Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200957.roa
File:                     AS200957.roa (raw, json)
Hash identifier:          PK2C4XfWbncY2eJ0vLMQNo+h7/VnO8/kK/cM2dljNag=
Subject key identifier:   F9:36:76:6A:0A:86:FF:6B:1D:B4:B0:E5:86:46:FB:FE:2B:2B:A8:53
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4AE0E0DF0DB4A0B76A50F12105446BAB7A355D69
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200957.roa
Signing time:             Sun 05 Nov 2023 04:06:58 +0000
ROA not before:           Sun 05 Nov 2023 04:01:58 +0000
ROA not after:            Sun 03 Nov 2024 04:06:58 +0000
asID:                     200957
IP address blocks:        2a0a:6040:ef00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e0:e0:df:0d:b4:a0:b7:6a:50:f1:21:05:44:6b:ab:7a:35:5d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:01:58 2023 GMT
            Not After : Nov  3 04:06:58 2024 GMT
        Subject: CN=F936766A0A86FF6B1DB4B0E58646FBFE2B2BA853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:b0:e9:06:f7:a2:fa:44:7b:3c:eb:ed:4b:
                    db:0d:cc:1a:af:9e:26:00:fb:29:06:07:42:ec:8f:
                    1f:cf:ea:1c:ec:56:2d:25:a7:86:e5:2e:a8:90:34:
                    40:02:13:a3:a7:62:12:bb:fe:7a:6a:d7:b6:90:11:
                    ac:ad:9a:76:8d:15:c1:8c:25:71:f5:a8:1a:0d:61:
                    cf:39:9c:a5:d2:d6:22:85:c0:ba:e0:4b:71:ab:5c:
                    38:dc:1e:f8:e7:79:6a:4d:c4:b2:7d:1f:d6:c7:46:
                    58:15:96:b4:7c:ca:e1:8d:d0:4a:06:77:c7:2f:2c:
                    60:99:77:2a:a3:9e:1a:42:b8:4b:72:68:0d:f1:b2:
                    61:99:ff:ba:cf:a2:83:b9:9a:ff:7c:1b:b9:d7:ce:
                    91:4c:b7:be:f7:a3:25:4d:8b:b8:bc:0d:c1:86:42:
                    c4:18:d2:4e:5f:b4:70:f3:f5:78:0d:2d:5d:89:bf:
                    c4:1f:74:7d:87:77:f8:d2:b2:38:b2:de:6c:23:cc:
                    54:6c:7b:df:e5:6a:58:e0:6f:ec:92:dd:96:c6:94:
                    82:eb:d0:88:5f:e2:29:32:ef:dd:e1:df:04:b7:58:
                    e4:ac:ee:96:18:c0:d7:01:eb:35:53:9e:87:3b:cd:
                    2c:d7:de:87:3c:fa:36:0b:2d:99:d9:fb:23:c3:00:
                    e6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:36:76:6A:0A:86:FF:6B:1D:B4:B0:E5:86:46:FB:FE:2B:2B:A8:53
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200957.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ef00::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:de:44:5a:b5:17:ac:2c:c7:44:93:05:6f:8f:17:c3:30:1b:
         7b:ac:17:07:15:7b:12:35:56:ff:36:c3:13:70:f0:46:5a:23:
         3a:67:c0:a3:4c:e8:57:d1:aa:b2:c6:6f:4e:89:bd:30:18:c7:
         5e:39:85:6d:4b:12:ae:b6:44:fc:a6:15:ce:2f:d1:c8:f9:8b:
         1d:ea:97:46:d5:98:7b:85:bb:c7:79:9e:66:da:52:4e:e2:9e:
         b2:28:13:ad:8c:f4:d0:ca:91:96:7f:06:01:90:45:64:41:a3:
         32:19:36:d2:ae:02:4b:c1:db:44:07:5d:49:da:5f:fa:30:86:
         1f:e2:aa:b9:ef:d5:e7:11:b3:3c:97:a2:c4:49:ff:63:03:db:
         65:4c:69:70:fa:76:b9:ed:91:3a:f6:92:10:7c:c8:f2:3b:54:
         ae:45:09:8c:4c:d7:dc:71:7c:9a:ed:e2:45:33:de:56:c4:0c:
         8c:4d:90:9b:cd:fc:48:08:f5:f4:7b:c7:b7:58:6b:6d:d1:fa:
         2b:b2:7a:8e:83:a4:95:34:14:68:b5:e9:ed:49:49:ef:66:55:
         81:92:1b:ed:81:f8:89:ee:05:c8:84:55:4e:4a:b8:79:d3:8d:
         72:1a:f1:f6:ff:00:b6:67:bb:ad:d7:d4:a1:9a:7e:c0:ff:84:
         30:01:9e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----