Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS48606.roa
File:                     AS48606.roa (raw, json)
Hash identifier:          Q2/jx7z6ds2tsTMXgTW5OtEdVVASIPH9xs7Ne835BXU=
Subject key identifier:   76:22:76:84:A0:ED:86:7A:9E:99:79:50:DF:3D:D6:B0:F4:8D:7E:8F
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       76E0E3B3B49816F17AF6AEA6EEBD665C82A444DD
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS48606.roa
Signing time:             Mon 27 Mar 2023 22:16:56 +0000
ROA not before:           Mon 27 Mar 2023 22:11:56 +0000
ROA not after:            Mon 25 Mar 2024 22:16:56 +0000
asID:                     48606
IP address blocks:        2a05:dfc1:1000::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e0:e3:b3:b4:98:16:f1:7a:f6:ae:a6:ee:bd:66:5c:82:a4:44:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Mar 27 22:11:56 2023 GMT
            Not After : Mar 25 22:16:56 2024 GMT
        Subject: CN=76227684A0ED867A9E997950DF3DD6B0F48D7E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:53:4f:83:ba:eb:a1:0e:e6:ef:bb:95:3c:a8:
                    0c:93:23:5c:31:41:57:15:ea:a2:e8:91:22:7e:ee:
                    95:12:9f:b7:dd:a2:d3:be:93:cd:1f:7e:e2:4c:94:
                    5a:9d:d9:0a:47:2c:c4:20:8f:61:78:d3:3e:48:00:
                    9a:e6:1c:02:e5:3d:73:6d:2e:a2:05:2b:3d:ab:b8:
                    d2:ff:55:6b:b7:d8:fe:90:41:04:4f:7c:8e:3a:60:
                    35:d9:66:6a:24:70:42:31:04:91:30:37:13:27:f1:
                    f5:24:96:ed:25:23:80:ff:29:23:79:b4:5b:f3:87:
                    28:58:31:56:53:1d:4b:7a:0b:e3:c9:14:8b:3d:96:
                    95:8b:d0:77:54:90:19:df:93:77:07:26:3c:97:13:
                    3f:e2:ed:39:51:b6:58:cf:80:9e:1a:6b:12:02:54:
                    5b:72:72:ab:a7:d0:5b:c8:e2:88:c7:f0:72:cb:47:
                    59:dc:79:96:af:0e:74:35:b3:fb:be:0d:4a:22:f1:
                    1c:0c:25:85:c9:df:4a:4e:21:79:50:b4:85:3a:ab:
                    c1:cd:99:c3:32:95:a5:fc:4e:7d:c0:83:38:96:e9:
                    25:64:a8:4a:74:01:79:6e:88:1e:4f:5e:3c:77:72:
                    46:53:42:b9:07:85:18:53:68:93:41:32:79:15:59:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:22:76:84:A0:ED:86:7A:9E:99:79:50:DF:3D:D6:B0:F4:8D:7E:8F
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS48606.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:a6:e4:02:75:27:c9:3a:82:66:d1:66:82:ff:80:62:5d:
         b2:16:4b:fa:5b:69:42:3a:07:3a:40:cf:da:c4:02:72:0e:47:
         b3:39:54:40:ec:32:c7:08:04:17:55:7e:0e:72:5c:88:a0:ab:
         54:82:b6:56:62:bd:d0:0b:3b:b0:7d:0c:7a:f0:cf:be:ef:6b:
         fd:df:bb:70:15:50:2c:0c:cf:27:84:9d:9f:d1:a6:65:39:c7:
         b7:28:33:92:37:16:a6:62:a5:ca:71:f3:ee:e9:11:55:f5:aa:
         8d:16:8b:2e:75:d1:d5:cb:e1:23:06:4a:be:4b:73:f5:fa:4a:
         a4:55:e3:10:e0:10:24:83:8d:d3:d6:c4:92:12:0e:1b:33:1d:
         e7:a1:fd:32:4f:f5:3f:68:3b:67:80:04:db:71:eb:f0:f3:d8:
         75:2d:cf:a9:10:a1:3d:b8:19:7b:4f:05:95:cf:1e:70:ef:56:
         67:2c:2b:a4:97:e5:6b:0a:59:80:9b:71:1c:33:ae:3d:76:29:
         b0:dd:a7:51:53:0a:95:71:33:75:78:bb:93:03:df:3e:3e:af:
         6d:39:d0:f5:63:15:cc:60:82:9c:c8:7c:bf:f2:15:1e:77:1a:
         1d:e3:09:1c:d0:ab:45:4f:d7:af:9e:29:41:16:5e:f2:8c:14:
         9d:06:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----