Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS47496.roa
File:                     AS47496.roa (raw, json)
Hash identifier:          V56o2wbObgek50ceLyCWAnTmCw6VWIkX1+33oetfkU4=
Subject key identifier:   DB:30:93:B7:C3:1A:CC:E9:89:F9:DB:AF:3D:9C:56:0C:C9:EB:D7:C0
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       48338A3A49C18D6FA4206139E9EE61A8BC219EAA
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS47496.roa
Signing time:             Thu 26 Oct 2023 10:52:42 +0000
ROA not before:           Thu 26 Oct 2023 10:47:42 +0000
ROA not after:            Thu 24 Oct 2024 10:52:42 +0000
asID:                     47496
IP address blocks:        2a05:dfc1:c400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 26 Oct 2023 11:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:33:8a:3a:49:c1:8d:6f:a4:20:61:39:e9:ee:61:a8:bc:21:9e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct 26 10:47:42 2023 GMT
            Not After : Oct 24 10:52:42 2024 GMT
        Subject: CN=DB3093B7C31ACCE989F9DBAF3D9C560CC9EBD7C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:b6:4d:14:66:4a:ba:10:f7:23:a6:8b:e1:
                    24:73:77:03:cd:58:e6:71:e0:ac:94:09:5b:27:4c:
                    07:83:45:cf:c3:af:30:86:36:08:ba:04:b2:cc:f8:
                    65:05:48:fc:11:57:50:11:65:4a:1d:2b:f3:b8:bb:
                    bc:89:03:83:e9:e2:40:37:35:fd:90:6b:6e:c8:8e:
                    d9:07:94:69:80:b7:8c:18:75:1e:66:cb:cd:b7:b3:
                    76:34:ab:d0:5a:79:54:d4:22:06:02:52:20:6a:73:
                    93:50:aa:10:d1:f1:e6:ed:6e:f1:dc:11:92:12:64:
                    15:a6:c4:1f:0e:cd:4d:85:b4:2f:e6:04:5e:74:17:
                    2d:38:24:24:44:8f:3d:68:d0:8d:8f:1e:64:78:f7:
                    bd:66:ba:39:5f:f6:33:c9:cc:6c:b7:03:c3:e6:f9:
                    0a:3f:54:40:29:2a:c1:e1:8b:95:ad:8b:68:06:82:
                    4c:78:5e:30:8c:05:81:07:a8:6f:d1:78:f1:af:d8:
                    73:03:8f:e6:61:fb:5a:c9:f3:7b:6a:2a:8f:5f:59:
                    ad:9e:21:37:47:d6:e0:50:3f:fc:f5:31:d0:fd:13:
                    28:6d:03:5d:54:03:3f:7b:7d:dd:d0:b1:a9:7c:08:
                    c1:9e:49:6e:b6:42:ca:ed:ee:8c:3d:1e:12:c3:92:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:30:93:B7:C3:1A:CC:E9:89:F9:DB:AF:3D:9C:56:0C:C9:EB:D7:C0
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS47496.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c400::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:88:26:32:85:16:ee:06:df:16:cf:00:1a:b5:13:ea:0e:b8:
         8a:26:93:38:22:2e:26:84:19:d7:3b:d9:fd:88:3c:85:7c:e7:
         9c:b1:b0:a6:6e:2a:ea:8a:8e:f0:cb:31:7d:da:28:59:60:0b:
         a6:33:d4:bd:e9:89:a8:5a:f8:01:e0:59:5d:b6:0e:5b:72:ed:
         36:a0:75:d9:03:69:ee:0c:3b:c4:57:e1:75:58:5d:6d:64:85:
         d0:67:0b:9e:9a:e3:27:94:96:3c:04:49:9b:6f:6c:63:a6:7a:
         6c:47:97:13:7b:69:59:4b:c5:de:59:6f:f3:94:1a:b2:3f:53:
         e4:99:14:a6:c2:ef:f5:36:2e:6a:20:0f:ec:97:32:d9:8f:78:
         5e:16:22:0c:54:cf:dd:5b:ef:2c:0e:1c:fe:97:66:26:42:10:
         d1:9f:4b:b7:fd:89:16:9b:b1:90:40:ed:93:99:ee:45:b9:98:
         0a:bc:02:3b:0c:eb:73:1f:c3:35:1b:20:e8:9f:af:23:c4:f3:
         f8:a7:eb:e9:9e:00:76:21:3f:fb:65:28:ae:2c:a5:07:eb:c7:
         ce:7b:31:a6:93:d2:f3:50:4a:80:35:22:f5:19:57:cc:38:6b:
         73:74:63:a7:83:44:90:29:1e:cf:72:9d:be:7c:2e:cb:5c:13:
         9e:13:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org