Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630303a3a2f34382d3438203d3e20323033333333.roa
File:                     323630323a666166643a6630303a3a2f34382d3438203d3e20323033333333.roa (raw, json)
Hash identifier:          m2+mLc0t3Ka9nX+/lK2BUxZw+S8a0RwbBNpzdqOm8MY=
Subject key identifier:   A5:A1:97:7B:53:8D:D2:6E:E4:A8:C2:C0:CB:80:85:D4:D0:D0:B5:D7
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       3D6D25A5B6683F0FE917F0FB61E4E5AF604E093C
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630303a3a2f34382d3438203d3e20323033333333.roa
Signing time:             Wed 15 Nov 2023 12:11:40 +0000
ROA not before:           Wed 15 Nov 2023 12:06:40 +0000
ROA not after:            Wed 13 Nov 2024 12:11:40 +0000
asID:                     203333
IP address blocks:        2602:fafd:f00::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 02:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6d:25:a5:b6:68:3f:0f:e9:17:f0:fb:61:e4:e5:af:60:4e:09:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 15 12:06:40 2023 GMT
            Not After : Nov 13 12:11:40 2024 GMT
        Subject: CN=A5A1977B538DD26EE4A8C2C0CB8085D4D0D0B5D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:ee:e7:85:43:a3:38:89:a0:fe:14:37:a8:
                    d7:85:7f:61:15:77:89:4a:25:e8:bc:3c:c6:3a:4e:
                    80:8c:7b:64:66:2b:ae:6c:0d:47:72:29:b7:aa:83:
                    08:a1:46:fa:9d:99:c0:0d:f3:9e:59:e2:80:4c:46:
                    1a:cd:b0:c0:87:15:2d:fd:22:ad:ae:e5:42:65:0f:
                    2b:67:a4:08:50:d2:ca:bc:6c:7d:af:91:76:ac:d0:
                    ab:df:a9:05:37:b3:5a:e6:66:7c:6c:5c:5d:21:ae:
                    c9:ae:f4:bd:b8:4a:5b:51:c0:0d:09:e8:4e:44:b0:
                    43:be:90:5b:3a:14:2a:37:b2:11:db:46:6e:c4:31:
                    e4:7f:f9:69:cd:e2:b4:92:f3:c5:3c:9d:e1:71:79:
                    0b:09:44:21:9b:26:02:cd:f8:a5:ee:e7:f4:78:00:
                    1f:c7:cf:ff:12:87:56:c2:43:28:e5:1f:ff:62:58:
                    ee:46:fe:55:16:0e:58:35:26:84:e8:2d:13:ea:d6:
                    cc:78:57:fa:ca:b8:fa:89:9f:35:06:57:c2:95:44:
                    9a:07:c3:0c:85:64:44:12:74:57:07:6b:20:be:87:
                    a2:cf:45:a0:2f:9f:40:3b:68:59:d9:00:92:d6:27:
                    57:91:7b:49:30:cd:49:33:22:31:79:80:cd:a0:58:
                    4a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A1:97:7B:53:8D:D2:6E:E4:A8:C2:C0:CB:80:85:D4:D0:D0:B5:D7
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630303a3a2f34382d3438203d3e20323033333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:a1:41:d8:20:63:7e:c8:8b:96:b1:d6:e2:be:81:c0:87:b9:
         cb:9a:5c:17:b9:51:10:3a:4b:fd:2b:4a:0e:a9:f8:6c:ad:ff:
         84:19:a4:7f:e1:77:1d:45:66:d3:70:cb:e2:26:6f:e6:02:1c:
         11:bd:23:ea:99:39:5e:84:de:d9:23:78:a5:65:b1:7e:15:27:
         1a:ef:59:4e:7f:b7:d6:9a:dc:36:f8:e5:a6:8a:9a:f1:75:ed:
         b6:af:41:c0:86:57:10:21:17:2e:18:1d:9d:6d:19:55:78:c0:
         bf:ce:1b:65:48:3d:e4:ab:26:98:2b:a2:f5:ad:9b:bb:1c:aa:
         3e:39:27:5e:50:21:b3:54:42:0b:fe:aa:1d:2e:9e:11:e6:ef:
         b5:c5:eb:6e:da:b2:8d:e9:73:af:4b:90:4e:fc:ab:d3:2f:3f:
         71:43:33:a9:20:76:5a:05:70:9a:99:2a:3b:63:ea:85:a6:c6:
         d0:29:9b:ed:91:95:2d:3d:52:92:36:88:aa:f2:25:1d:1a:41:
         eb:a8:7e:22:bd:c5:30:50:9e:48:36:41:7e:ae:f6:69:f5:a4:
         e6:27:a1:61:91:85:a4:b3:c6:28:c4:51:c0:ab:de:9c:c8:f7:
         5e:b4:ea:a7:cc:92:01:70:a0:5d:e3:1c:ea:d3:b9:44:bd:78:
         d7:4f:1b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----