Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS36231.roa
File:                     AS36231.roa (raw, json)
Hash identifier:          aCndoT8tZ6p1eJJnfZn0ai9v3ek1l+gMSxvkHJVloew=
Subject key identifier:   82:DF:BD:72:F0:6B:9A:35:C2:3A:CB:25:A9:E9:91:44:73:5E:47:02
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       62B0ABD3D3421F836BB3CB42EFB6E143B1402737
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS36231.roa
Signing time:             Sun 02 Apr 2023 09:23:15 +0000
ROA not before:           Sun 02 Apr 2023 09:18:15 +0000
ROA not after:            Sun 31 Mar 2024 09:23:15 +0000
asID:                     36231
IP address blocks:        2a05:dfc1:2800::/40 maxlen: 48
                          2a05:dfc1:2900::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b0:ab:d3:d3:42:1f:83:6b:b3:cb:42:ef:b6:e1:43:b1:40:27:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Apr  2 09:18:15 2023 GMT
            Not After : Mar 31 09:23:15 2024 GMT
        Subject: CN=82DFBD72F06B9A35C23ACB25A9E99144735E4702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:b7:4a:5d:b6:f1:dd:40:f6:fb:7e:b8:25:
                    a5:c5:b7:28:d5:1e:9a:3b:e1:f8:35:90:a0:2c:ff:
                    70:f9:f7:3b:4a:76:5a:02:a5:25:43:17:bc:34:98:
                    ed:fb:5c:53:4f:3b:a2:2f:b2:86:c9:b4:50:40:f6:
                    90:d4:1c:b1:00:e9:4c:b0:d1:b0:60:98:fe:93:2a:
                    b6:f5:66:5e:c7:33:78:20:c8:1b:80:d4:d4:df:a5:
                    b3:b4:61:ea:16:70:2e:fa:fa:72:ff:96:6c:5c:21:
                    77:1c:fb:fe:47:4e:e8:fe:50:3a:3e:80:4a:14:f8:
                    46:d3:b5:02:2b:14:31:46:3b:ea:9e:6e:5a:59:37:
                    e1:30:5d:d4:f6:01:93:e1:66:cf:39:f2:ea:96:27:
                    97:2f:a2:ae:e9:fa:25:05:05:8a:e9:3b:2f:02:26:
                    36:42:5d:61:a2:88:63:28:5d:06:a9:4c:9c:bb:b3:
                    19:b0:06:da:0d:15:0f:07:9a:71:dc:2b:f6:5d:4c:
                    c4:d2:9a:a8:56:8d:2f:ee:1a:fe:10:9e:6d:c7:60:
                    51:b8:a2:3a:6f:2a:e8:ae:36:4d:e5:cd:65:3e:31:
                    e6:e7:d6:c2:5d:5c:1b:3b:dd:e9:69:00:2f:1a:51:
                    ae:08:61:dd:07:55:35:bf:fa:b6:32:44:9f:ee:0e:
                    1b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DF:BD:72:F0:6B:9A:35:C2:3A:CB:25:A9:E9:91:44:73:5E:47:02
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS36231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:2800::/39

    Signature Algorithm: sha256WithRSAEncryption
         87:96:51:3f:8a:57:d9:ec:73:db:67:03:68:65:c9:43:20:71:
         7b:a9:35:8d:ad:d2:89:e6:29:75:f0:5d:78:8a:49:f4:b0:ac:
         67:ad:b5:3b:56:e3:e0:6d:32:4a:c9:4c:d2:ab:13:03:57:c9:
         c7:74:ec:b2:46:7e:7d:f8:68:87:25:c2:6b:68:69:9a:18:c5:
         83:66:62:85:c0:2c:dc:ea:66:51:b9:58:80:51:a5:cc:5b:8e:
         7b:f4:94:dc:8b:15:55:89:41:b2:70:18:96:ec:63:71:4c:a1:
         0c:6d:7d:54:1c:a3:f9:76:d1:ec:d6:4d:18:7a:14:05:fd:0f:
         d8:d2:57:77:16:aa:da:84:01:3c:fc:da:2a:b5:a1:dd:2b:20:
         45:b8:c8:94:97:4e:d1:43:31:7d:c6:0c:10:46:0f:10:38:ca:
         18:29:c3:81:73:11:6a:b3:99:71:e3:d2:bd:a4:e2:fe:be:b9:
         4e:c0:6f:6d:56:2e:48:9f:c2:0e:1b:6d:a1:a7:96:5c:f4:47:
         f7:74:6f:7c:1a:f3:13:ef:cb:06:ba:e0:6f:fc:64:e3:1c:f0:
         93:bd:08:c6:2f:3c:23:84:08:01:f0:2a:eb:3b:23:78:03:1e:
         fb:a0:0c:d3:82:d2:ac:a4:ff:b7:c2:8c:25:3c:34:60:2e:7e:
         f5:dd:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----