Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199763.roa
File:                     AS199763.roa (raw, json)
Hash identifier:          J3TBnsgvnc9lona1bZb2K211Wt7bi118DuhAO8pznhM=
Subject key identifier:   C7:F8:26:AB:CC:63:3A:20:BB:E0:13:1E:C3:28:5E:34:62:BC:C5:7E
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       EF39192EA4A1FB76E9F3E5F138FDA8CD371207
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199763.roa
Signing time:             Wed 22 Feb 2023 09:24:08 +0000
ROA not before:           Wed 22 Feb 2023 09:19:08 +0000
ROA not after:            Wed 21 Feb 2024 09:24:08 +0000
asID:                     199763
IP address blocks:        2a0a:6040:5f00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ef:39:19:2e:a4:a1:fb:76:e9:f3:e5:f1:38:fd:a8:cd:37:12:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Feb 22 09:19:08 2023 GMT
            Not After : Feb 21 09:24:08 2024 GMT
        Subject: CN=C7F826ABCC633A20BBE0131EC3285E3462BCC57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:02:72:9a:c7:fd:1d:85:f1:e3:69:53:f0:
                    93:8a:f7:d2:a4:00:8d:e6:b4:c5:d2:7c:1a:c1:53:
                    5a:5b:b7:96:30:e2:4c:c9:b7:c5:24:49:cc:cc:c4:
                    0d:d7:9b:09:34:d6:9b:50:19:77:94:a8:f4:02:3f:
                    03:e9:12:32:cd:a4:aa:89:44:66:13:57:ab:cf:a8:
                    0e:f4:64:6b:a9:0d:51:6d:c6:60:87:f4:f8:ed:93:
                    bc:a2:9f:91:bd:50:51:be:6c:91:3f:a4:b4:0f:54:
                    6e:c8:87:36:4f:5a:a4:5d:9f:54:31:a2:07:90:01:
                    ce:e0:17:79:00:bb:39:14:90:dd:ab:20:17:e9:81:
                    c6:29:60:b9:c6:48:be:e0:58:b1:67:66:fd:2b:4c:
                    bc:2b:db:10:10:f1:50:cf:24:39:61:85:0f:01:d2:
                    a7:7c:3d:25:2c:91:0b:50:3a:43:51:3c:89:c4:18:
                    e7:4a:19:08:9f:35:93:2c:6a:5c:32:20:11:9d:89:
                    94:46:18:14:7b:43:19:0c:23:9f:af:7e:7f:b6:d7:
                    e6:f2:1d:7a:5b:0a:ef:1c:c6:07:76:4e:04:58:e5:
                    76:5a:c2:86:9f:6f:1e:38:4d:56:76:41:70:ac:11:
                    8e:c2:f9:53:55:fd:68:2e:10:a2:bf:8b:0e:86:f8:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F8:26:AB:CC:63:3A:20:BB:E0:13:1E:C3:28:5E:34:62:BC:C5:7E
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199763.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:64:92:ed:11:7a:b2:f2:9e:cd:71:c2:42:6a:19:1b:ce:
         77:7b:6e:2e:9c:1a:30:8b:5e:eb:ca:65:6f:a9:de:ee:82:37:
         d6:dd:39:12:62:b4:8b:60:df:2c:93:94:4c:5b:aa:72:55:90:
         b4:1d:68:e2:2d:72:7b:b5:aa:f5:d5:bd:fc:42:0f:2c:c5:d0:
         fb:88:bc:98:18:e7:76:2b:50:51:3c:c3:d2:2d:bb:01:81:83:
         f7:9c:16:0c:2d:1d:72:18:26:07:27:e1:9b:b6:4f:19:84:39:
         f8:d8:5d:06:4b:fa:45:cb:cb:a3:bb:fc:ce:57:20:b8:9b:90:
         e5:85:65:d6:82:d9:3b:2e:58:01:b1:ae:a9:29:d3:a5:86:dd:
         a3:57:6d:af:63:55:c0:a1:ef:24:d9:3f:17:d0:1e:d0:3f:8e:
         d0:df:9b:c6:f4:e0:cd:d6:cf:7d:8e:58:04:e9:7e:1f:da:ec:
         4a:b3:f3:65:cd:1f:ed:e8:d1:04:57:8e:dc:b5:57:38:64:d1:
         37:af:a7:ac:03:c6:9a:2c:2c:a3:e7:03:7f:0f:3a:bd:75:68:
         0f:f9:45:36:77:b4:dc:d6:1c:8c:83:ac:aa:a8:83:53:f4:b4:
         7c:28:bc:5b:e8:d0:b2:f7:1d:66:6c:98:45:38:ae:d8:a2:be:
         ee:3a:ec:6b
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUAO85GS6koft26fPl8Tj9qM03EgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzAyMjIwOTE5MDhaFw0yNDAyMjEwOTI0MDhaMDMxMTAvBgNV
BAMTKEM3RjgyNkFCQ0M2MzNBMjBCQkUwMTMxRUMzMjg1RTM0NjJCQ0M1N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPpAJymsf9HYXx42lT8JOK99Kk
AI3mtMXSfBrBU1pbt5Yw4kzJt8UkSczMxA3Xmwk01ptQGXeUqPQCPwPpEjLNpKqJ
RGYTV6vPqA70ZGupDVFtxmCH9Pjtk7yin5G9UFG+bJE/pLQPVG7IhzZPWqRdn1Qx
ogeQAc7gF3kAuzkUkN2rIBfpgcYpYLnGSL7gWLFnZv0rTLwr2xAQ8VDPJDlhhQ8B
0qd8PSUskQtQOkNRPInEGOdKGQifNZMsalwyIBGdiZRGGBR7QxkMI5+vfn+21+by
HXpbCu8cxgd2TgRY5XZawoafbx44TVZ2QXCsEY7C+VNV/WguEKK/iw6G+PxnAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUx/gmq8xjOiC74BMewyheNGK8xX4wHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMTk5NzYzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQF8wDQYJKoZIhvcNAQELBQADggEBAJPW
ZJLtEXqy8p7NccJCahkbznd7bi6cGjCLXuvKZW+p3u6CN9bdORJitItg3yyTlExb
qnJVkLQdaOItcnu1qvXVvfxCDyzF0PuIvJgY53YrUFE8w9ItuwGBg/ecFgwtHXIY
Jgcn4Zu2TxmEOfjYXQZL+kXLy6O7/M5XILibkOWFZdaC2TsuWAGxrqkp06WG3aNX
ba9jVcCh7yTZPxfQHtA/jtDfm8b04M3Wz32OWATpfh/a7Eqz82XNH+3o0QRXjty1
Vzhk0Tevp6wDxposLKPnA38POr11aA/5RTZ3tNzWHIyDrKqog1P0tHwovFvo0LL3
HWZsmEU4rtiivu467Gs=
-----END CERTIFICATE-----