Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS59678.roa
File:                     AS59678.roa (raw, json)
Hash identifier:          lfFdAGVpC9fwBwKSy5W4FC129kLs/LiPLzxFZiikS40=
Subject key identifier:   E6:EC:57:01:B3:46:6B:FB:67:1E:38:D4:DA:82:A2:94:E4:8E:3D:67
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       061C2A29758A03097BCE5DEB9B7BA69A1E5339D1
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS59678.roa
Signing time:             Thu 26 Jan 2023 12:45:50 +0000
ROA not before:           Thu 26 Jan 2023 12:40:50 +0000
ROA not after:            Thu 25 Jan 2024 12:45:50 +0000
asID:                     59678
IP address blocks:        2a0a:6040:4b00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1c:2a:29:75:8a:03:09:7b:ce:5d:eb:9b:7b:a6:9a:1e:53:39:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jan 26 12:40:50 2023 GMT
            Not After : Jan 25 12:45:50 2024 GMT
        Subject: CN=E6EC5701B3466BFB671E38D4DA82A294E48E3D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:ea:db:10:fa:b7:0f:b8:66:a0:e4:e9:43:
                    24:b2:b3:fd:53:38:19:6d:bc:b2:76:36:1e:c1:93:
                    8f:8d:56:70:9c:8f:56:0e:c5:e4:a1:9d:27:c9:4c:
                    20:4a:2a:6b:99:d9:c1:50:78:c9:d1:b9:b9:f5:af:
                    3d:e6:f6:90:f5:a1:22:de:32:16:10:8f:1a:c3:65:
                    88:6c:01:33:83:b2:fc:fe:24:88:4c:4b:53:99:bf:
                    13:48:3c:24:d9:3d:3c:7f:74:a4:b0:87:8e:c2:db:
                    11:e4:f3:cf:9d:16:43:51:a8:b7:6d:80:43:75:d6:
                    a0:52:88:59:06:e1:df:3d:7b:6b:02:84:e7:3d:95:
                    e1:79:18:c3:3a:b4:b7:35:d2:87:2d:13:55:c6:4e:
                    14:1f:8e:08:72:24:0c:df:bd:78:86:3c:5e:4d:fe:
                    bc:24:21:0a:65:b2:d6:68:d0:6c:6c:13:34:51:f2:
                    90:ae:0e:f3:76:b1:75:4d:53:7a:13:b0:83:29:3d:
                    bc:37:0e:09:69:f7:a9:60:a3:00:1e:a3:fe:0b:f9:
                    f5:f8:6a:2e:3c:eb:2f:c5:47:ed:d3:af:8e:f7:26:
                    d1:f7:b5:f2:44:86:7d:04:4e:1f:fb:01:dc:ed:f8:
                    ce:6c:cd:7d:62:1a:d7:2a:a9:bb:bd:d2:27:17:1d:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EC:57:01:B3:46:6B:FB:67:1E:38:D4:DA:82:A2:94:E4:8E:3D:67
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS59678.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:df:3d:08:d9:f7:6d:ca:f3:82:44:82:f9:1f:9f:66:d3:
         4b:7f:eb:8e:b8:76:4b:18:7b:86:6e:12:fe:37:2b:1c:42:f1:
         96:2a:23:bd:d0:10:03:0b:40:41:02:09:a2:16:55:69:af:2b:
         53:23:c5:5e:a8:b1:7f:10:91:73:71:34:de:37:52:7b:48:ac:
         b7:f4:1e:64:d5:9d:a9:34:12:42:6c:ec:a0:81:1f:6d:ee:07:
         91:42:e8:ec:1e:ed:b2:4b:3a:76:a2:ef:df:88:ca:3e:e7:ec:
         53:8b:e8:c3:54:bb:d7:76:9c:83:e5:02:b1:df:6e:58:53:cf:
         6e:40:ed:0b:ad:76:81:4d:9e:b9:47:29:b1:9c:c9:c4:ae:f9:
         1b:7f:e1:9b:09:e3:57:d2:af:11:80:5a:8b:ee:7d:24:68:31:
         7b:c3:6a:ec:b9:d9:4d:5f:44:83:b4:7b:93:6e:ef:65:a6:a5:
         a8:18:a2:70:f0:85:8b:fb:78:f3:8c:0f:98:ff:b1:26:e5:0d:
         be:f3:79:44:da:36:55:02:f2:1c:4e:60:97:bd:fc:ad:86:62:
         d1:7e:46:9f:d9:34:e6:da:5b:42:d4:20:c7:62:dc:91:dc:5c:
         01:54:68:90:e6:ea:2d:87:d4:9f:53:84:17:6f:71:6e:af:e4:
         80:69:5b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----