Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202218.roa
File:                     AS202218.roa (raw, json)
Hash identifier:          Nf37TYQYXbLd8WRAP299RxZ9W5fve3dPh2Oipkyd52A=
Subject key identifier:   3E:FA:08:C5:EB:9F:E9:87:6A:5D:D5:96:1F:A3:70:78:F9:35:9A:B7
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       258815A1D01F422F2790560F0CE76860399F135D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202218.roa
Signing time:             Sun 05 Nov 2023 04:07:04 +0000
ROA not before:           Sun 05 Nov 2023 04:02:04 +0000
ROA not after:            Sun 03 Nov 2024 04:07:04 +0000
asID:                     202218
IP address blocks:        2a0a:6040:ff00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:88:15:a1:d0:1f:42:2f:27:90:56:0f:0c:e7:68:60:39:9f:13:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:04 2023 GMT
            Not After : Nov  3 04:07:04 2024 GMT
        Subject: CN=3EFA08C5EB9FE9876A5DD5961FA37078F9359AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:b3:43:13:90:52:ed:9f:42:e4:a2:cd:a4:
                    25:a5:6d:3f:9e:4b:3b:df:fd:b5:42:b2:02:c5:e7:
                    1f:ef:a3:28:64:bc:d7:75:a5:f2:1c:4e:65:4a:2b:
                    aa:5a:2b:36:bc:b9:b9:2b:18:69:57:81:b3:8b:67:
                    98:be:b6:bf:c4:2d:a1:2a:3c:cf:7a:88:77:67:19:
                    60:47:dd:28:82:bc:6a:12:b8:c3:2a:13:93:ea:2f:
                    88:3b:a3:32:26:54:58:a1:e0:e0:33:98:e9:73:ac:
                    b5:0b:10:88:68:fb:2c:eb:1b:07:72:1d:01:77:14:
                    7a:4c:4e:e4:a3:87:9b:68:68:e6:56:57:80:9b:20:
                    41:06:b9:ab:90:c6:86:6a:7f:3b:c3:dc:f0:30:62:
                    12:7b:60:10:24:f8:54:3f:8a:43:ca:2f:5a:1f:5c:
                    1b:c9:ac:e0:05:dc:9b:be:01:60:35:1a:3f:23:79:
                    68:4d:1d:73:0f:a4:cb:79:9a:01:67:52:53:71:2d:
                    a2:13:1f:e4:49:66:f5:a3:cc:c4:5c:85:9f:a7:23:
                    7d:8f:3d:97:31:e8:1d:f3:18:02:b9:06:99:a0:6a:
                    4e:17:92:d8:30:fb:52:ee:3f:f7:55:aa:a2:38:71:
                    1c:03:d2:47:43:cb:2b:e4:ee:bc:64:99:05:d5:c6:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FA:08:C5:EB:9F:E9:87:6A:5D:D5:96:1F:A3:70:78:F9:35:9A:B7
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202218.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:1a:c9:3b:b0:89:ca:7d:78:3b:10:4b:f8:99:2e:fc:89:c8:
         dd:0a:f3:f6:fc:58:ff:41:83:2b:37:db:8b:69:63:7e:6b:01:
         1c:7f:62:34:e5:b7:25:0a:ba:d2:9a:ad:b6:ea:fc:d4:42:2e:
         f1:19:50:83:cb:aa:eb:4b:62:b3:b3:5b:ca:81:5f:ec:31:c8:
         87:49:f0:4c:29:82:f9:e3:00:af:79:70:ac:b8:d0:d5:71:9e:
         e0:15:0e:fa:f2:60:a8:ed:38:cf:1b:8a:1e:08:4b:12:53:f8:
         28:ca:d0:63:6e:b5:29:3e:62:66:fe:b4:80:79:ac:03:5d:a6:
         f5:3b:89:01:5d:97:e1:ef:6b:67:15:3b:1f:68:63:68:22:27:
         fe:b8:a3:d6:57:5d:2b:be:21:5b:1b:26:00:eb:20:0d:3f:25:
         d9:91:1b:24:69:14:df:64:ed:22:55:cd:57:2b:17:ab:e6:28:
         59:45:52:45:5c:a5:44:61:a7:53:d5:83:7f:d3:35:fd:c0:7f:
         f2:39:b7:9e:fb:b4:87:26:a5:c0:67:4c:b0:d5:43:04:7f:eb:
         7e:4d:35:0c:3c:db:22:29:54:3d:7d:3d:cd:ce:ff:c9:28:13:
         44:f1:97:2c:b1:8c:1f:e1:e4:f3:69:d6:ba:69:d2:74:3e:09:
         b8:15:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----