Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199257.roa
File:                     AS199257.roa (raw, json)
Hash identifier:          UcjgliGFSRJcmvHbuIrdxV1h3jzaoFHhDFSuNBgbwX4=
Subject key identifier:   2F:89:EA:95:47:3C:9C:0C:5D:E7:F3:7F:1E:29:CD:2C:12:A4:DD:34
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       494BBBE4791393D1F4B40C2AA4086A49FAE248D2
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199257.roa
Signing time:             Sun 05 Nov 2023 04:07:04 +0000
ROA not before:           Sun 05 Nov 2023 04:02:04 +0000
ROA not after:            Sun 03 Nov 2024 04:07:04 +0000
asID:                     199257
IP address blocks:        2a0a:6040:9200::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4b:bb:e4:79:13:93:d1:f4:b4:0c:2a:a4:08:6a:49:fa:e2:48:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:04 2023 GMT
            Not After : Nov  3 04:07:04 2024 GMT
        Subject: CN=2F89EA95473C9C0C5DE7F37F1E29CD2C12A4DD34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:a3:95:a1:64:7b:9a:44:70:9c:fd:4c:17:
                    3c:71:04:f3:dd:85:3c:76:28:52:2d:dd:58:9f:22:
                    09:41:ac:48:65:69:18:3d:e6:61:72:72:83:4a:07:
                    42:12:43:d0:e0:96:96:d3:fe:b6:aa:f5:c5:a2:51:
                    01:2e:70:81:00:78:c1:1f:44:bd:4b:8b:67:00:03:
                    3b:7d:1f:fc:63:9d:72:17:aa:80:8c:0b:6c:de:01:
                    f4:47:96:a4:2c:a1:58:7c:03:ee:06:2d:54:92:86:
                    83:53:c1:5e:f1:67:b4:9e:ed:dc:68:20:56:07:3f:
                    2e:46:74:d2:25:11:9f:25:f6:0b:10:61:ac:4c:89:
                    c2:a0:0d:da:7a:db:44:7b:f3:ba:9b:32:62:d2:c2:
                    66:db:88:2f:9c:da:db:fe:88:32:7a:df:9a:41:32:
                    6a:5a:9d:3b:31:33:bc:02:e8:33:85:63:a5:99:41:
                    eb:73:dd:aa:03:2e:8b:75:36:b7:bc:ae:f4:f6:00:
                    e6:11:f9:5b:17:47:65:56:6e:66:65:9f:e3:c2:54:
                    15:1d:bc:4c:bc:b4:e4:6d:59:d7:f1:b8:00:c9:ad:
                    b4:30:b9:09:17:a0:5c:e7:9c:3b:7d:78:81:d2:8e:
                    0f:b4:1e:a1:8b:78:36:8a:d0:01:d4:a0:d9:5f:92:
                    05:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:89:EA:95:47:3C:9C:0C:5D:E7:F3:7F:1E:29:CD:2C:12:A4:DD:34
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:25:26:ba:59:a4:04:5f:96:9b:92:a0:72:a6:ba:12:ee:dd:
         40:34:f9:c7:e9:05:9d:4d:f5:d6:14:6c:1f:76:ec:10:20:b7:
         00:94:2d:6b:26:a7:a8:79:9f:8b:38:b5:14:2e:73:91:ec:a8:
         4c:66:95:44:f3:6d:41:ec:d0:07:0f:ee:48:ec:8e:13:06:6f:
         49:67:ad:3c:78:8f:44:01:49:db:ff:b6:3b:cd:77:ff:14:bd:
         ef:89:b8:92:92:c5:47:45:b7:ae:78:a4:67:26:90:08:15:5f:
         34:57:64:7a:52:47:ca:31:3b:d9:9c:7b:5a:e6:28:8f:57:c7:
         cf:a2:61:6b:8c:1e:32:40:1e:36:43:20:c2:8f:3f:cf:77:04:
         e2:e1:82:80:74:b7:ed:70:b1:21:6d:1f:ef:dd:c6:68:d6:c0:
         80:26:97:9b:63:49:75:12:60:92:5f:21:fc:7d:85:e2:78:e0:
         7a:56:e8:b4:e8:58:ba:4b:47:86:01:e2:f2:ed:98:03:c9:41:
         9d:72:49:58:eb:b4:44:e9:80:94:fb:81:86:ee:69:a5:2f:5c:
         00:a3:73:8b:91:ba:d4:0e:5f:e9:b2:b6:44:39:e3:e6:3c:d0:
         93:f8:60:f5:4d:c1:72:40:37:99:84:25:b6:70:25:bd:4b:dd:
         ea:a1:1b:1a
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUSUu75HkTk9H0tAwqpAhqSfriSNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDRaFw0yNDExMDMwNDA3MDRaMDMxMTAvBgNV
BAMTKDJGODlFQTk1NDczQzlDMEM1REU3RjM3RjFFMjlDRDJDMTJBNEREMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0x6OVoWR7mkRwnP1MFzxxBPPd
hTx2KFIt3VifIglBrEhlaRg95mFycoNKB0ISQ9DglpbT/raq9cWiUQEucIEAeMEf
RL1Li2cAAzt9H/xjnXIXqoCMC2zeAfRHlqQsoVh8A+4GLVSShoNTwV7xZ7Se7dxo
IFYHPy5GdNIlEZ8l9gsQYaxMicKgDdp620R787qbMmLSwmbbiC+c2tv+iDJ635pB
MmpanTsxM7wC6DOFY6WZQetz3aoDLot1Nre8rvT2AOYR+VsXR2VWbmZln+PCVBUd
vEy8tORtWdfxuADJrbQwuQkXoFznnDt9eIHSjg+0HqGLeDaK0AHUoNlfkgUVAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUL4nqlUc8nAxd5/N/HinNLBKk3TQwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMTk5MjU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQJIwDQYJKoZIhvcNAQELBQADggEBAJQl
JrpZpARflpuSoHKmuhLu3UA0+cfpBZ1N9dYUbB927BAgtwCULWsmp6h5n4s4tRQu
c5HsqExmlUTzbUHs0AcP7kjsjhMGb0lnrTx4j0QBSdv/tjvNd/8Uve+JuJKSxUdF
t654pGcmkAgVXzRXZHpSR8oxO9mce1rmKI9Xx8+iYWuMHjJAHjZDIMKPP893BOLh
goB0t+1wsSFtH+/dxmjWwIAml5tjSXUSYJJfIfx9heJ44HpW6LToWLpLR4YB4vLt
mAPJQZ1ySVjrtETpgJT7gYbuaaUvXACjc4uRutQOX+mytkQ54+Y80JP4YPVNwXJA
N5mEJbZwJb1L3eqhGxo=
-----END CERTIFICATE-----
Generated at Tue Nov 14 09:52:38 2023 by rpki-client on console-ams.rpki-client.org