Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216268.roa
File:                     AS216268.roa (raw, json)
Hash identifier:          si6ChVAl72AUeQSrOszF+Z/NSDujSrvNhs8Y4ziRBo0=
Subject key identifier:   D8:5A:D5:E3:45:E6:45:AA:7A:31:74:32:96:35:59:13:56:64:A4:79
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2A96D880615C03360CAA1B8543306853A5384E02
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216268.roa
Signing time:             Thu 08 Feb 2024 08:03:49 +0000
ROA not before:           Thu 08 Feb 2024 07:58:49 +0000
ROA not after:            Thu 06 Feb 2025 08:03:49 +0000
asID:                     216268
IP address blocks:        2a05:dfc1:8600::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sat 27 Jul 2024 08:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:96:d8:80:61:5c:03:36:0c:aa:1b:85:43:30:68:53:a5:38:4e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Feb  8 07:58:49 2024 GMT
            Not After : Feb  6 08:03:49 2025 GMT
        Subject: CN=D85AD5E345E645AA7A317432963559135664A479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:79:21:94:53:31:5d:16:01:16:86:ae:fe:
                    2c:74:86:6b:1e:9c:f2:16:7b:ca:5c:02:52:4a:c0:
                    b0:9d:e0:73:3c:e6:94:20:d2:23:48:64:65:8e:8a:
                    69:a3:02:61:4c:68:95:e0:f1:52:fe:63:17:3f:80:
                    07:e0:cc:79:f1:38:4f:9e:8f:2c:92:df:92:ee:5c:
                    ce:b0:58:a6:2b:0b:19:ef:c3:9e:cb:0f:01:74:23:
                    8c:77:a1:8a:32:f8:8b:de:09:15:9f:d2:af:57:cf:
                    18:9a:ce:43:67:c2:02:4b:f4:99:90:25:63:03:bb:
                    b1:9e:9d:e5:6b:6e:96:42:43:77:5a:36:d2:69:2b:
                    ca:16:54:2a:1b:88:f7:c4:a2:79:cf:52:f6:ef:e3:
                    e9:d5:11:fb:dd:f5:b4:60:11:df:1e:53:f5:65:f8:
                    58:01:fe:17:08:fb:bc:91:48:7c:72:ec:94:f3:c8:
                    13:20:99:e5:25:71:95:0f:87:06:ce:7e:c6:07:70:
                    ea:eb:e0:2a:da:8f:e7:36:e5:ce:e8:23:3d:56:6e:
                    0e:42:bc:c7:95:e8:b3:d0:66:7e:32:2b:e2:e2:3f:
                    4d:3e:a0:3b:d7:96:d6:d6:c6:89:87:fb:53:2a:9b:
                    b8:3f:03:8b:39:44:a2:7e:bc:70:9d:e7:32:36:0f:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5A:D5:E3:45:E6:45:AA:7A:31:74:32:96:35:59:13:56:64:A4:79
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216268.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:fc:7a:2e:76:6c:6d:39:83:6a:b8:14:49:1f:bd:dc:16:37:
         21:6b:84:57:5d:a3:db:dd:ed:be:0a:3b:7c:c2:71:22:93:26:
         b2:8c:1a:ad:30:54:10:a2:41:fe:0f:50:09:71:a4:50:d9:bc:
         9d:63:e0:b0:11:7b:d4:74:7a:e0:0a:e9:d4:0a:d6:6c:e8:d8:
         a2:47:3c:58:52:ec:42:45:97:b5:6e:a1:84:bb:11:cf:54:74:
         b0:77:ee:1c:33:13:22:fe:00:80:ff:16:6b:4c:b0:c1:6b:aa:
         bc:78:c6:2d:16:63:03:f0:eb:b8:52:f6:34:1e:77:67:36:69:
         ff:f3:2d:95:89:55:69:b3:58:5f:ce:d0:4e:3f:8a:e4:8a:4a:
         32:42:7b:79:93:2f:a8:43:f4:6f:21:f3:c2:9d:3f:4c:b4:b5:
         23:c1:e0:6f:ef:62:88:31:20:ae:79:0c:43:b8:72:d4:92:94:
         bf:34:d2:1b:d9:13:52:28:6b:b6:92:b7:65:76:f7:cd:c3:b8:
         ba:a6:49:a7:af:56:cf:b7:9e:b4:e5:1d:1a:0b:25:de:95:af:
         c4:f3:91:fd:b2:44:41:40:e2:32:03:a6:44:bb:71:47:c3:30:
         37:4f:52:70:69:14:f5:c2:a4:91:63:0a:78:62:bd:7c:25:b2:
         d1:d9:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 10:01:16 2024 by rpki-client on console-ams.rpki-client.org