Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216304.roa
File:                     AS216304.roa (raw, json)
Hash identifier:          qULLRSGJjAuLuNVXATuFcoxqEzZYOiO+8rgfpbgcLBg=
Subject key identifier:   B8:05:F8:15:92:3E:E4:5D:D4:A0:46:E5:6B:74:B1:40:A3:51:A3:B2
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       786FD1EC47C86C4F963FCB1AACD3D5F546999E59
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216304.roa
Signing time:             Sat 16 Sep 2023 12:46:51 +0000
ROA not before:           Sat 16 Sep 2023 12:41:51 +0000
ROA not after:            Sat 14 Sep 2024 12:46:51 +0000
asID:                     216304
IP address blocks:        2a05:dfc1:9100::/40 maxlen: 48
                          2a05:dfc1:9200::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6f:d1:ec:47:c8:6c:4f:96:3f:cb:1a:ac:d3:d5:f5:46:99:9e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Sep 16 12:41:51 2023 GMT
            Not After : Sep 14 12:46:51 2024 GMT
        Subject: CN=B805F815923EE45DD4A046E56B74B140A351A3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:59:5f:dc:d8:1c:06:f1:dd:df:95:51:32:56:
                    24:de:f8:25:99:f7:23:61:a6:90:39:0d:0f:79:ee:
                    bd:86:6f:03:0a:06:ad:2e:40:06:af:8d:fe:ea:f1:
                    af:6f:b9:1d:b4:c7:39:91:f8:c4:8b:12:c7:91:c1:
                    1d:30:ae:88:c5:e5:d9:b4:2e:b8:8b:56:87:88:90:
                    47:36:d2:ae:00:b8:7e:bc:a7:7d:5f:0e:a2:6e:f0:
                    d4:6a:6e:f0:7a:b4:d3:71:27:c0:03:48:6c:86:ea:
                    a4:03:eb:ae:0c:77:c0:e2:c1:42:8a:94:33:2a:b5:
                    7e:1d:6c:8a:a8:70:ae:bd:85:75:27:66:66:cc:ff:
                    3f:a1:41:8b:da:9d:a7:dd:5e:ab:8a:e0:24:fc:8f:
                    29:14:f4:a8:4b:73:6e:bd:cb:8f:bb:d6:ce:d8:6d:
                    79:a7:4a:3e:55:e8:31:95:a0:61:ad:ce:c5:e2:09:
                    fd:1f:60:8e:7b:88:1f:11:79:28:77:19:eb:03:90:
                    b5:3f:49:b9:13:35:63:a5:e8:64:d8:37:80:0d:ba:
                    2c:6f:b9:0e:d2:1d:c4:47:84:56:12:29:b4:13:ea:
                    9e:62:d6:4f:a2:b8:8e:73:7e:e6:fd:52:74:3e:72:
                    11:72:74:26:fd:6d:08:c4:ca:12:88:cb:d5:f8:8d:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:05:F8:15:92:3E:E4:5D:D4:A0:46:E5:6B:74:B1:40:A3:51:A3:B2
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:9100::-2a05:dfc1:92ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:0a:df:d2:44:c1:01:00:9f:ee:44:ce:97:72:9a:61:b4:
         ec:36:b2:7a:79:f6:70:ae:58:aa:b4:88:ac:76:59:b3:d0:95:
         a1:c3:63:cc:9f:97:7c:ef:fe:82:d3:9f:b3:6a:ec:a6:30:c6:
         ce:62:74:fa:02:50:30:c0:4c:00:c9:99:9f:1f:6d:85:73:35:
         76:87:b3:48:12:d5:ec:14:00:e9:12:63:8f:86:68:71:42:38:
         8b:20:7e:83:ae:95:8c:0d:f8:b8:35:9d:a9:c1:aa:33:d4:7b:
         fb:16:c3:62:c2:f2:b5:57:e8:1e:55:c1:42:18:b0:45:07:2e:
         73:2d:d7:f9:cc:6e:8b:d4:8d:7f:aa:45:aa:8a:ec:0e:56:67:
         2e:8c:1e:f5:5c:d0:d8:52:cb:6d:84:96:47:6a:57:40:d3:2e:
         d0:39:43:63:8e:90:e0:cf:d0:0d:f7:57:7c:a3:89:ac:52:24:
         9f:13:d5:6d:6f:cb:29:74:53:94:7e:39:06:cf:0a:01:95:98:
         88:b3:d9:e1:96:9c:54:1c:ef:2d:b2:52:e1:e6:8f:53:30:26:
         b5:8c:da:e9:21:c8:28:f0:20:bd:34:f4:01:9b:a6:80:fe:bc:
         6f:33:68:37:51:99:3e:66:68:39:a4:cc:f0:04:59:88:14:b2:
         ef:b8:e4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----