Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197736.roa
File:                     AS197736.roa (raw, json)
Hash identifier:          Wu2r3fZK5DgE5i2TkLGy+61BZSeWKKyt+XE0ORU+3m0=
Subject key identifier:   DE:C2:98:38:E0:0E:10:AC:CA:42:55:61:C6:EC:DA:FA:DC:DC:16:81
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       158878DD411690962EEBB2673CF7A0898797187E
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197736.roa
Signing time:             Tue 18 Jun 2024 13:00:13 +0000
ROA not before:           Tue 18 Jun 2024 12:55:13 +0000
ROA not after:            Tue 17 Jun 2025 13:00:13 +0000
asID:                     197736
IP address blocks:        2a05:dfc1:6c00::/40 maxlen: 48
Validation:               Failed, certificate revoked on Sat 27 Jul 2024 08:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:88:78:dd:41:16:90:96:2e:eb:b2:67:3c:f7:a0:89:87:97:18:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jun 18 12:55:13 2024 GMT
            Not After : Jun 17 13:00:13 2025 GMT
        Subject: CN=DEC29838E00E10ACCA425561C6ECDAFADCDC1681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:79:53:9b:57:74:90:f4:e5:de:e0:d1:78:
                    0c:25:61:49:5e:54:f6:7c:85:cc:1d:d7:44:3b:ae:
                    80:43:ba:93:6b:34:ec:30:d2:b3:cd:6a:9d:0b:06:
                    be:1d:46:c3:53:06:54:e7:65:d2:9b:f5:aa:41:a9:
                    61:88:ef:a6:e3:8f:b5:b5:c2:65:4d:dc:33:a9:2b:
                    8b:38:80:12:c1:ff:61:75:10:9f:31:00:d4:14:2b:
                    52:f1:1f:1f:89:50:8f:cc:79:e0:bc:94:90:c5:7d:
                    1c:c4:35:d9:d9:09:07:45:69:36:92:17:b5:84:f1:
                    61:3b:b2:db:0e:79:1a:7a:da:83:fa:b7:fd:8f:d0:
                    f8:a1:8a:ab:ec:9c:42:71:9e:0d:f4:f4:a4:17:b7:
                    8e:ab:66:e0:0d:77:0d:56:23:58:64:52:a5:96:d4:
                    61:50:29:bd:8e:ca:2a:6a:65:a2:e1:98:b0:4b:a4:
                    80:fe:4f:39:5e:ef:4b:39:17:0d:48:0f:42:76:c5:
                    6c:d6:cf:3b:16:12:dd:3d:9b:a7:fa:70:b4:aa:84:
                    c1:56:80:63:fb:b6:2c:43:de:b7:73:a5:e9:4d:38:
                    5d:9e:46:e2:f9:d3:2d:bb:d2:25:51:34:89:f3:ea:
                    bb:21:95:48:f9:2d:54:27:48:ca:e1:e6:e8:65:80:
                    73:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C2:98:38:E0:0E:10:AC:CA:42:55:61:C6:EC:DA:FA:DC:DC:16:81
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:3f:d8:e6:71:b2:c0:64:1d:30:24:f6:40:c8:c2:70:6b:
         7d:2d:db:f3:20:5d:d2:72:ca:02:80:54:6b:f3:be:30:54:15:
         64:98:40:63:52:03:29:29:ee:6a:b0:bb:80:80:c7:ea:61:6c:
         b3:5b:26:1e:48:a0:1d:38:c0:4e:fc:67:b3:4a:43:b4:13:2f:
         e5:6f:71:a4:3b:3f:34:54:19:be:6b:cd:3f:fb:9d:c0:45:a6:
         17:55:d4:d9:8e:6a:43:da:2a:50:b9:c1:58:77:34:34:4a:d7:
         b6:32:88:12:ec:34:ab:c8:17:37:a9:bc:24:00:b2:bb:e1:1e:
         51:10:d0:9d:f6:ff:1d:9b:ca:27:7e:d5:cc:81:b9:99:37:da:
         94:52:1e:a9:52:f9:82:72:bd:dd:2a:d8:fc:66:1b:2a:96:7c:
         dd:c2:fe:a9:2f:98:e9:0a:c2:55:dc:ea:ac:57:16:89:49:bc:
         61:9f:ae:fc:c3:72:80:c4:bb:45:bb:ab:27:7b:9c:d2:5e:f3:
         f4:fe:1d:d2:a6:e0:e3:64:f1:e2:76:2d:09:0e:43:8d:af:ec:
         03:52:55:a0:0b:bf:2e:bf:05:be:bc:28:68:49:5b:4e:7c:d2:
         2e:a3:eb:f3:e0:38:47:13:3f:ff:d7:8b:84:1d:b3:55:e3:03:
         7a:10:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:09 2025 by rpki-client