Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234392e302f32342d3234203d3e20393234.roa
File:                     32332e3134302e3234392e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          esRPPis9VDGctYfKjQiro2uf42lH/2Xl5W85AGtzqR0=
Subject key identifier:   26:99:36:14:B8:18:BD:52:9A:E8:13:40:A0:6B:14:F4:6E:9C:DD:BA
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       59F086D780360317D93C6E6A3B8E5A50622AFD94
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234392e302f32342d3234203d3e20393234.roa
Signing time:             Fri 03 Feb 2023 02:48:48 +0000
ROA not before:           Fri 03 Feb 2023 02:43:48 +0000
ROA not after:            Fri 02 Feb 2024 02:48:48 +0000
asID:                     924
IP address blocks:        23.140.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f0:86:d7:80:36:03:17:d9:3c:6e:6a:3b:8e:5a:50:62:2a:fd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Feb  3 02:43:48 2023 GMT
            Not After : Feb  2 02:48:48 2024 GMT
        Subject: CN=26993614B818BD529AE81340A06B14F46E9CDDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:cc:b7:51:c1:90:59:a1:75:e5:ab:01:55:
                    b6:05:10:e9:e0:89:65:45:8a:63:c5:ec:21:15:14:
                    db:ed:10:b3:5f:c0:b3:20:e0:18:b8:f4:aa:f9:80:
                    7b:4e:8c:1c:c4:0e:5a:1f:32:28:5b:cb:eb:7e:89:
                    67:fc:28:59:82:e5:2d:be:57:90:14:77:ba:f3:71:
                    7a:a4:c3:14:88:f1:b8:a2:de:da:4a:58:f4:1a:0d:
                    2e:58:4b:bd:fc:81:57:a5:28:39:28:9e:fc:a3:26:
                    b9:b0:18:d5:c8:d2:c7:98:2d:24:32:8b:ff:ce:2f:
                    3e:18:44:77:28:b3:22:ab:87:64:e0:40:ae:e2:27:
                    cc:1f:6a:f9:0e:3c:91:68:b4:56:39:c6:ad:13:65:
                    6d:0a:fa:8c:2e:ce:30:9a:a1:ee:9e:6f:d6:ce:15:
                    00:f6:28:74:80:b0:ef:4e:cf:a2:d8:d4:50:27:68:
                    6d:ff:51:64:2f:6c:29:c3:9b:6d:7c:f3:a8:b5:9e:
                    97:b6:5d:c6:05:d6:63:0f:c0:15:74:4d:6b:55:e9:
                    b1:e8:e2:bf:ff:be:c7:f8:6c:15:73:59:8c:ed:d9:
                    1b:97:c7:ff:18:2a:ad:88:d5:34:c8:35:63:5b:d2:
                    78:be:e2:ae:30:d7:76:7e:c2:fa:48:63:fe:fe:b4:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:99:36:14:B8:18:BD:52:9A:E8:13:40:A0:6B:14:F4:6E:9C:DD:BA
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/32332e3134302e3234392e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:3e:ee:0e:1d:cf:46:1e:51:19:45:69:b2:5c:c0:be:ff:d4:
         17:e3:cc:2f:db:e9:8a:bf:16:dc:07:4d:a2:6a:9c:d9:55:16:
         9d:f5:b0:91:bd:8c:1b:2f:a8:4d:61:60:8d:35:8f:1a:d9:d9:
         03:fe:b5:d1:b2:82:c5:59:a2:a8:e1:fb:7a:cd:a6:5f:ae:dd:
         66:3a:3d:a4:f0:e7:4c:5f:b0:04:4b:74:a2:ad:7a:e6:67:9b:
         a9:43:f8:f8:f9:fd:0d:e2:5f:28:30:5c:e8:b4:33:e9:aa:4e:
         48:e2:d2:5a:75:65:40:b4:c0:c9:4e:8d:1c:4b:07:29:65:20:
         06:c7:0e:c0:4d:dd:33:dd:da:9f:bd:bb:4c:8e:6d:ed:e6:e0:
         e1:15:fb:ce:6a:2f:d0:02:8a:c1:a3:09:64:82:1a:97:5f:f5:
         fa:be:dd:2c:cb:19:7d:68:e7:d9:c0:32:c0:a4:c9:d7:bc:59:
         08:8e:93:07:c6:3b:1a:c7:32:26:04:ef:7b:41:ce:9e:2d:01:
         c8:44:06:8c:8b:db:fd:ee:ee:1a:79:0e:3a:56:f7:6f:03:70:
         62:fb:e7:1f:9d:88:4b:41:5a:b6:b1:5f:25:6f:01:23:e4:70:
         4b:bc:d4:71:86:90:da:8f:c5:9b:3d:0f:1a:eb:ed:92:07:8e:
         41:09:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----