Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS400304.roa
File:                     AS400304.roa (raw, json)
Hash identifier:          5UCfagK5MhQcB8O/04R5iOO+Kwe1W0e7FPRUAx5I11w=
Subject key identifier:   EE:77:C6:A2:F7:3B:18:21:1A:0D:D7:46:E0:24:79:E1:49:6E:60:A3
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7519F74B90C37AC2B1B4EB4A9594A9FADF36C1D3
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS400304.roa
Signing time:             Sun 05 Nov 2023 04:07:03 +0000
ROA not before:           Sun 05 Nov 2023 04:02:03 +0000
ROA not after:            Sun 03 Nov 2024 04:07:03 +0000
asID:                     400304
IP address blocks:        2a0a:6040:d100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 01:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:19:f7:4b:90:c3:7a:c2:b1:b4:eb:4a:95:94:a9:fa:df:36:c1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:03 2023 GMT
            Not After : Nov  3 04:07:03 2024 GMT
        Subject: CN=EE77C6A2F73B18211A0DD746E02479E1496E60A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:a2:1c:8f:cc:0c:3f:84:ee:11:0c:77:bc:
                    a0:73:fa:00:50:9c:1e:1d:28:70:f2:03:90:34:ed:
                    b6:fe:f0:b6:50:04:1f:05:8e:8e:30:2a:e5:12:8a:
                    5e:78:e1:3e:de:2c:ee:b8:b5:7c:38:43:14:06:59:
                    f1:0f:6a:40:a4:ee:6f:3e:c3:0d:ab:74:5e:7b:0c:
                    e5:56:50:08:1f:4e:4e:97:af:cd:1c:92:18:4c:e2:
                    80:2a:2b:57:ba:89:c4:aa:11:7b:77:07:a4:d7:83:
                    24:15:cf:69:7a:b5:49:c8:49:51:50:6e:f6:65:00:
                    97:74:b6:1e:cb:a0:f8:98:40:73:7e:81:c6:8c:da:
                    e4:56:71:29:18:a6:e6:7f:96:eb:c4:5c:29:90:67:
                    7e:eb:0c:b0:a0:d9:eb:e5:5b:a9:9b:f8:62:28:4d:
                    bf:08:b9:2e:f0:e4:f4:e5:48:20:73:81:3f:ec:58:
                    b4:fe:26:5a:39:78:d3:46:e1:67:06:ff:40:33:a5:
                    cd:1d:28:5e:b8:58:dc:79:db:68:11:77:4b:8d:ff:
                    c1:98:f8:41:24:36:de:90:6a:8f:6a:9b:c4:6e:2c:
                    7e:31:7b:05:7f:96:8d:8d:66:d7:87:32:d3:37:1e:
                    dd:5c:59:74:21:66:27:5b:e2:8b:34:3a:f6:a5:7a:
                    1e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:77:C6:A2:F7:3B:18:21:1A:0D:D7:46:E0:24:79:E1:49:6E:60:A3
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS400304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d100::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:ee:81:54:38:c2:30:57:33:93:10:28:12:e4:ab:f0:4c:5a:
         ea:46:39:a1:18:64:b9:e6:f9:71:36:85:f5:72:c5:1b:43:cc:
         60:a2:94:fc:68:c1:80:61:e4:e1:22:d4:61:a7:23:82:42:dd:
         b4:19:f5:5e:89:17:c3:29:85:fe:a6:b9:b8:b3:63:25:93:64:
         51:c7:87:ea:51:6a:f3:c3:23:b4:c2:dd:ad:05:f5:10:9e:50:
         bd:c0:e3:66:97:ea:48:88:c4:5a:7f:b2:5a:11:27:84:66:b4:
         55:ca:a9:aa:e8:2b:f9:36:c1:75:31:80:5c:cd:8a:53:f0:fa:
         e2:69:f7:ae:5d:e3:2d:81:f9:a0:8b:be:96:a4:fb:ec:a8:b9:
         c7:92:79:f1:2b:12:6b:5c:37:60:ac:69:36:11:8c:35:f0:02:
         69:e5:41:b1:d2:1a:4e:77:b4:04:3f:07:11:bc:cb:01:2e:a2:
         f0:74:9f:b6:e0:fa:24:03:a3:18:0d:db:48:57:c3:21:27:c3:
         da:5f:fd:2b:d2:ea:1a:82:06:33:1f:e9:bd:79:49:38:bb:8b:
         e5:bd:45:ee:9d:12:b6:4b:cb:25:b9:ae:fb:3f:1f:51:cd:ca:
         b7:68:5d:ca:84:22:a8:5b:aa:f6:7e:db:2a:c6:c0:29:37:49:
         f3:82:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org