan 10 08:09:56 2024 GMT
        Subject: CN=0CC5D80E386121488889C9F4D718A0B960F1014E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:e2:84:d0:08:05:0d:9e:18:6c:6c:f3:98:
                    fe:25:29:a1:98:77:9c:ad:cf:55:55:c5:65:a1:2f:
                    de:1f:98:0d:1e:b9:3a:af:aa:d8:b7:9c:ab:f8:4e:
                    34:e7:13:e2:27:7d:08:5a:83:7c:b1:e8:39:00:44:
                    05:a3:16:5c:15:99:52:f6:c3:04:91:27:ad:54:29:
                    12:d6:05:2d:cb:10:0e:6d:1f:a4:f8:11:65:1e:0c:
                    b6:ed:cb:ff:0b:ad:3e:3d:7a:72:de:53:f4:29:ed:
                    19:11:d5:d3:81:d9:f7:65:5e:2e:1f:42:4c:22:07:
                    9a:f7:eb:a6:6d:87:85:99:0f:9d:44:26:57:d0:c2:
                    fb:d9:54:ad:a7:a7:0b:70:5c:53:a4:1b:47:f7:de:
                    cf:3f:82:23:84:77:7b:aa:09:fb:a9:9a:4a:82:a5:
                    ec:d5:80:e8:7d:b3:b7:a4:fd:14:e1:1b:88:b6:fb:
                    b4:2f:8c:fe:cd:e0:b4:46:93:29:71:f0:42:0d:89:
                    cb:e0:2c:a0:ec:fa:a6:4c:74:10:a1:af:aa:d3:44:
                    ea:ec:f1:84:c7:96:aa:8a:1b:c0:fc:a5:24:8a:e2:
                    d3:c2:43:d9:a8:51:d0:3d:11:47:52:c6:ec:d6:1a:
                    3e:2e:8c:a1:5c:56:63:3c:70:b1:a0:12:33:44:44:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C5:D8:0E:38:61:21:48:88:89:C9:F4:D7:18:A0:B9:60:F1:01:4E
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200227.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:38:fd:6f:19:54:88:38:c4:87:3b:83:6c:2d:3d:c3:27:b3:
         5b:3f:97:f5:27:41:28:67:54:ba:41:fa:b3:ac:6c:86:fd:d8:
         24:db:a7:d7:00:8e:84:ec:0a:16:88:af:24:35:3b:19:6f:99:
         58:f8:20:64:df:8d:5e:1e:0d:7b:ea:a2:7a:22:19:35:b3:5a:
         e4:59:1f:6e:77:56:fe:74:c5:72:29:89:87:62:6b:2b:26:6a:
         af:91:37:37:8a:ba:ba:a9:48:58:f2:94:9c:34:d2:53:e7:a0:
         e6:2a:e8:6b:0e:9a:13:2d:70:e9:84:ee:b1:9b:70:5c:b3:bf:
         a1:66:cc:eb:8f:a9:e0:b6:27:f2:b1:f4:59:ac:1f:74:b5:24:
         8a:30:f9:fe:93:a2:62:7d:41:0c:ed:ca:24:ab:c3:26:b9:8c:
         cc:ef:8d:1c:4e:bd:5a:6b:4a:68:cf:d2:95:49:e0:ad:d7:0f:
         45:3a:f6:6a:8f:4d:c6:c7:0d:8c:31:08:a6:bb:a8:f9:d2:13:
         36:07:ef:12:08:d5:64:92:a1:c9:14:be:ef:44:24:37:3a:1a:
         49:86:3e:2a:45:9e:36:51:ff:f5:42:1a:84:43:b6:06:fd:81:
         09:25:83:84:d4:d4:c3:c9:14:3f:e5:a3:e1:bc:76:c1:9e:63:
         d1:12:25:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----