Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a333a3a2f34382d3438203d3e20323034333430.roa
File:                     323630323a666166643a333a3a2f34382d3438203d3e20323034333430.roa (raw, json)
Hash identifier:          nNL8RPHetBXilp4DM6RSACY1UXxGUJdTWoYJz4Pd9AI=
Subject key identifier:   27:C8:C4:76:73:70:67:B9:85:B5:E6:CF:30:15:DD:E1:C2:90:B6:69
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       492390BDD7B64874751B053475A6EC5205F90E6B
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a333a3a2f34382d3438203d3e20323034333430.roa
Signing time:             Sun 26 Nov 2023 11:16:06 +0000
ROA not before:           Sun 26 Nov 2023 11:11:06 +0000
ROA not after:            Sun 24 Nov 2024 11:16:06 +0000
asID:                     204340
IP address blocks:        2602:fafd:3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 11:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:23:90:bd:d7:b6:48:74:75:1b:05:34:75:a6:ec:52:05:f9:0e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 26 11:11:06 2023 GMT
            Not After : Nov 24 11:16:06 2024 GMT
        Subject: CN=27C8C476737067B985B5E6CF3015DDE1C290B669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:3d:59:80:88:76:15:34:c0:20:17:38:0a:
                    38:82:ee:48:1f:60:b1:8f:db:17:3a:bf:c3:34:78:
                    67:f2:c7:5c:ff:d7:e9:04:24:8a:bd:0c:64:f3:d0:
                    23:e8:92:18:66:81:a4:94:2a:41:f0:2d:d9:9f:be:
                    91:71:14:18:9c:b0:95:6c:13:6e:e9:a1:f5:c4:a3:
                    60:ca:b7:19:f9:52:e0:7a:e2:3e:e2:5e:5a:fe:a2:
                    21:b5:a1:82:15:20:56:5c:6b:ae:9b:e1:f2:e5:a3:
                    ae:d8:c5:65:d5:3c:58:d4:4d:82:bb:4c:a1:7c:28:
                    12:c0:d5:ce:dd:6c:6f:8f:d2:91:3d:2a:73:16:c4:
                    68:87:0d:8e:b4:55:82:4a:31:6f:9c:18:0c:95:29:
                    64:bb:11:4e:a1:f1:9d:7b:fe:ab:e7:74:59:ed:6d:
                    13:02:ff:ba:61:33:c1:09:04:68:db:32:59:ed:07:
                    ab:de:59:01:d4:9b:5f:85:43:2d:c0:e9:22:00:a1:
                    d4:bc:4a:e3:a6:5e:4e:10:34:43:f9:a9:6e:00:82:
                    6b:a5:e5:de:37:79:eb:b8:18:87:fe:dc:92:df:ae:
                    c6:c7:1d:aa:04:e4:97:31:5e:4d:bf:ff:f4:23:01:
                    04:f9:11:69:8b:2a:90:31:67:18:89:2d:1d:99:f4:
                    6c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:C4:76:73:70:67:B9:85:B5:E6:CF:30:15:DD:E1:C2:90:B6:69
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a333a3a2f34382d3438203d3e20323034333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:27:9d:e7:59:56:d9:b0:85:16:90:31:97:fd:ff:c8:36:f0:
         a8:53:f9:f0:5b:29:fc:f9:68:aa:04:32:e2:61:21:a7:0c:c3:
         a4:92:c7:65:ab:36:2b:8d:15:24:75:d3:7a:43:de:e9:44:56:
         40:fc:00:9c:f1:cc:fb:01:81:85:72:19:dd:69:f7:aa:6b:2c:
         c7:43:7d:56:07:a4:bf:56:d1:de:3c:cb:27:60:e4:91:fc:13:
         15:9b:0e:e9:8b:fb:35:3b:92:3e:3c:48:a5:62:8f:7c:7f:21:
         2d:26:f2:5c:d8:0c:0a:36:ab:d0:e6:ea:71:73:f4:f1:82:c2:
         20:c0:cd:b4:1a:63:97:e1:e6:3a:77:e3:76:38:84:fc:93:27:
         b4:f2:1a:a2:cf:b1:e8:ec:a7:21:06:08:20:8a:f5:25:86:ac:
         4d:35:c7:7b:39:49:05:21:60:bd:80:3e:de:67:40:dc:cd:2e:
         f8:5a:03:41:7b:cc:db:b8:63:9c:18:27:62:09:99:ba:4d:c2:
         f2:c8:fc:1f:27:49:ec:73:f5:92:23:95:36:ea:68:cd:cf:ef:
         30:dd:34:9d:50:cf:f7:aa:75:26:72:c4:9d:6e:a5:4e:23:b1:
         30:dd:0f:54:19:13:4d:f4:2f:dc:4b:c4:37:54:60:e0:be:ae:
         32:e4:be:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----