Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199656.roa
File:                     AS199656.roa (raw, json)
Hash identifier:          SfHO9nENVNsnvoTh6PDGCCOgeO0FFi9QhjCbENOZTDk=
Subject key identifier:   19:13:52:B7:ED:23:D7:BE:3B:91:C0:1B:D3:24:4D:4E:6A:BB:BE:92
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       424F5C9FD4BB94C71DA90A554D3067BC1FCA2000
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199656.roa
Signing time:             Tue 06 Jun 2023 02:44:49 +0000
ROA not before:           Tue 06 Jun 2023 02:39:49 +0000
ROA not after:            Tue 04 Jun 2024 02:44:49 +0000
asID:                     199656
IP address blocks:        2a05:dfc1:5000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sun 21 Jan 2024 23:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4f:5c:9f:d4:bb:94:c7:1d:a9:0a:55:4d:30:67:bc:1f:ca:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jun  6 02:39:49 2023 GMT
            Not After : Jun  4 02:44:49 2024 GMT
        Subject: CN=191352B7ED23D7BE3B91C01BD3244D4E6ABBBE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:ab:02:fd:96:84:de:97:d2:08:1a:e6:93:
                    77:35:5c:a5:34:6f:ac:43:b5:9a:7b:3c:7c:72:f4:
                    27:49:cd:5f:d6:09:82:7e:4a:a1:59:c9:2f:b7:f0:
                    5b:66:b3:5e:ee:8f:28:1c:fa:9c:82:2b:33:e0:b9:
                    1f:21:8d:00:a5:51:16:27:eb:2c:71:cc:8a:a1:1a:
                    7d:aa:e6:de:e3:5d:fc:e9:b2:05:c2:5b:96:38:1a:
                    a6:a6:87:4a:3e:bb:d4:46:dc:6e:37:e1:c0:b0:96:
                    bd:a2:b8:a3:a8:76:ad:b7:0b:6c:d3:20:34:33:32:
                    09:9c:aa:26:94:60:37:fa:5a:67:c8:ed:85:3b:c7:
                    15:df:1f:1d:e0:3f:be:a8:ab:a4:02:fa:03:1f:89:
                    30:77:35:95:de:26:80:2c:2c:44:b3:9a:97:32:d8:
                    b3:4b:ee:1c:c1:d5:97:8b:77:f8:2b:bb:0f:74:b9:
                    54:d9:25:1e:be:e5:16:33:9c:5e:3d:50:17:b2:db:
                    ba:15:20:f8:9e:b8:b3:06:e2:b4:b5:13:77:d4:56:
                    1b:fd:ac:b5:63:17:95:0a:7f:99:09:b4:d5:ab:0c:
                    3a:17:e8:6c:d0:3b:ea:63:4a:85:4e:b5:9f:dc:5f:
                    a8:e0:e8:49:f2:45:08:3a:a7:4d:49:3d:d5:20:46:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:13:52:B7:ED:23:D7:BE:3B:91:C0:1B:D3:24:4D:4E:6A:BB:BE:92
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199656.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:b0:51:47:18:05:ea:df:dc:31:bb:cd:a1:82:24:e0:fa:ae:
         4e:57:1c:11:0a:22:2b:d1:a1:ca:75:23:b8:5e:71:c5:29:f4:
         2a:63:45:f0:7d:05:1e:09:ce:e6:04:8f:37:10:8c:d6:dc:51:
         fd:23:f6:31:3f:05:37:0f:52:6f:33:61:81:81:1c:9a:91:0d:
         0f:e2:98:58:b9:cc:ed:b6:22:42:e0:51:ef:f0:d3:0d:69:0b:
         ec:6b:b1:fd:b8:6e:85:cb:bb:4f:91:0c:a2:50:fa:77:2f:82:
         60:c5:ae:a4:71:4a:4f:5d:31:a9:68:16:89:0a:e2:9f:60:d7:
         cf:3c:ce:ca:1f:6c:11:ca:33:f0:ec:4e:d6:f0:70:24:76:d5:
         b3:84:a2:0f:ed:66:35:2e:1f:e3:15:ea:75:91:3d:75:97:c4:
         8d:25:71:72:b5:12:48:e0:1b:bd:22:b9:e3:c2:57:ff:c2:d2:
         25:01:dc:b3:20:da:31:fa:e7:a2:66:fe:55:48:b5:05:bd:d9:
         18:d2:d5:dd:ae:b3:b1:29:a4:0b:66:14:de:85:b9:e1:d0:41:
         92:7c:6b:b7:a5:57:0b:00:ab:f7:55:c4:48:4d:ea:01:e7:44:
         6a:33:32:b4:c9:36:40:c7:8e:11:b1:1c:ad:b7:b0:f0:24:b3:
         b5:01:75:2a
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUQk9cn9S7lMcdqQpVTTBnvB/KIAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzA2MDYwMjM5NDlaFw0yNDA2MDQwMjQ0NDlaMDMxMTAvBgNV
BAMTKDE5MTM1MkI3RUQyM0Q3QkUzQjkxQzAxQkQzMjQ0RDRFNkFCQkJFOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOasC/ZaE3pfSCBrmk3c1XKU0
b6xDtZp7PHxy9CdJzV/WCYJ+SqFZyS+38Ftms17ujygc+pyCKzPguR8hjQClURYn
6yxxzIqhGn2q5t7jXfzpsgXCW5Y4Gqamh0o+u9RG3G434cCwlr2iuKOodq23C2zT
IDQzMgmcqiaUYDf6WmfI7YU7xxXfHx3gP76oq6QC+gMfiTB3NZXeJoAsLESzmpcy
2LNL7hzB1ZeLd/gruw90uVTZJR6+5RYznF49UBey27oVIPieuLMG4rS1E3fUVhv9
rLVjF5UKf5kJtNWrDDoX6GzQO+pjSoVOtZ/cX6jg6EnyRQg6p01JPdUgRkohAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUGRNSt+0j1747kcAb0yRNTmq7vpIwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMTk5NjU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwVAwDQYJKoZIhvcNAQELBQADggEBAI+w
UUcYBerf3DG7zaGCJOD6rk5XHBEKIivRocp1I7heccUp9CpjRfB9BR4JzuYEjzcQ
jNbcUf0j9jE/BTcPUm8zYYGBHJqRDQ/imFi5zO22IkLgUe/w0w1pC+xrsf24boXL
u0+RDKJQ+ncvgmDFrqRxSk9dMaloFokK4p9g1888zsofbBHKM/DsTtbwcCR21bOE
og/tZjUuH+MV6nWRPXWXxI0lcXK1EkjgG70iuePCV//C0iUB3LMg2jH656Jm/lVI
tQW92RjS1d2us7EppAtmFN6FueHQQZJ8a7elVwsAq/dVxEhN6gHnRGozMrTJNkDH
jhGxHK23sPAks7UBdSo=
-----END CERTIFICATE-----