Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206271.roa
File:                     AS206271.roa (raw, json)
Hash identifier:          ntsjJzgruYCgTwX9cesSaWHeKItD4/rSM19DL3figzY=
Subject key identifier:   9F:83:FD:9C:BD:C1:34:F4:06:6A:0B:A4:8A:8C:38:E5:7E:1F:1C:3D
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       25A37D2A8FAA7C12DA190871E540013A14AFA2FC
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206271.roa
Signing time:             Sun 05 Nov 2023 04:07:13 +0000
ROA not before:           Sun 05 Nov 2023 04:02:13 +0000
ROA not after:            Sun 03 Nov 2024 04:07:13 +0000
asID:                     206271
IP address blocks:        2a0a:6040:ef00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Wed 06 Dec 2023 23:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a3:7d:2a:8f:aa:7c:12:da:19:08:71:e5:40:01:3a:14:af:a2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:13 2023 GMT
            Not After : Nov  3 04:07:13 2024 GMT
        Subject: CN=9F83FD9CBDC134F4066A0BA48A8C38E57E1F1C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:6a:8d:8e:6a:a2:55:89:af:cc:fc:e7:f3:
                    0e:ff:d2:5c:b3:2d:f9:23:c4:10:51:30:8d:21:68:
                    9d:f7:03:56:55:c5:2b:4c:43:3c:3e:63:54:b6:1e:
                    3e:6a:ec:b7:0a:69:6c:0c:00:ed:00:78:9f:c1:3e:
                    02:b4:a7:1c:04:9d:b4:0b:b5:38:9c:21:8b:53:60:
                    4f:a3:c7:15:32:e0:eb:95:5d:80:0c:0c:80:4e:ef:
                    5d:a1:9b:25:e1:7a:a0:e3:1f:b3:d6:c6:47:6c:30:
                    ca:34:59:14:0f:e0:4a:47:8b:02:54:99:7d:f9:b3:
                    ee:60:f8:3e:a3:e3:ce:4f:e0:cc:04:87:bd:52:e1:
                    fc:bd:6e:00:d6:88:0e:ac:9d:6f:88:a8:31:19:ac:
                    03:eb:6a:0a:3a:e1:a1:e3:7e:bb:66:91:50:cd:17:
                    2e:7f:40:66:fe:02:e4:cf:a8:a2:d6:76:4c:9a:24:
                    a8:d6:28:59:53:e4:3f:59:33:68:3c:3b:e1:53:20:
                    3b:04:dd:6c:48:39:8c:31:3b:c8:fd:2f:17:2a:42:
                    25:ce:ee:e3:84:aa:8e:a8:0f:88:e0:75:cf:c9:f5:
                    73:02:c8:22:52:d9:b9:3b:f8:ad:86:51:89:df:7f:
                    82:6b:f8:6b:15:fe:42:eb:89:36:d0:f3:cd:47:7f:
                    e0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:83:FD:9C:BD:C1:34:F4:06:6A:0B:A4:8A:8C:38:E5:7E:1F:1C:3D
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206271.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ef00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:1e:40:b1:36:4e:99:b0:09:7d:09:9d:7c:f9:f8:03:f7:88:
         93:4c:50:97:15:2b:df:15:62:aa:44:74:5c:ce:05:8f:ba:f9:
         b9:68:5f:6f:6f:bc:bc:34:16:c8:6b:11:14:31:0f:b2:e8:0c:
         06:b2:0c:11:be:1e:0c:ac:e5:79:25:b2:e6:e7:1e:34:ac:89:
         4c:f1:6e:b6:dc:3d:ed:fa:97:3c:e1:64:2f:b5:ee:16:69:a7:
         c7:6f:99:57:74:a3:a7:f2:11:65:d6:69:2d:7c:b8:e4:6a:2f:
         ba:2d:6d:5f:d2:6b:11:2f:c2:45:65:05:5b:8f:c6:cf:af:6d:
         2f:d7:17:b7:f5:45:2f:91:0f:d3:0c:7f:51:f4:9e:7f:62:b0:
         5e:29:ad:a6:b3:19:2a:61:a3:69:a3:47:f6:6e:9e:f3:12:6d:
         96:3a:9b:cf:a9:1f:99:2e:fc:32:53:bc:f8:4e:d7:51:8d:42:
         20:61:e4:b6:ee:03:be:7c:8b:ba:3e:fc:07:7d:25:21:ee:f1:
         b2:39:85:98:be:45:f7:55:5a:e5:87:ce:24:8c:9f:63:3d:bb:
         c7:c8:23:2c:0b:e7:cd:46:2d:84:ce:d7:04:9d:e5:ab:c1:c9:
         ec:b0:e8:b7:5a:14:7b:69:c6:22:12:04:f2:ff:0d:6f:5b:be:
         7b:16:0f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org