Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS62563.roa
File:                     AS62563.roa (raw, json)
Hash identifier:          yFxu1LsXHpOwkOzzdUNAQpYS8V1q0A+GHDedbd+1SUg=
Subject key identifier:   21:FC:4E:6A:85:18:AA:54:E8:F8:CD:1A:2E:09:EE:96:BD:87:DC:68
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5D8CA233D27D9DF58A022CD88EB295E0A47AEE41
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS62563.roa
Signing time:             Wed 27 Sep 2023 09:28:39 +0000
ROA not before:           Wed 27 Sep 2023 09:23:39 +0000
ROA not after:            Wed 25 Sep 2024 09:28:39 +0000
asID:                     62563
IP address blocks:        2a06:1283::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8c:a2:33:d2:7d:9d:f5:8a:02:2c:d8:8e:b2:95:e0:a4:7a:ee:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Sep 27 09:23:39 2023 GMT
            Not After : Sep 25 09:28:39 2024 GMT
        Subject: CN=21FC4E6A8518AA54E8F8CD1A2E09EE96BD87DC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8c:dc:4d:00:9a:a4:99:c1:8b:68:ef:fe:6a:
                    83:83:85:02:45:f0:08:ca:35:4f:e1:92:20:56:c9:
                    39:2f:33:11:2a:48:e3:92:e0:7b:2c:13:27:54:64:
                    fa:17:5c:26:75:6e:6a:70:bf:07:30:e7:8e:e6:95:
                    f3:d0:7c:87:1e:39:69:3c:4b:41:96:37:a9:00:13:
                    b4:20:f0:1c:a8:23:a3:82:9a:8b:58:2c:48:58:40:
                    46:3a:44:10:32:86:5b:e6:83:a6:24:d5:8d:10:bd:
                    02:38:de:c0:5d:fd:bd:05:bc:c4:e7:f8:93:0b:4a:
                    f9:be:f0:59:5b:45:3e:1b:04:51:37:68:8a:be:66:
                    28:b2:56:ed:07:60:1b:d4:58:8c:c7:61:f4:2d:c9:
                    96:9e:78:fb:1b:72:93:a3:8f:18:36:98:53:59:82:
                    a0:43:ae:75:81:09:38:fa:c0:c5:46:6c:d2:c8:63:
                    d5:bb:b6:7d:54:fc:f4:7e:24:6a:7b:b3:d5:2b:5b:
                    de:a2:fe:af:ca:08:45:f0:b0:ea:50:74:0f:77:2e:
                    7d:5a:6d:6f:b5:a5:12:54:e9:5b:b6:29:6a:2d:e7:
                    24:3d:07:f8:07:b5:b0:84:f8:bf:0f:79:e8:37:90:
                    50:9d:d1:6b:c3:8f:56:d6:7a:89:b9:f4:54:93:3a:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FC:4E:6A:85:18:AA:54:E8:F8:CD:1A:2E:09:EE:96:BD:87:DC:68
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS62563.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:20:43:7b:05:88:6f:97:d2:4e:42:92:13:ff:a6:24:6f:45:
         c8:eb:16:04:cc:86:30:4b:a5:ee:c7:16:55:4c:92:a1:65:b7:
         ec:7a:61:e8:49:92:0e:ae:12:68:72:46:c0:7e:ed:52:30:97:
         98:c2:d0:a5:8e:44:8b:24:8e:bc:a4:1a:54:db:aa:ee:e5:ee:
         ec:2c:eb:82:d5:09:a0:41:d9:41:ab:b0:e1:dc:bf:ee:e0:8c:
         07:9b:26:b6:9b:8b:33:7a:d0:47:39:60:ca:2e:b4:76:58:57:
         a1:e2:14:f2:2d:ae:bc:c2:c6:8e:fb:f3:b3:88:f2:28:de:34:
         12:e8:37:b0:a7:4b:89:b2:84:0d:82:d4:a7:07:83:39:59:59:
         ec:20:2d:14:9a:14:0b:53:79:53:28:fd:5b:df:96:f0:59:06:
         5e:10:82:63:c8:cc:8e:d5:5a:bf:68:f0:7d:1a:53:16:42:cc:
         c7:c1:17:79:f5:d8:57:f3:44:8e:7b:01:ec:b5:d3:ef:3c:e4:
         90:ee:24:bc:ff:fa:02:e6:57:42:57:ba:31:59:02:a7:de:73:
         a0:5b:6a:33:f9:ad:79:ab:1d:7d:45:58:f5:76:3a:61:08:1b:
         92:bd:a0:f1:16:a6:2d:6d:37:e2:96:64:6b:43:7c:fb:f0:a3:
         47:fe:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----