Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203635.roa
File:                     AS203635.roa (raw, json)
Hash identifier:          CiWUga0Ljnj6QSnZqTplHkP+//3IqyCQ++an20BBxY8=
Subject key identifier:   CD:06:20:4F:DD:52:12:44:FE:E1:0C:07:E7:2D:6C:21:6C:E4:50:22
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7AFC596142B44932902E297ECB1749469323B195
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203635.roa
Signing time:             Tue 27 Dec 2022 14:57:01 +0000
ROA not before:           Tue 27 Dec 2022 14:52:01 +0000
ROA not after:            Tue 26 Dec 2023 14:57:01 +0000
asID:                     203635
IP address blocks:        2a0a:6040::/40 maxlen: 48
                          2a0a:6040:b000::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fc:59:61:42:b4:49:32:90:2e:29:7e:cb:17:49:46:93:23:b1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 27 14:52:01 2022 GMT
            Not After : Dec 26 14:57:01 2023 GMT
        Subject: CN=CD06204FDD521244FEE10C07E72D6C216CE45022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:6b:b5:37:00:4b:64:53:ef:31:0c:e6:84:
                    81:1f:d7:1b:7a:bb:ed:85:54:00:bd:09:45:04:d7:
                    4f:b8:85:36:6a:53:f5:5b:3c:63:d5:2f:ce:37:4c:
                    92:3a:aa:cf:56:e8:92:ab:34:22:4a:d9:8a:fd:2c:
                    1a:13:96:e6:02:d6:41:aa:47:df:ea:3a:17:25:97:
                    a3:ab:4e:bd:52:67:87:78:38:7f:9b:9b:94:d8:2a:
                    44:58:ff:5f:e8:01:c9:74:2c:cf:e6:61:fb:90:36:
                    a3:92:d8:46:14:37:f0:f7:77:de:49:02:50:d2:7b:
                    e2:9e:46:24:7c:b4:f5:59:41:d0:1d:a0:ce:54:2e:
                    d6:1b:70:f8:24:d0:8c:69:ab:00:ec:e4:0d:ae:95:
                    00:fd:1e:dd:d3:38:90:d2:5a:76:c2:4f:fa:03:8a:
                    46:b1:79:16:53:9a:6c:d2:d8:98:19:91:9d:d3:7f:
                    0e:de:7f:00:e9:d8:4a:20:41:4c:d4:86:1e:bc:ba:
                    11:18:e3:f6:51:38:18:da:6c:7a:18:e0:74:fc:26:
                    b5:5d:ca:eb:ae:c3:4b:da:c8:43:2d:1d:76:5d:4c:
                    53:35:88:c3:64:d6:94:a5:4c:b8:32:81:b5:cd:79:
                    f2:82:2e:7f:8a:f1:62:81:d3:23:2f:24:2d:56:5e:
                    bd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:06:20:4F:DD:52:12:44:FE:E1:0C:07:E7:2D:6C:21:6C:E4:50:22
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:04:c6:0d:b1:f4:4a:2d:74:ea:43:e1:ec:79:a6:ab:3e:
         d1:00:e8:d2:6a:1b:e8:06:cd:e5:3c:c2:32:d2:44:29:d6:a2:
         31:70:0b:9a:1a:46:07:ec:c5:b6:d0:70:a3:48:0e:c1:4b:fa:
         cd:ee:23:fc:93:55:2b:65:b0:26:94:5d:84:74:a9:c7:ca:5c:
         f3:0c:06:c1:46:97:2f:a6:9e:63:59:60:65:38:49:6f:16:3c:
         01:e7:20:a2:9b:b2:80:02:8c:3a:5a:f1:16:6f:f4:a5:38:64:
         c6:c2:e4:52:c0:e1:b9:07:29:3b:d3:01:61:5e:79:f4:34:8c:
         6b:fa:67:8e:2e:a7:c4:95:fc:02:64:24:c1:ce:bc:55:a4:59:
         6d:1f:b8:78:89:fb:9b:50:95:8e:2c:0a:86:97:7f:5c:57:09:
         e1:25:c5:db:c2:11:69:be:11:94:80:fc:56:b6:17:45:8c:35:
         9e:13:c8:67:8b:b0:bd:0b:d9:2b:90:58:f4:85:01:60:08:fb:
         7c:87:5f:15:16:c9:7a:f6:5b:a2:19:02:a4:d2:35:fd:53:40:
         14:d7:05:36:e8:63:0c:ad:74:a1:79:22:98:a0:b4:0a:a5:59:
         9e:82:1b:12:9f:84:89:73:1b:73:c1:d5:a2:5d:2e:3f:47:50:
         27:eb:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----