Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216455.roa
File:                     AS216455.roa (raw, json)
Hash identifier:          wYMGckVXSpS32Qkh+eYsL2hnXTJN9xViu1yW7n0OkMk=
Subject key identifier:   DA:23:D1:16:1C:84:FD:33:83:9E:E5:65:67:7B:28:43:13:3A:3F:89
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       60C52F569BB712381152AC910634D1C8998AEA3F
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216455.roa
Signing time:             Sat 16 Sep 2023 13:24:53 +0000
ROA not before:           Sat 16 Sep 2023 13:19:53 +0000
ROA not after:            Sat 14 Sep 2024 13:24:53 +0000
asID:                     216455
IP address blocks:        2a05:dfc1:8500::/40 maxlen: 48
                          2a05:dfc1:9600::/40 maxlen: 48

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 22:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c5:2f:56:9b:b7:12:38:11:52:ac:91:06:34:d1:c8:99:8a:ea:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Sep 16 13:19:53 2023 GMT
            Not After : Sep 14 13:24:53 2024 GMT
        Subject: CN=DA23D1161C84FD33839EE565677B2843133A3F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:44:a6:83:de:2d:90:f2:87:cb:11:66:ec:
                    e4:4a:8c:7c:d8:df:93:70:4d:cd:dd:c1:a1:3e:9c:
                    b9:c6:b4:f0:5a:85:d6:b3:e8:21:26:3a:91:1e:d6:
                    ee:0d:8d:a4:e7:7c:3c:99:3f:e5:0e:23:69:b5:eb:
                    25:5c:64:d6:21:11:6d:bd:7a:43:ca:6c:34:d8:6e:
                    b8:85:bf:42:be:ab:0e:8c:18:fa:d9:ba:fb:1a:fa:
                    ab:a7:74:63:58:9c:5f:d3:a6:e6:29:55:19:d7:43:
                    ec:bf:b5:60:48:ff:d4:a7:8c:53:03:dd:07:b8:d4:
                    63:1b:fb:a4:b1:50:d0:6b:76:71:64:58:70:9e:27:
                    75:ef:08:18:ed:aa:ec:3d:04:0b:b2:cc:7a:2e:53:
                    6a:dc:6d:df:5c:4d:29:c8:71:97:e5:9a:45:ef:0f:
                    c9:68:6f:07:cb:f1:bb:3b:33:1c:66:33:a2:9a:de:
                    ee:38:5a:38:2a:b7:7f:27:d5:d4:a9:42:73:0d:1a:
                    ee:6e:73:17:b6:f0:d5:d4:69:f2:63:c1:18:e8:61:
                    1f:18:8a:18:01:0e:56:31:e9:79:cd:71:84:b5:50:
                    6c:61:70:ba:c1:62:7b:6f:e4:6d:8e:b2:d1:02:d4:
                    ea:2a:4d:2c:24:ea:64:de:ad:70:c5:9a:62:c8:6c:
                    41:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:23:D1:16:1C:84:FD:33:83:9E:E5:65:67:7B:28:43:13:3A:3F:89
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216455.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8500::/40
                  2a05:dfc1:9600::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:6c:06:de:88:b4:dd:97:19:f1:66:b2:78:32:b8:6c:64:f3:
         98:9e:38:a7:07:0e:0c:72:d8:15:8d:84:5e:d3:35:4e:ae:1f:
         f7:2f:d9:b0:cf:86:b4:24:62:24:ea:54:c0:4e:a0:73:ba:26:
         dc:eb:ed:51:54:43:9c:d3:fd:1d:33:fd:18:8a:0e:d0:e8:bc:
         bd:b2:12:5e:98:6d:03:18:b5:97:30:ad:d4:71:89:31:ab:22:
         0b:1a:70:a9:db:80:92:d4:3f:6b:50:5a:86:ed:b9:45:f2:06:
         e5:1a:6e:b0:45:14:c6:2b:90:15:02:35:c4:d1:b5:5f:e8:73:
         9a:d9:8b:bb:09:77:3f:65:54:4e:f8:9c:5e:8c:58:1c:50:58:
         37:25:a7:db:a1:df:25:e2:21:d3:cd:d0:60:5b:54:69:ac:75:
         93:36:c9:03:ea:8a:f3:26:e8:18:a0:6c:2b:00:8c:79:f3:3c:
         28:bd:c9:06:33:60:10:81:0c:5e:08:26:82:7e:7d:e2:e4:83:
         1f:e2:4f:af:2b:e6:91:3d:97:f9:d9:e8:ac:14:13:1a:84:66:
         1c:e0:3d:76:c3:06:a5:32:e6:fa:24:d7:1a:04:f2:26:24:de:
         6f:59:d2:da:75:75:a2:54:1a:34:51:50:58:14:02:f3:20:b6:
         f8:0f:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 23:26:33 2024 by rpki-client on console-ams.rpki-client.org