Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44876.roa
File:                     AS44876.roa (raw, json)
Hash identifier:          cvVUTnlrjxbhfjLxFYaDbRe1zzKC3fZ52fmR3FS0bOg=
Subject key identifier:   A6:77:8D:5F:7D:FE:B8:4A:A0:FF:38:4E:10:13:34:BF:B6:7E:FB:11
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       11F6C035B1D472E9B3081404978851098CB08059
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44876.roa
Signing time:             Thu 25 Jul 2024 23:50:55 +0000
ROA not before:           Thu 25 Jul 2024 23:45:55 +0000
ROA not after:            Thu 24 Jul 2025 23:50:55 +0000
asID:                     44876
IP address blocks:        2a05:dfc1:ac0::/42 maxlen: 48
                          2a05:dfc1:9780::/42 maxlen: 48
                          2a06:9f81:6000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 23:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f6:c0:35:b1:d4:72:e9:b3:08:14:04:97:88:51:09:8c:b0:80:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jul 25 23:45:55 2024 GMT
            Not After : Jul 24 23:50:55 2025 GMT
        Subject: CN=A6778D5F7DFEB84AA0FF384E101334BFB67EFB11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:1d:de:ab:d1:98:be:bd:44:ae:40:18:b2:
                    d8:f9:36:4f:b0:6b:af:cc:3b:e6:b4:7b:4a:7b:05:
                    e0:aa:26:6d:ab:66:fe:94:45:b3:9d:e1:15:2b:35:
                    72:8d:e2:5a:74:7b:07:a3:db:56:86:be:8f:d6:d8:
                    dc:96:92:0d:ab:5f:27:59:27:c3:8c:18:59:43:3a:
                    ff:e0:70:2c:81:f9:86:9a:a4:05:f1:00:c6:76:83:
                    50:55:04:c0:98:f2:ca:b4:73:d9:a3:e8:67:73:6d:
                    e3:09:b6:2f:70:3d:21:c9:bb:69:6d:86:5e:cb:79:
                    bc:b5:8d:39:70:22:7e:d4:f6:8e:c0:86:fc:83:80:
                    0d:85:18:87:fc:a9:97:a0:12:b8:6d:94:64:3b:fa:
                    99:91:bc:62:4c:cd:db:1d:e1:bf:5b:9d:73:af:3c:
                    74:c2:17:38:66:f0:a0:2f:90:1b:87:e1:04:22:e4:
                    0b:74:b4:ed:a0:72:78:b2:dd:95:35:cd:0e:0f:7e:
                    69:15:52:46:e7:2c:4c:9a:fb:85:2f:c6:20:30:9b:
                    e0:c2:93:a6:54:a9:d6:a9:6a:e7:8b:c9:b0:ba:f5:
                    25:fa:9d:ca:03:6a:28:54:97:80:12:44:5f:fc:cb:
                    54:93:d7:94:69:c6:de:20:05:8d:42:57:24:6d:60:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:77:8D:5F:7D:FE:B8:4A:A0:FF:38:4E:10:13:34:BF:B6:7E:FB:11
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44876.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:ac0::/42
                  2a05:dfc1:9780::/42
                  2a06:9f81:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:44:90:80:ea:36:85:37:ca:82:a7:34:59:80:18:27:20:b7:
         86:f5:80:8d:e0:6d:93:fd:87:ef:a9:06:65:8f:35:00:9c:2f:
         e8:17:75:70:4c:81:59:18:da:1e:f0:a4:16:d6:fb:92:e7:c9:
         63:c4:8e:32:1f:13:10:bc:16:54:d5:89:4e:d3:70:43:1e:fc:
         79:01:41:93:ac:17:40:d2:78:13:0a:63:1b:17:3f:fb:87:7b:
         c0:71:ba:cc:a4:e9:58:42:38:88:2e:7c:b9:df:ad:64:c2:ff:
         78:95:9e:8b:52:51:b6:e0:61:72:58:da:ff:07:55:34:75:6b:
         77:9c:79:af:5e:16:84:ef:6e:e6:b9:3f:e4:d4:45:c1:e7:f0:
         3e:a9:e8:20:a3:32:52:55:d3:c0:aa:fd:ad:30:b1:d4:cd:11:
         e8:56:0b:1b:82:17:65:7d:bc:ce:df:1e:52:4a:c7:15:8a:23:
         a8:89:db:f9:6e:a6:eb:d3:6f:e2:e1:28:c1:0f:14:1e:6f:36:
         a5:d6:61:be:a0:1a:7e:e3:43:71:1a:00:37:5e:45:ef:55:14:
         2f:82:85:19:19:64:6f:95:af:a5:f6:07:09:7e:55:1c:a4:52:
         f1:f2:83:18:b7:ca:31:73:c0:1a:73:8c:7d:be:96:f3:9b:b8:
         37:53:79:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 00:08:43 2024 by rpki-client on console-fra.rpki-client.org