Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212477.roa
File:                     AS212477.roa (raw, json)
Hash identifier:          xr5txK8WYAZG/BqKclVnDkNdCmIBDTwIFJF4R/TOIFI=
Subject key identifier:   6C:BF:B4:72:2F:B0:FB:B0:FF:0D:15:01:BF:FB:D8:4A:8E:EE:11:4B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5533622064267AD6B716A4B9DEB8E5A690F8B73A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212477.roa
Signing time:             Wed 26 Apr 2023 07:09:30 +0000
ROA not before:           Wed 26 Apr 2023 07:04:30 +0000
ROA not after:            Wed 24 Apr 2024 07:09:30 +0000
asID:                     212477
IP address blocks:        2a05:dfc1:2800::/40 maxlen: 48
                          2a05:dfc1:2900::/40 maxlen: 48
                          2a0a:6040:7300::/40 maxlen: 48
                          2a0a:6040:8a00::/40 maxlen: 48
                          2a0a:6040:9900::/40 maxlen: 48
                          2a0a:6040:b300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:33:62:20:64:26:7a:d6:b7:16:a4:b9:de:b8:e5:a6:90:f8:b7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Apr 26 07:04:30 2023 GMT
            Not After : Apr 24 07:09:30 2024 GMT
        Subject: CN=6CBFB4722FB0FBB0FF0D1501BFFBD84A8EEE114B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:9e:ab:2a:23:8b:ad:fb:fc:5a:52:28:86:
                    89:e0:ec:74:7f:d0:14:ec:2a:f7:dd:ca:cf:b4:97:
                    66:e7:8c:cd:55:94:ec:01:2a:7c:7d:15:b1:58:75:
                    4d:79:af:e6:02:6f:31:10:73:aa:c1:60:03:bf:96:
                    ef:69:47:e2:6b:d4:e9:98:5f:56:32:2b:2b:67:a1:
                    3f:b8:6b:3c:94:da:3e:7e:93:5e:ca:e4:24:e0:37:
                    4f:22:fc:b2:20:58:9b:e1:e3:c3:94:b9:4e:d2:c8:
                    14:41:c3:28:d2:45:03:3f:86:11:07:a2:2a:74:6b:
                    f4:ed:71:a4:37:9c:7f:33:14:d1:11:70:d0:c6:59:
                    7d:b7:6b:50:a3:f4:63:c2:e0:b3:96:4c:65:0a:74:
                    be:e6:35:08:fc:23:c3:b1:56:2f:3e:23:6d:15:4b:
                    ed:0f:29:d1:71:77:e8:5a:47:06:40:7c:68:ad:db:
                    1d:8e:88:8b:26:33:1d:bf:cc:bd:5c:b2:23:ec:82:
                    c0:e7:ce:9f:04:a5:f7:82:a2:cd:af:db:55:56:b3:
                    0f:2c:d5:f3:30:dc:7c:0e:5e:75:59:c8:12:8c:e1:
                    00:60:36:a2:5f:b3:a9:ed:51:93:ea:d3:b0:f4:10:
                    b9:76:20:0e:88:34:6e:2a:80:5f:67:87:e9:9c:53:
                    72:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BF:B4:72:2F:B0:FB:B0:FF:0D:15:01:BF:FB:D8:4A:8E:EE:11:4B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212477.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:2800::/39
                  2a0a:6040:7300::/40
                  2a0a:6040:8a00::/40
                  2a0a:6040:9900::/40
                  2a0a:6040:b300::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:97:46:08:96:e8:ed:82:e3:75:f1:13:18:fd:2a:f2:66:9a:
         85:bc:72:44:8e:ae:a5:cb:46:53:3e:f2:93:0e:2e:93:7b:05:
         9a:e7:e8:c8:a1:a5:71:5d:65:6e:40:59:c4:75:58:96:87:c2:
         e5:b6:1a:d1:56:ce:c0:97:60:24:00:0a:7f:8d:2c:b7:96:6f:
         7d:a7:a9:3d:47:9e:58:bf:0a:79:2a:da:1f:ca:2a:a0:f5:ef:
         20:39:be:10:0d:4e:91:8f:42:ea:68:be:6e:ae:06:1d:27:14:
         cf:a3:dd:bd:d8:5a:28:a4:aa:6b:6a:af:2e:9c:d8:36:62:ef:
         5e:23:70:a6:1f:06:b1:dd:5b:5b:c5:60:36:78:95:a8:81:a2:
         a5:44:8a:c3:68:53:72:23:e4:a3:1a:3e:20:cc:f5:25:b7:18:
         ca:a7:61:85:37:42:74:6f:cd:3c:55:5d:17:b0:98:bd:d3:9b:
         71:49:90:7d:5c:e6:c8:55:1d:f3:4c:81:00:a2:31:35:0f:71:
         00:da:1d:f0:b1:71:49:c6:e5:d0:91:a4:a3:6c:da:5d:23:9f:
         cd:f7:45:1b:7c:05:a2:49:20:ba:58:60:bf:7d:da:7a:c1:73:
         f4:ac:72:5d:0c:4a:56:f5:12:d9:65:3b:09:dc:a6:42:fa:2b:
         3d:d3:83:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----