Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211431.roa
File:                     AS211431.roa (raw, json)
Hash identifier:          TFhgcJsiU19VUDMvsiJn9jRhR4bgeSil5KpIpRq7Sis=
Subject key identifier:   B5:60:31:DE:16:62:C1:77:69:78:4C:BD:DC:F0:5B:C8:74:84:E4:5D
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       3EF9E133AC402D163B23E22A9C6607D0417A2CEB
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211431.roa
Signing time:             Fri 09 Jun 2023 00:17:05 +0000
ROA not before:           Fri 09 Jun 2023 00:12:05 +0000
ROA not after:            Fri 07 Jun 2024 00:17:05 +0000
asID:                     211431
IP address blocks:        2a05:dfc1:8000::/40 maxlen: 48
                          2a05:dfc1:8100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sat 10 Jun 2023 12:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f9:e1:33:ac:40:2d:16:3b:23:e2:2a:9c:66:07:d0:41:7a:2c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jun  9 00:12:05 2023 GMT
            Not After : Jun  7 00:17:05 2024 GMT
        Subject: CN=B56031DE1662C17769784CBDDCF05BC87484E45D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:d1:e8:c3:cc:f6:a9:0c:61:04:96:61:62:
                    d4:1d:79:b0:ce:bb:23:1b:96:da:a4:4c:61:e8:20:
                    93:71:fa:6b:be:d2:0d:36:82:d4:7d:6c:75:d5:a9:
                    1c:55:87:cf:c6:3d:78:71:19:9a:e7:4e:16:bd:47:
                    b3:3c:3e:26:fd:49:06:9e:29:fe:a4:58:b7:4b:ad:
                    76:c6:59:79:db:99:7d:7d:65:7f:e3:0a:b6:a1:5b:
                    e6:8c:7d:26:14:b9:fa:32:58:12:e2:d3:5b:97:a9:
                    b0:83:aa:8d:7c:a4:94:90:ac:06:43:ae:ea:8f:3d:
                    5a:0c:3d:78:7a:49:3f:c4:18:8c:f0:64:6d:af:4a:
                    5b:f3:3d:7b:66:39:85:4c:87:08:73:16:c4:d6:07:
                    83:c4:3f:ce:be:31:77:e9:90:e6:e3:ac:c5:7b:72:
                    a2:db:7a:f6:00:82:8f:f9:eb:9c:05:07:f7:4f:c1:
                    2e:fd:4a:4c:ff:54:56:5f:80:05:35:76:eb:96:32:
                    c0:fe:0e:c5:8a:c8:4c:61:7b:3f:0a:2b:f3:f2:94:
                    f9:27:8e:bf:64:7d:c1:ee:94:43:f1:f6:b3:27:5f:
                    7e:cf:0d:2b:21:32:12:b1:f9:f8:ef:33:5a:c9:b2:
                    25:e2:20:f0:eb:13:90:a0:d9:b5:57:4e:30:35:0e:
                    8e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:60:31:DE:16:62:C1:77:69:78:4C:BD:DC:F0:5B:C8:74:84:E4:5D
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         ae:14:60:0c:2e:87:f9:20:17:68:f3:71:c1:da:79:9d:cb:6e:
         47:db:f8:fa:15:2f:85:67:8b:35:3a:c9:d5:d8:57:97:a0:5b:
         12:10:73:a9:36:b4:13:ec:e4:ae:74:8e:75:9e:36:c6:7b:1b:
         92:9b:42:36:a4:15:f6:4d:ef:1c:eb:90:ad:31:73:67:22:b6:
         d6:40:e3:d3:f2:33:c3:cd:57:47:68:fb:2e:4b:29:3f:b3:e0:
         7f:0a:1a:55:ee:f4:c1:d7:4d:87:d0:15:d6:b2:cc:1f:d5:b3:
         89:a1:4a:d7:71:78:ea:96:45:0a:8a:8f:22:a7:ed:fa:74:a8:
         c4:b7:ab:fc:4c:55:8b:a9:06:41:92:ce:81:ff:54:21:f8:3a:
         3d:22:39:58:02:f0:dc:92:ec:24:de:d9:60:48:d6:9d:4b:16:
         43:74:95:a3:bb:f5:21:e4:4e:af:f0:1e:e7:e4:25:94:39:3b:
         89:98:37:7c:8e:c7:24:2e:b3:da:7b:ba:20:46:cd:3b:f4:4d:
         05:f1:8c:66:ea:8f:19:26:7b:7b:6a:fb:f9:c2:a5:e3:5c:e7:
         d9:0c:09:0b:67:1c:87:b1:b7:27:c4:3b:49:e3:05:42:80:e5:
         de:7c:09:55:20:50:0d:86:6b:80:dc:06:4f:07:4b:5c:23:16:
         b6:5c:38:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org