Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a323a3a2f34382d3438203d3e20323034333430.roa
File:                     323630323a666166643a323a3a2f34382d3438203d3e20323034333430.roa (raw, json)
Hash identifier:          AcS3HsMSPBzfEnLDAYFnnSbU5wpgY92NuLBhoYWmGa0=
Subject key identifier:   9F:DD:7C:97:6C:98:62:21:0E:02:30:4E:88:24:4F:A3:31:94:A3:84
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       2CC424CAD93CB6D55BD2BA83F540F97A94ACC840
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a323a3a2f34382d3438203d3e20323034333430.roa
Signing time:             Sun 26 Nov 2023 11:16:06 +0000
ROA not before:           Sun 26 Nov 2023 11:11:06 +0000
ROA not after:            Sun 24 Nov 2024 11:16:06 +0000
asID:                     204340
IP address blocks:        2602:fafd:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 11:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c4:24:ca:d9:3c:b6:d5:5b:d2:ba:83:f5:40:f9:7a:94:ac:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 26 11:11:06 2023 GMT
            Not After : Nov 24 11:16:06 2024 GMT
        Subject: CN=9FDD7C976C9862210E02304E88244FA33194A384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:f9:25:1f:90:3b:0f:0e:de:f7:16:a8:e8:
                    73:c7:78:3d:02:27:e8:49:41:00:2e:61:46:15:98:
                    af:39:5b:8b:ff:74:b1:45:97:94:0f:9e:e1:dd:73:
                    04:35:8c:39:87:a6:a4:a5:08:c4:0e:ba:9b:aa:08:
                    dd:56:41:5e:b3:ac:48:57:b0:02:b7:b8:26:2d:e6:
                    d9:d5:1c:ea:9e:77:d9:46:e5:62:8a:5b:0a:36:9a:
                    3e:f2:21:d8:02:78:f9:20:f2:3e:59:fd:e0:52:6e:
                    0d:d0:fb:53:9c:15:04:03:79:f0:e0:32:a0:c7:0c:
                    61:8e:bd:9e:65:cd:c3:dc:8a:29:9f:9c:88:0e:b2:
                    f4:e9:dc:19:f0:ab:53:61:40:76:26:5b:b4:5f:54:
                    ad:95:3c:13:04:5f:60:93:8c:21:59:cc:74:f7:b5:
                    51:0e:92:d0:84:9c:25:6f:b9:56:f5:f7:cf:ec:62:
                    6d:a0:dc:45:a2:1e:75:78:a1:2e:8d:45:41:d2:d0:
                    1c:aa:af:9b:cb:ce:46:24:b5:95:2b:a9:a4:39:3e:
                    79:5b:61:8a:db:95:27:3f:6b:de:cb:ff:29:33:43:
                    cd:cd:8d:c2:1c:dd:e6:7b:4f:d4:39:02:1e:26:38:
                    06:9a:fe:59:55:5b:b9:77:4e:ca:60:7d:71:eb:b3:
                    07:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DD:7C:97:6C:98:62:21:0E:02:30:4E:88:24:4F:A3:31:94:A3:84
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a323a3a2f34382d3438203d3e20323034333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:08:1e:ac:9f:31:50:e0:4f:5a:64:8b:e5:e6:6a:44:a9:15:
         66:d9:29:9e:4b:f8:49:55:8f:ba:5f:1b:4c:68:a9:a1:28:74:
         c5:26:b7:63:67:b6:69:94:c3:c5:7f:d1:fa:20:04:00:e4:66:
         97:60:15:77:fb:40:cf:ed:ad:06:f8:c7:7e:02:1a:c2:59:dc:
         a0:e7:e1:e1:d8:00:7a:f5:18:f7:cb:5c:71:bc:ce:2e:e2:d4:
         d8:79:17:fb:65:15:d0:ff:b3:4c:f7:f6:04:68:13:9c:a7:e8:
         5a:c4:92:b7:77:9e:e4:18:b3:e2:3e:32:70:6e:8f:92:ff:3e:
         7f:0e:0d:2b:20:32:9e:87:ef:4e:2d:d3:12:96:1f:6e:79:4b:
         39:65:1a:e3:ad:81:ee:46:70:17:b1:7d:fc:90:54:f6:7a:52:
         9a:dd:fa:c6:b3:d7:6b:32:92:02:25:20:de:07:9a:e8:db:ed:
         39:75:9a:a3:68:bf:20:c9:c1:ca:e7:8e:2b:37:d6:0a:b2:64:
         b5:33:1d:c2:82:0f:fd:9b:1b:0c:da:e5:c3:f4:47:38:56:84:
         db:60:5d:58:29:18:e5:1b:2e:6c:e1:c5:85:27:da:56:51:40:
         15:cf:b1:7b:30:2d:f1:5e:c0:95:73:e8:7c:ec:a9:9d:6f:2a:
         50:46:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----