Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199914.roa
File:                     AS199914.roa (raw, json)
Hash identifier:          nuUMOjeAegzZ+Vj52tikIncbcflqP/zxyjnB3OzYkeM=
Subject key identifier:   D5:41:08:1D:A7:4F:03:78:1B:CB:24:98:C2:13:05:BF:C7:8F:AF:C3
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       117787285C4DF19938108CE01396FE6E905677D9
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199914.roa
Signing time:             Sun 05 Nov 2023 04:07:01 +0000
ROA not before:           Sun 05 Nov 2023 04:02:01 +0000
ROA not after:            Sun 03 Nov 2024 04:07:01 +0000
asID:                     199914
IP address blocks:        2a0a:6040:5b00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 Nov 2023 09:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:77:87:28:5c:4d:f1:99:38:10:8c:e0:13:96:fe:6e:90:56:77:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:01 2023 GMT
            Not After : Nov  3 04:07:01 2024 GMT
        Subject: CN=D541081DA74F03781BCB2498C21305BFC78FAFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b0:18:d5:ca:50:49:c8:ff:ad:3d:9d:05:95:
                    d5:15:98:f0:f8:d0:37:d7:46:f7:b4:6c:2c:7a:db:
                    3f:33:d4:0d:60:ca:f0:d5:ed:05:96:ed:a6:f0:1b:
                    d2:45:05:e1:75:d5:2b:df:93:97:1d:cc:01:26:4f:
                    ab:16:8a:3e:59:0a:03:19:3e:82:82:98:73:21:b5:
                    67:ad:33:50:32:c5:98:85:9e:82:67:d5:9a:d6:e2:
                    1d:c8:e3:6e:8d:8d:5b:bc:f9:8f:85:4f:0a:4f:ba:
                    76:59:44:bb:30:5c:c4:67:60:24:66:10:0a:34:9e:
                    5d:11:9e:5d:24:81:39:e5:91:78:36:68:65:1b:cc:
                    cc:d5:81:3e:0b:b2:36:aa:6d:7f:8d:f1:4b:0b:eb:
                    d1:61:3a:d1:b9:89:31:02:2c:d3:d7:56:57:b6:55:
                    32:53:21:c4:15:34:5c:60:94:d5:b7:26:ca:12:d7:
                    96:db:06:65:a3:4f:37:57:2e:05:5a:d7:8f:a4:48:
                    ca:71:33:f1:e2:a3:8b:c3:18:33:1c:88:f6:4b:fb:
                    44:e7:41:d1:62:f5:2c:cc:0f:5a:ab:08:97:c1:22:
                    81:56:9a:12:66:0c:55:2c:32:ca:d7:27:23:ed:07:
                    e4:ad:80:de:ac:ab:28:c3:82:5d:f1:15:7d:4b:22:
                    4b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:41:08:1D:A7:4F:03:78:1B:CB:24:98:C2:13:05:BF:C7:8F:AF:C3
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199914.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:ce:0b:b6:fd:40:2e:68:30:bf:54:cb:35:80:21:f4:8c:42:
         cb:fc:a4:4b:cb:c8:70:cd:ed:d5:ae:99:e9:f3:b7:b5:7d:84:
         29:71:d6:f0:41:e7:54:5d:0e:f7:ba:c4:fe:7a:73:2b:f2:66:
         1e:9b:0f:ba:e1:51:2b:df:f7:d0:23:0a:b7:01:01:17:7e:57:
         4a:18:59:59:0f:23:65:d8:cc:c4:7b:47:ab:aa:ab:22:17:c3:
         d6:9a:aa:87:1e:0c:e3:fa:23:be:72:99:3a:b8:4d:57:af:56:
         cb:cb:d3:2e:06:bc:62:c5:86:ad:23:ef:91:91:af:b8:21:65:
         9a:c8:6b:9f:ec:ed:f8:72:a9:07:51:f5:c0:f5:56:e6:5e:a6:
         e6:ee:0a:79:9b:db:77:77:76:dd:4f:3b:86:b0:75:ea:25:17:
         21:a2:a2:38:2c:ab:35:24:80:f1:92:0a:b4:13:12:aa:a8:65:
         32:fe:4c:5c:5a:84:52:3f:c8:13:f8:5e:e5:fe:94:24:32:30:
         c5:2c:54:de:23:d7:07:c4:8c:40:7b:31:df:a4:60:e1:21:2c:
         7b:df:e5:38:1c:9b:01:bb:85:8e:23:e5:82:7f:44:dd:c9:6e:
         85:8b:35:68:93:88:a8:43:d0:c7:a1:62:e5:ee:c0:ef:75:34:
         f5:0c:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org