Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a343a3a2f34382d3438203d3e20323034333430.roa
File:                     323630323a666166643a343a3a2f34382d3438203d3e20323034333430.roa (raw, json)
Hash identifier:          nGEt7yNn5rGZEh+Vr6bwocTkX8YKh8m0miuhM2pjM/k=
Subject key identifier:   0F:B5:92:36:B1:4B:FE:43:38:AC:8D:4E:39:C1:A1:BD:22:3B:38:19
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       6F968E487D3B9ED4F25B9AD11F0449BB6B4AC57E
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a343a3a2f34382d3438203d3e20323034333430.roa
Signing time:             Sun 26 Nov 2023 11:16:06 +0000
ROA not before:           Sun 26 Nov 2023 11:11:06 +0000
ROA not after:            Sun 24 Nov 2024 11:16:06 +0000
asID:                     204340
IP address blocks:        2602:fafd:4::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 11:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:96:8e:48:7d:3b:9e:d4:f2:5b:9a:d1:1f:04:49:bb:6b:4a:c5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 26 11:11:06 2023 GMT
            Not After : Nov 24 11:16:06 2024 GMT
        Subject: CN=0FB59236B14BFE4338AC8D4E39C1A1BD223B3819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:0d:3b:f5:ef:5d:e0:e6:3c:f9:d7:cc:61:
                    f0:b8:7a:3e:ee:c2:4f:17:c6:78:e9:0d:45:9c:53:
                    7a:cb:bc:de:2d:66:3d:57:a3:a8:81:0a:02:a6:d2:
                    83:05:8b:6d:bc:52:b2:3b:d9:61:98:c8:60:bf:5d:
                    0c:00:80:a6:8f:4b:8e:0a:d4:0d:8a:61:d5:dc:2d:
                    f9:45:9a:01:17:a7:1e:e8:0d:6c:ce:ba:0a:d3:6e:
                    f7:e9:f5:b2:9f:a5:62:8b:a0:93:9f:1d:91:56:d9:
                    ab:d5:16:e0:ae:ee:bc:ed:b5:6e:70:8e:d0:b4:96:
                    ca:bd:4b:66:fc:ef:fe:67:dc:d6:2a:ea:37:4b:34:
                    61:4a:a0:dd:0a:01:8d:5b:40:07:ba:de:be:a6:78:
                    49:be:0a:a2:28:6b:8c:4f:6f:a2:45:bc:2b:6e:3c:
                    ea:59:66:a3:92:da:fa:5c:96:4c:07:71:6f:79:da:
                    04:d4:7e:76:e6:55:c3:75:62:87:39:99:e6:ad:19:
                    da:c5:71:f2:43:b4:50:4e:1a:d0:fb:b4:d7:28:8f:
                    02:ac:3d:1d:2c:5e:bd:52:a0:dc:d1:3b:72:8e:73:
                    35:95:cc:cd:2e:da:84:f1:27:c4:c7:3c:7d:70:57:
                    5f:ec:d7:e8:02:da:74:e2:88:5b:32:52:0f:6e:74:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B5:92:36:B1:4B:FE:43:38:AC:8D:4E:39:C1:A1:BD:22:3B:38:19
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a343a3a2f34382d3438203d3e20323034333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:d4:4f:a0:7a:9f:84:42:9a:87:99:43:8f:90:4e:6d:19:68:
         41:2c:42:f6:f9:a7:fd:e3:52:f6:05:bc:64:7c:90:6c:ba:f3:
         20:ef:ea:a0:ee:a9:30:76:f4:85:4e:bb:df:1f:3f:4f:bc:74:
         b2:c4:47:49:c2:bf:3c:f6:ca:3f:8c:b9:c0:96:7e:ac:f6:40:
         5a:a6:4d:f3:7f:ba:7f:e1:48:d4:5e:6e:af:f3:5b:0d:db:55:
         89:84:6d:b6:a0:1d:eb:06:f8:ee:72:01:8d:d2:ce:6b:f6:b5:
         0e:ba:96:20:f3:77:94:9d:c8:a9:fc:6c:96:f7:0c:ef:b2:b8:
         81:87:ff:7c:3d:02:92:bc:54:c3:c6:26:66:5c:4a:fc:08:f9:
         37:83:f9:54:fa:1d:20:5f:e6:24:56:96:85:46:6b:16:44:49:
         33:3a:0d:e5:0c:c2:89:cb:70:0a:61:75:9c:81:a4:fc:18:23:
         43:7e:c8:7f:be:fd:f6:36:3e:56:ab:3e:f6:9f:dd:1f:33:b1:
         9c:f4:2f:40:52:83:9c:44:fc:0e:98:3e:ac:d0:c9:aa:62:e5:
         b1:30:79:9e:52:58:bc:e7:c6:d3:b3:41:0d:0a:75:40:7e:07:
         68:90:a4:34:70:ca:91:66:74:d0:b0:f3:55:89:39:33:9d:85:
         55:df:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----