Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a313a3a2f34382d3438203d3e20323034333430.roa
File:                     323630323a666166643a313a3a2f34382d3438203d3e20323034333430.roa (raw, json)
Hash identifier:          FiCs4k6MEyde+oF3G2H/4DoiKvES5F5/fydEVnxoSUM=
Subject key identifier:   CC:89:A6:AD:7E:4E:BF:76:92:1E:BF:34:BE:4B:AF:83:7F:04:C1:9D
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       3EE73C61F3AA870E09C94E0A624EB7E293FB7E9C
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a313a3a2f34382d3438203d3e20323034333430.roa
Signing time:             Sun 26 Nov 2023 11:16:07 +0000
ROA not before:           Sun 26 Nov 2023 11:11:07 +0000
ROA not after:            Sun 24 Nov 2024 11:16:07 +0000
asID:                     204340
IP address blocks:        2602:fafd:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 11:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e7:3c:61:f3:aa:87:0e:09:c9:4e:0a:62:4e:b7:e2:93:fb:7e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 26 11:11:07 2023 GMT
            Not After : Nov 24 11:16:07 2024 GMT
        Subject: CN=CC89A6AD7E4EBF76921EBF34BE4BAF837F04C19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:17:af:eb:bb:15:93:52:d2:7d:32:78:2c:
                    14:29:6d:84:76:41:6a:e1:10:d8:a8:a1:7c:b2:cb:
                    6c:d0:a9:01:ea:3a:a4:bc:20:a8:46:1d:42:82:c9:
                    d7:ae:89:72:37:1f:d2:d7:8a:5e:b2:5d:de:0d:eb:
                    ba:da:4f:b9:13:51:b3:c0:a8:7c:0e:19:1c:00:3f:
                    a2:e5:e2:67:6a:ec:86:e3:37:66:fb:ea:fb:7c:97:
                    2b:24:97:fe:fb:4c:6c:99:6c:c2:89:2a:ec:ec:7b:
                    23:50:79:82:4a:82:21:ea:a8:4c:df:dd:75:01:d2:
                    29:eb:ab:80:dd:50:99:c1:97:f3:d1:2f:d3:7b:b6:
                    3f:d9:28:29:7d:9f:88:10:9a:7c:fc:c4:a3:0b:5c:
                    2f:f2:ee:e4:6e:ba:da:fc:ba:92:50:e8:b9:4b:21:
                    b3:9a:25:d9:96:d1:b9:77:d2:9f:af:36:ca:80:75:
                    59:81:c8:44:8a:c7:53:82:e4:f1:60:39:18:0f:e7:
                    2a:15:b9:26:38:9e:ea:e8:bd:f5:46:1f:a0:c3:21:
                    d3:e3:08:4b:d1:6e:b6:35:7d:d1:fa:2e:a2:f1:cb:
                    6a:6a:b0:25:f0:9c:d5:98:18:c3:6a:54:57:a5:83:
                    15:7b:50:6d:e4:80:f2:b2:c9:83:70:1d:5b:2d:2d:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:89:A6:AD:7E:4E:BF:76:92:1E:BF:34:BE:4B:AF:83:7F:04:C1:9D
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a313a3a2f34382d3438203d3e20323034333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:38:f9:7f:1a:e2:cf:ff:bb:3a:7e:fe:8d:92:3f:c9:1a:be:
         d9:05:92:9f:71:7e:73:38:68:f2:ae:9b:ac:48:52:4b:a9:61:
         74:47:4e:c7:b4:d5:30:2f:13:57:18:bb:4c:86:26:04:5e:68:
         78:00:64:8d:d5:10:cd:38:46:f3:ac:61:bc:7e:04:1c:c2:16:
         a2:39:18:dd:67:8c:c0:f5:5c:64:80:28:e2:a3:79:b5:43:98:
         bc:60:4d:1d:e1:3c:cd:b7:d0:c6:76:50:b8:56:6f:d8:45:15:
         4f:7d:e8:1b:57:64:a2:37:55:f2:3b:da:71:f1:e0:ee:68:0e:
         71:e6:d2:5d:bb:7d:72:9c:a3:0f:9b:0e:fc:24:48:d4:13:9f:
         ba:6d:64:4f:18:16:bc:4b:b0:e5:b6:03:88:3a:57:84:ea:64:
         e8:63:77:20:5e:f8:cf:40:9c:83:cc:55:1c:c8:00:4c:24:82:
         55:3e:01:9d:ad:f6:f6:57:d8:45:34:71:2f:d7:34:08:b0:45:
         fa:a0:0c:19:b0:df:c0:66:fe:f1:17:80:b2:ec:84:d8:75:d7:
         6f:d0:8c:54:a4:81:a8:dc:91:73:60:3e:c2:43:06:1c:06:d9:
         4f:72:13:16:ac:10:2d:01:57:e4:3a:14:15:06:9a:44:b7:d1:
         e5:db:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----