Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199044.roa
File:                     AS199044.roa (raw, json)
Hash identifier:          N4vTQ88spvOa+/EhDIVszQWZKp8vOsy7yomGDB9PBXI=
Subject key identifier:   69:92:FA:AD:B3:3B:E6:24:43:18:60:5E:83:13:6D:16:C7:8A:29:11
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7AB23D5B7DE977E8C12B41D0164961634A562427
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199044.roa
Signing time:             Sun 12 May 2024 00:59:35 +0000
ROA not before:           Sun 12 May 2024 00:54:35 +0000
ROA not after:            Sun 11 May 2025 00:59:35 +0000
asID:                     199044
IP address blocks:        2a05:dfc1:5700::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 11:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b2:3d:5b:7d:e9:77:e8:c1:2b:41:d0:16:49:61:63:4a:56:24:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: May 12 00:54:35 2024 GMT
            Not After : May 11 00:59:35 2025 GMT
        Subject: CN=6992FAADB33BE6244318605E83136D16C78A2911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:85:29:3f:59:73:3c:d4:b6:57:86:b4:c1:
                    7c:a8:39:f3:8f:50:10:ce:10:03:03:6a:39:45:b8:
                    c7:93:fd:70:ce:16:f3:53:61:96:84:19:7d:b8:cd:
                    66:51:00:bc:1d:4c:0f:d5:5d:ec:10:03:e8:ad:ab:
                    e1:37:0d:61:70:a7:2a:3a:b1:07:fa:56:54:f2:3f:
                    46:5c:e3:21:e5:29:97:5b:8c:a1:65:ea:4b:47:b4:
                    0b:cf:72:97:8c:ce:a3:95:ad:8a:ab:b1:16:b0:40:
                    17:0f:05:d9:26:a5:3a:14:f3:ee:15:ae:12:73:3f:
                    7b:72:a0:21:17:eb:c9:a9:41:a4:3a:69:7f:b5:db:
                    8b:f4:e5:f5:6c:cf:30:a5:11:06:66:b5:6d:60:25:
                    e2:e3:07:1a:bf:52:af:4c:f6:f0:4e:3c:14:c0:5a:
                    73:f5:df:28:89:89:09:9c:83:84:79:f2:ef:8a:6a:
                    d0:dd:06:77:56:45:c7:47:09:68:34:ef:98:c2:ea:
                    02:34:82:5f:df:d6:d2:7d:7b:57:e4:99:c2:44:27:
                    4e:67:db:ea:ac:17:df:45:66:46:50:a3:7f:68:10:
                    36:a3:a2:20:67:f0:0b:88:cc:1a:2a:5b:d7:3c:f8:
                    f7:e4:86:00:c0:2d:28:4a:1d:13:d0:2b:81:37:ff:
                    49:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:92:FA:AD:B3:3B:E6:24:43:18:60:5E:83:13:6D:16:C7:8A:29:11
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199044.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5700::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:63:2c:12:01:f6:c6:74:09:0a:3f:db:5c:52:9d:d3:f4:3c:
         f0:06:c3:4d:ef:c4:cb:eb:f4:2a:15:4b:a0:49:61:35:3b:ec:
         89:68:f4:fa:1a:50:de:82:66:56:97:21:d1:04:b0:d5:b9:e2:
         b1:ed:fd:80:72:6c:5d:18:53:7f:37:86:16:40:aa:00:ba:5f:
         40:f6:18:e3:df:2d:d0:27:2d:85:7e:cf:32:e9:9d:f4:11:0c:
         14:82:a3:b4:ec:20:91:fc:a2:a4:17:a9:14:81:85:ad:cd:4b:
         4c:fe:4f:07:35:d0:46:87:7f:df:26:14:5b:23:21:ab:af:70:
         70:db:87:eb:c4:92:74:f5:72:7c:e5:17:ce:23:34:ad:ef:b7:
         00:02:1e:6e:e4:fe:65:35:b6:90:8d:05:b6:6b:17:fc:00:1d:
         4c:d7:fa:d0:84:9a:e7:45:fb:1b:58:e3:b1:81:c8:16:ca:94:
         a4:27:da:ea:7a:3d:e5:1f:9d:50:05:7d:92:0f:62:7f:de:dd:
         9a:5c:5a:93:c0:2a:d0:35:d8:b3:43:f3:17:47:f9:8b:6f:90:
         00:c4:f7:f0:6e:9f:0c:e8:00:b4:f5:15:b5:49:fa:85:84:38:
         9f:c3:aa:60:af:c6:0a:c7:8a:5f:5b:f1:ae:c3:30:e2:88:66:
         c3:0b:52:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 13:20:17 2024 by rpki-client on console-ams.rpki-client.org