Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS210381.roa
File:                     AS210381.roa (raw, json)
Hash identifier:          TkqFSkospZkTvs/a+J7expBX/QuCu6gx3O86xaoHchk=
Subject key identifier:   38:E8:8B:6F:07:B8:41:BB:2A:AF:70:F0:AA:B5:2D:AA:BF:AD:D0:4B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       6AE04DDC23A8FA87367A66A699A161975A13BC7B
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS210381.roa
Signing time:             Mon 28 Aug 2023 11:29:54 +0000
ROA not before:           Mon 28 Aug 2023 11:24:54 +0000
ROA not after:            Mon 26 Aug 2024 11:29:54 +0000
asID:                     210381
IP address blocks:        2a05:dfc1:6300::/40 maxlen: 48

Validation:               Failed, certificate revoked on Wed 22 Nov 2023 22:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e0:4d:dc:23:a8:fa:87:36:7a:66:a6:99:a1:61:97:5a:13:bc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Aug 28 11:24:54 2023 GMT
            Not After : Aug 26 11:29:54 2024 GMT
        Subject: CN=38E88B6F07B841BB2AAF70F0AAB52DAABFADD04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:55:b6:b0:d1:b7:ce:6c:06:41:b1:f5:10:
                    7f:d4:7b:6a:38:b8:29:0a:05:c8:dd:b9:cd:eb:05:
                    48:5f:e6:4b:11:d5:96:d9:d8:99:d0:b0:80:59:b9:
                    72:3d:97:7e:fa:22:62:9c:51:5f:94:e7:82:4d:a3:
                    40:93:b7:47:f1:2e:47:e4:97:1f:6a:58:6a:7c:6a:
                    3b:36:6e:15:1b:1a:13:22:2c:14:ff:4a:70:98:29:
                    06:8e:4d:42:e7:0e:40:d9:5d:45:ca:da:97:e9:f6:
                    9f:7b:ef:6d:a5:d9:71:57:ed:a3:b3:c5:7d:89:f8:
                    2e:ef:78:6b:1d:15:8f:b7:1f:d0:9c:63:93:ac:66:
                    92:0f:3c:16:d1:dc:e5:e5:98:ec:21:16:9d:35:f3:
                    e3:41:53:be:ae:74:3c:75:37:58:34:9c:c1:73:d5:
                    17:69:f4:20:82:f7:3d:38:b0:b5:be:02:23:5d:67:
                    05:fe:9d:c8:1d:02:57:3f:69:7f:bd:30:be:5e:c3:
                    e0:ee:67:02:73:d5:ec:e1:e1:22:e8:d2:5d:91:0f:
                    4f:2f:28:a6:e2:2b:88:ef:bb:87:fe:37:09:be:9e:
                    62:4e:d5:aa:88:c7:c0:b6:11:53:29:f7:66:50:6b:
                    12:4f:d5:91:b7:32:f5:52:8b:d5:8e:16:c3:c1:4f:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E8:8B:6F:07:B8:41:BB:2A:AF:70:F0:AA:B5:2D:AA:BF:AD:D0:4B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS210381.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6300::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:17:56:bf:67:f2:fd:59:e2:2b:7b:4c:3a:c2:3b:fc:33:2a:
         bc:ef:97:4a:b1:c2:65:cc:89:20:6e:d6:05:d0:fd:a5:48:4a:
         85:91:a6:3b:1a:1d:8f:9f:f2:4c:19:7a:12:12:83:fa:52:4f:
         f9:b7:44:fe:e3:f0:02:79:77:15:20:85:0d:ed:a9:5e:b7:5c:
         a1:08:e3:50:a1:47:36:fc:18:c8:b1:28:a0:75:2e:c7:8c:39:
         b9:b6:e2:ce:10:fc:89:d1:90:0c:bc:dc:76:54:1e:2a:32:67:
         cc:31:d6:da:3f:2b:db:ff:5f:44:8f:c9:aa:11:ce:6c:a3:f3:
         83:4e:1b:84:48:22:97:22:6e:3c:ce:c1:37:ae:bd:99:0d:0a:
         f0:6f:b3:a4:fb:39:31:7d:de:9f:b6:5b:55:ba:a6:99:73:5c:
         ab:12:36:df:21:dd:30:92:4d:96:54:f9:c0:ee:b5:62:59:d9:
         a8:b8:9f:50:6d:f0:22:a5:db:94:e8:b9:09:9e:b1:e5:c5:69:
         e0:23:68:b8:39:0c:ce:91:cf:82:b0:8c:b1:b5:9e:bc:ec:8b:
         b7:1e:78:aa:76:30:3d:e2:1a:19:69:5a:f3:41:1d:13:f8:64:
         b9:e2:7f:a4:fa:6c:73:f5:d9:44:c3:6d:d3:b8:a6:e4:a7:df:
         16:f8:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org