Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS151338.roa
File:                     AS151338.roa (raw, json)
Hash identifier:          yCaM371l0DUgvbKbNpE2rNl7QLhLGdps9G3Lc2fRLY4=
Subject key identifier:   C3:5F:9E:E0:34:D8:60:9C:2F:F0:9A:ED:37:12:89:75:CF:DF:2C:D7
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4EEAF1DFAF0A432DA45597C3239736E19776B372
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS151338.roa
Signing time:             Wed 05 Jun 2024 10:59:48 +0000
ROA not before:           Wed 05 Jun 2024 10:54:48 +0000
ROA not after:            Wed 04 Jun 2025 10:59:48 +0000
asID:                     151338
IP address blocks:        2a05:dfc1:6700::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 11:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ea:f1:df:af:0a:43:2d:a4:55:97:c3:23:97:36:e1:97:76:b3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jun  5 10:54:48 2024 GMT
            Not After : Jun  4 10:59:48 2025 GMT
        Subject: CN=C35F9EE034D8609C2FF09AED37128975CFDF2CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:22:6e:93:b3:e7:13:8b:c8:cf:18:38:1f:e8:
                    fe:80:4c:a7:e0:93:8d:84:10:db:69:0a:1e:3c:94:
                    15:03:4c:1e:44:ee:53:ff:3e:9a:6f:b6:2a:fc:e7:
                    17:c1:a6:04:64:68:48:45:a0:05:4f:b2:b1:3f:e5:
                    25:84:64:63:03:e4:b4:e6:47:48:30:02:57:fc:9c:
                    df:b2:d7:ea:c7:c3:26:e1:29:4c:11:2a:ec:15:91:
                    4d:78:9d:1d:78:f3:b4:7d:70:31:04:19:fc:ee:a1:
                    2e:73:17:2a:55:9a:e3:e6:f6:f1:d0:0a:3d:f9:0d:
                    d6:b2:cd:22:a0:73:98:50:ab:2a:2b:32:7c:6e:dd:
                    0e:8a:81:dd:1e:aa:d8:0a:c6:df:72:03:fb:50:98:
                    83:ea:d0:e1:eb:b8:a6:0a:c4:5d:1e:82:57:1b:e8:
                    b9:d1:5b:dc:36:7e:29:42:5e:82:16:9e:05:60:ab:
                    e0:55:55:89:89:f2:6d:03:73:78:40:3a:b5:ff:0f:
                    3e:40:df:8f:da:62:ee:3f:30:da:81:58:a4:76:b1:
                    3d:43:03:ab:f8:38:5d:c7:64:37:d8:b3:9c:75:34:
                    93:2d:3c:c5:14:f9:1f:96:a4:9a:1b:e9:3a:2a:f2:
                    62:c7:96:56:38:6a:24:41:c5:a5:f7:50:12:85:f3:
                    8d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5F:9E:E0:34:D8:60:9C:2F:F0:9A:ED:37:12:89:75:CF:DF:2C:D7
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS151338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6700::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:24:11:29:21:7f:30:7b:48:82:c0:6c:c1:50:3a:68:27:2b:
         5f:c8:81:66:63:43:b3:ca:34:be:f5:2f:be:a1:a7:b2:80:2b:
         b5:55:50:ab:4c:7e:1b:f3:c3:b2:93:3b:46:16:3a:60:a3:1c:
         12:5d:f0:f9:fd:44:f0:71:c1:c2:e0:a5:6f:35:b7:99:2c:e6:
         96:19:2a:1e:d6:30:fa:05:e3:bb:15:28:ac:f1:f5:d1:b2:08:
         db:d7:a5:70:74:93:9d:38:8c:c3:b8:02:78:cd:67:7d:74:a2:
         c0:1c:c5:8e:ba:6e:f7:08:ab:fd:df:d4:5d:98:90:ec:49:7d:
         c7:46:b9:02:e6:f9:e0:34:27:c1:e0:89:3d:38:28:bd:3e:57:
         17:e7:4b:db:57:78:d9:b1:83:e1:d2:74:de:fa:ee:da:f8:23:
         ef:11:cb:0a:9b:6d:af:fe:8f:1f:ca:b6:c0:fb:dd:06:f0:7f:
         8b:01:7e:cf:4c:35:b4:6d:66:f8:0a:23:e4:65:a4:31:f2:78:
         94:ad:24:31:13:f1:cd:3b:6b:56:78:bb:45:3a:29:a5:55:ad:
         b5:83:fe:46:ab:1b:82:3a:90:91:7d:07:cb:7c:b1:d5:24:42:
         92:0c:2f:75:3d:49:bf:b5:57:62:f0:64:ae:ec:f9:10:4f:25:
         83:24:a7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 14:00:08 2024 by rpki-client on console-fra.rpki-client.org