Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133392e302f32342d3234203d3e20393234.roa
File:                     3134372e3136302e3133392e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          O0z3+/YWmRiqHKKYC32JHjeqvF/cCJWnZ8wWdmuiX4g=
Subject key identifier:   56:D1:99:62:C5:8C:AA:74:D5:25:0D:12:73:A9:76:0A:DD:64:F0:D4
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       5438B4A5AEF0ACE0D9F34F41AA6AAE34C6E1733E
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133392e302f32342d3234203d3e20393234.roa
Signing time:             Mon 01 Jul 2024 10:32:04 +0000
ROA not before:           Mon 01 Jul 2024 10:27:04 +0000
ROA not after:            Mon 30 Jun 2025 10:32:04 +0000
asID:                     924
IP address blocks:        147.160.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 02:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:38:b4:a5:ae:f0:ac:e0:d9:f3:4f:41:aa:6a:ae:34:c6:e1:73:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jul  1 10:27:04 2024 GMT
            Not After : Jun 30 10:32:04 2025 GMT
        Subject: CN=56D19962C58CAA74D5250D1273A9760ADD64F0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e9:d2:c1:72:4c:1f:4d:96:10:5a:5b:d0:3c:
                    27:bf:bc:d7:a5:c5:25:b6:bd:9f:d0:67:3e:c8:c9:
                    42:1f:37:4e:6f:40:72:4f:0d:ab:7e:2c:ba:3b:9b:
                    34:55:a5:ef:89:10:c8:c8:03:66:aa:e4:5f:2d:90:
                    5d:32:dd:d4:ae:b0:9d:6b:f7:94:21:5e:6b:33:41:
                    4e:ba:13:64:59:19:b7:60:f2:5d:cb:7f:90:9b:59:
                    2a:8f:c6:86:64:63:6d:d3:f3:b2:10:71:1f:40:ed:
                    ac:d7:aa:ad:aa:c2:40:2d:61:3d:c8:8a:8f:58:7e:
                    f5:6f:b8:9c:da:1b:0c:c8:c7:db:2f:dd:56:22:3b:
                    9a:07:2e:0d:72:07:18:b6:ae:04:b8:ba:ce:f1:75:
                    12:bf:bb:4d:b1:01:ef:23:c5:49:a2:d6:c0:a9:5a:
                    21:c3:05:8c:5f:dc:0f:bc:3b:0a:7e:98:eb:77:fa:
                    2d:7b:02:e8:3b:a3:07:fb:e8:e8:24:83:81:cb:0a:
                    5d:7d:6f:9c:c8:6e:e0:96:fb:fb:b0:ea:b3:59:df:
                    c2:2e:ec:1b:4d:ba:bb:9f:bb:bc:e6:4c:85:84:2e:
                    d8:2f:35:69:15:87:51:6d:23:74:99:ca:e7:9e:ff:
                    0d:a5:3a:d4:47:b0:f2:62:eb:c2:eb:21:86:aa:51:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D1:99:62:C5:8C:AA:74:D5:25:0D:12:73:A9:76:0A:DD:64:F0:D4
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/3134372e3136302e3133392e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:22:d0:99:f3:51:56:9c:82:ce:34:eb:d4:8f:01:51:71:af:
         20:65:59:7d:96:1b:4d:ae:e5:bb:82:2b:c4:9f:81:8f:1e:3e:
         9f:d7:77:12:80:fc:a7:94:6c:fc:75:b7:8b:1d:e5:09:97:66:
         ab:98:79:95:ec:47:c3:2f:af:e3:45:55:e5:16:a6:a2:af:61:
         40:0a:f4:28:cd:bc:54:c3:2f:83:70:4f:da:e1:ee:11:89:95:
         41:e4:72:ed:83:2c:89:b0:84:6b:f9:bc:18:0f:b4:4f:d8:94:
         00:18:41:b5:66:6f:96:6f:69:4f:2d:76:ec:f6:12:16:0d:62:
         8a:cc:5a:d4:92:80:02:e4:c7:f2:be:d0:c5:cb:d0:33:1c:9a:
         e5:02:a1:c0:66:99:2b:3b:00:45:9c:d7:48:6f:2a:0b:2d:79:
         4c:e2:9a:5e:b8:e2:16:9a:92:7b:bd:87:da:01:0b:15:13:5b:
         59:3a:1d:46:21:c5:dd:75:a5:63:0e:67:01:ae:fb:72:d9:19:
         4c:62:6e:98:21:81:47:8c:8e:19:8d:3c:fb:5c:79:7d:be:cf:
         b2:9c:47:41:63:57:eb:7a:e7:2b:fc:24:fb:a9:c9:7b:37:57:
         47:d0:64:2b:3a:24:d2:54:f4:c0:db:58:5f:7a:d4:44:28:6b:
         79:99:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----