Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199518.roa
File:                     AS199518.roa (raw, json)
Hash identifier:          tufQd2Brg8wHAr0NNg5KbxPiz10XhZp54TtYxxH1Zjk=
Subject key identifier:   43:72:8E:2A:1D:EA:C4:15:1F:11:D8:29:D7:E3:79:7C:9C:A5:64:9A
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       3CEF33D0B2FC6BB53624CB7F1D7F4AD4C4D4DE33
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199518.roa
Signing time:             Fri 10 Mar 2023 09:45:53 +0000
ROA not before:           Fri 10 Mar 2023 09:40:53 +0000
ROA not after:            Fri 08 Mar 2024 09:45:53 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ef:33:d0:b2:fc:6b:b5:36:24:cb:7f:1d:7f:4a:d4:c4:d4:de:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Mar 10 09:40:53 2023 GMT
            Not After : Mar  8 09:45:53 2024 GMT
        Subject: CN=43728E2A1DEAC4151F11D829D7E3797C9CA5649A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:2a:a8:81:0e:fb:5b:f9:46:d1:26:6b:21:
                    0e:89:e9:5f:2e:90:ef:b1:ec:9f:74:2e:dc:d3:cf:
                    30:88:63:6f:49:7d:44:03:1f:08:f1:ea:90:b9:97:
                    4f:39:65:b1:aa:ef:ba:38:5f:29:ae:43:99:f4:f8:
                    88:53:f3:06:05:34:79:b6:ba:a3:48:ba:f5:65:e1:
                    e1:27:7b:f7:07:2f:53:a7:4b:ff:de:14:19:87:40:
                    8b:bf:48:98:70:a1:44:4c:19:50:50:63:23:3b:1e:
                    94:d7:50:79:0d:89:f8:43:ba:1b:c9:d7:65:6b:3b:
                    26:c8:25:d1:91:c3:e3:93:54:e2:b9:fb:90:8e:a7:
                    62:a2:63:53:db:44:82:fe:02:14:5d:78:fd:da:f0:
                    6f:7d:80:85:63:12:e1:f2:84:90:c7:f3:9b:e1:4d:
                    71:85:d2:c2:22:ea:a3:3a:78:29:67:b0:8b:e0:b8:
                    43:2d:5f:84:c1:27:52:1f:3d:0b:fd:02:15:f5:f5:
                    74:ca:e7:ba:36:37:18:0a:e6:09:c1:f0:9c:66:96:
                    5e:e4:29:0b:01:76:8a:3c:f8:8c:f6:6c:ae:c9:64:
                    35:50:6c:73:41:ad:97:fb:f9:16:b2:4c:0f:d2:6c:
                    c5:52:d6:e7:9e:49:68:b4:8f:9a:24:25:6d:d9:a0:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:72:8E:2A:1D:EA:C4:15:1F:11:D8:29:D7:E3:79:7C:9C:A5:64:9A
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199518.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:d1:01:97:63:42:d4:19:0d:6a:17:da:18:44:e5:68:cd:aa:
         1b:da:ec:2e:42:60:d8:33:fe:12:ec:31:d5:d9:89:f6:36:a8:
         de:df:a6:70:24:63:76:a6:0e:d3:1d:1e:fa:05:f2:27:e2:a9:
         90:da:b0:c9:29:4b:16:20:5c:08:91:07:87:7b:ba:ac:7e:27:
         87:92:07:2e:92:7d:0a:90:ca:6e:f9:f3:48:14:8e:7d:82:4f:
         b7:23:67:40:8c:1a:9a:9b:b9:71:a8:99:34:08:65:c6:2b:34:
         70:e7:70:20:b4:0b:82:b8:eb:5f:be:2c:84:c7:ca:4f:81:41:
         89:c0:d1:b9:fc:7c:25:3c:1f:74:da:93:c8:9b:01:ef:b9:e3:
         e9:8f:2d:9f:f3:e8:6f:34:14:f0:af:2f:7c:27:58:6c:47:73:
         ff:9e:19:9f:a1:75:26:42:87:52:55:5f:58:32:44:70:11:d6:
         82:80:94:92:88:83:84:7a:41:d9:ac:34:44:11:67:3a:47:c0:
         76:90:4f:1a:6c:30:af:60:51:4f:33:3e:c7:bf:35:49:2d:52:
         41:d5:85:62:ff:3b:64:e1:ea:8e:e4:d0:bb:36:f5:b6:0f:6c:
         35:86:37:ac:67:92:42:a8:16:40:21:e1:10:a5:cf:f2:8c:51:
         99:2f:18:49
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUPO8z0LL8a7U2JMt/HX9K1MTU3jMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzAzMTAwOTQwNTNaFw0yNDAzMDgwOTQ1NTNaMDMxMTAvBgNV
BAMTKDQzNzI4RTJBMURFQUM0MTUxRjExRDgyOUQ3RTM3OTdDOUNBNTY0OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjyqogQ77W/lG0SZrIQ6J6V8u
kO+x7J90LtzTzzCIY29JfUQDHwjx6pC5l085ZbGq77o4XymuQ5n0+IhT8wYFNHm2
uqNIuvVl4eEne/cHL1OnS//eFBmHQIu/SJhwoURMGVBQYyM7HpTXUHkNifhDuhvJ
12VrOybIJdGRw+OTVOK5+5COp2KiY1PbRIL+AhRdeP3a8G99gIVjEuHyhJDH85vh
TXGF0sIi6qM6eClnsIvguEMtX4TBJ1IfPQv9AhX19XTK57o2NxgK5gnB8Jxmll7k
KQsBdoo8+Iz2bK7JZDVQbHNBrZf7+RayTA/SbMVS1ueeSWi0j5okJW3ZoLKNAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUQ3KOKh3qxBUfEdgp1+N5fJylZJowHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMTk5NTE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQLowDQYJKoZIhvcNAQELBQADggEBAHLR
AZdjQtQZDWoX2hhE5WjNqhva7C5CYNgz/hLsMdXZifY2qN7fpnAkY3amDtMdHvoF
8ifiqZDasMkpSxYgXAiRB4d7uqx+J4eSBy6SfQqQym7580gUjn2CT7cjZ0CMGpqb
uXGomTQIZcYrNHDncCC0C4K461++LITHyk+BQYnA0bn8fCU8H3Tak8ibAe+54+mP
LZ/z6G80FPCvL3wnWGxHc/+eGZ+hdSZCh1JVX1gyRHAR1oKAlJKIg4R6QdmsNEQR
ZzpHwHaQTxpsMK9gUU8zPse/NUktUkHVhWL/O2Th6o7k0Ls29bYPbDWGN6xnkkKo
FkAh4RClz/KMUZkvGEk=
-----END CERTIFICATE-----