Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216373.roa
File:                     AS216373.roa (raw, json)
Hash identifier:          +BHBPI/P4Ni8qko+RiqebxK1p1Ospc4ZN6qYHJ4rRJM=
Subject key identifier:   0F:F0:F4:BE:FD:02:AD:A7:90:55:52:6D:C1:78:FD:A6:A7:F7:84:AD
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       77A5DA5FC519E2A0477CE163B2011DEA110915A9
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216373.roa
Signing time:             Wed 07 Aug 2024 06:49:44 +0000
ROA not before:           Wed 07 Aug 2024 06:44:44 +0000
ROA not after:            Wed 06 Aug 2025 06:49:44 +0000
asID:                     216373
IP address blocks:        2a05:dfc1:8d00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 08:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a5:da:5f:c5:19:e2:a0:47:7c:e1:63:b2:01:1d:ea:11:09:15:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Aug  7 06:44:44 2024 GMT
            Not After : Aug  6 06:49:44 2025 GMT
        Subject: CN=0FF0F4BEFD02ADA79055526DC178FDA6A7F784AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:17:13:0b:e4:f5:f9:d0:1b:e7:8d:26:de:c2:
                    4e:82:18:fc:fe:9e:33:22:89:4a:1e:c2:23:2c:dd:
                    52:f7:66:36:9d:57:94:88:2c:c1:52:80:3d:40:1a:
                    b8:65:cf:05:47:fe:d0:b9:74:8e:4f:51:74:e6:fe:
                    37:26:dc:e8:8f:5a:59:ef:b5:e6:83:d3:e9:ef:0f:
                    8f:12:2d:29:3f:47:14:69:a7:dc:02:f2:41:fd:47:
                    ae:52:0b:a0:42:ec:1e:87:22:bb:97:c1:bd:1b:24:
                    68:78:4c:38:c6:84:69:4a:c6:ea:28:bb:11:63:2d:
                    9e:3f:8b:6c:29:73:5b:84:0d:31:ca:1e:35:fe:62:
                    2a:20:8f:fa:6b:52:ab:4d:31:1e:b0:73:e1:c5:00:
                    f7:39:7b:38:29:44:89:7a:dd:8a:e4:e8:e9:6b:a1:
                    ac:25:9e:b1:d7:27:79:80:96:ff:52:6c:85:fa:5a:
                    45:08:bd:03:98:fc:42:ff:a7:fd:2a:19:96:86:cd:
                    65:be:40:f7:5a:4c:ab:e7:aa:2e:6d:88:04:a6:02:
                    f7:1f:95:d3:d0:62:83:4c:57:46:09:a3:e2:33:95:
                    ed:16:aa:c5:06:ef:4c:cc:98:ec:b8:7b:e8:f4:03:
                    a4:d4:b0:e3:d4:4a:02:96:24:b6:48:14:95:17:85:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F0:F4:BE:FD:02:AD:A7:90:55:52:6D:C1:78:FD:A6:A7:F7:84:AD
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216373.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:4f:e8:70:fc:57:6a:d5:e1:cb:53:2a:8b:cd:b8:c8:dc:ad:
         b3:56:d6:80:6f:ec:a6:52:54:ff:b3:7c:72:fb:06:2c:96:c9:
         07:2e:28:60:b4:c0:58:b8:b9:9a:46:0e:4d:da:e5:e5:be:28:
         bf:77:1e:a9:ba:65:b6:a0:91:f7:cc:85:75:3a:b2:e4:b6:66:
         47:5f:f9:da:af:44:8a:68:4b:8a:bf:9a:c4:dd:4e:5e:70:dc:
         04:13:b0:b3:e7:6a:c3:f9:47:9a:bd:eb:f8:4a:8c:0f:d3:e8:
         8d:8f:2b:e3:60:54:16:d7:e9:16:22:d7:e3:92:68:8c:cc:29:
         f8:ad:1b:e2:f7:42:1c:23:ba:62:9d:8b:c5:0e:c4:d7:7c:a9:
         4c:f0:3e:32:f4:f6:68:6d:a0:0d:a5:c2:cf:1d:b8:94:4c:70:
         33:2d:c6:2a:f1:61:74:34:86:33:b4:ee:6d:60:4d:4c:48:66:
         8e:cf:ba:77:f9:d9:cd:15:cb:f5:8a:31:c6:71:98:2c:aa:18:
         5e:26:32:ce:f0:1e:8f:07:fa:2b:26:48:a9:11:ab:c2:9c:a8:
         9d:cf:55:b4:a3:c0:5f:61:9e:83:ae:9a:e7:fe:ee:5b:c5:13:
         94:2f:63:61:70:75:b5:fb:46:3b:48:17:fa:23:b5:f0:aa:44:
         18:9a:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 10:41:57 2024 by rpki-client on console-ams.rpki-client.org