Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630323a3a2f34382d3438203d3e20323130353337.roa
File:                     323630323a666166643a6630323a3a2f34382d3438203d3e20323130353337.roa (raw, json)
Hash identifier:          vP4U5mc5cZkrIQavSsoqXDyJKXQxmU0pdPp+F+HOrrE=
Subject key identifier:   E9:8C:F1:AF:0D:B8:F8:02:14:1F:4C:32:9A:2F:1B:51:AC:2E:DE:66
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       35F06546734BF9762E695B7350306F3630DC9EA7
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630323a3a2f34382d3438203d3e20323130353337.roa
Signing time:             Wed 15 Nov 2023 12:11:40 +0000
ROA not before:           Wed 15 Nov 2023 12:06:40 +0000
ROA not after:            Wed 13 Nov 2024 12:11:40 +0000
asID:                     210537
IP address blocks:        2602:fafd:f02::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 02:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f0:65:46:73:4b:f9:76:2e:69:5b:73:50:30:6f:36:30:dc:9e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 15 12:06:40 2023 GMT
            Not After : Nov 13 12:11:40 2024 GMT
        Subject: CN=E98CF1AF0DB8F802141F4C329A2F1B51AC2EDE66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:cf:72:8b:67:50:5c:f8:44:b6:29:46:19:
                    44:c8:3e:8e:83:f1:8f:bc:15:e4:76:80:ed:22:4a:
                    d4:59:81:2b:5a:64:85:18:52:46:88:a3:19:37:43:
                    92:28:43:f4:7b:0e:89:cd:a8:84:33:8a:e5:6e:c6:
                    58:42:e4:62:8b:76:ce:52:a6:ad:09:b5:1d:33:ec:
                    82:ed:46:d6:98:f9:61:90:55:8c:03:2d:a3:75:f9:
                    29:1d:f4:50:9d:79:b6:73:6a:38:80:6c:71:08:cf:
                    20:3f:24:cb:f0:de:72:40:37:48:5d:ee:d8:a3:c0:
                    c2:86:22:d7:42:a8:c8:fc:4a:df:00:27:ef:5f:c8:
                    98:50:71:b4:71:01:ea:58:2a:f3:b4:b0:53:9c:77:
                    17:7b:1b:72:71:f7:b5:b1:b2:4a:42:54:ff:c6:08:
                    d5:e3:6e:e4:cb:0d:26:91:a8:99:ae:71:f5:ed:03:
                    40:f6:69:71:86:dc:f2:0a:cd:5f:0e:a7:8f:2c:26:
                    3a:58:f5:78:bb:37:30:9b:83:83:5e:f8:e1:fb:ec:
                    ce:e6:b3:31:83:51:c7:33:02:57:4e:41:80:1b:df:
                    83:4a:4a:73:b1:19:f7:df:85:92:eb:90:94:72:77:
                    d7:84:6b:24:f9:1d:73:a4:16:ff:da:2b:f0:c5:2d:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8C:F1:AF:0D:B8:F8:02:14:1F:4C:32:9A:2F:1B:51:AC:2E:DE:66
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630323a3a2f34382d3438203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f02::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:70:29:79:49:88:0d:81:51:e6:66:98:17:6c:c6:7d:57:
         b8:af:6c:c5:5d:7d:b2:bf:c9:27:d7:74:73:e7:cf:84:95:a7:
         a5:1a:2f:f8:6c:59:fa:9b:7a:6b:5d:ef:71:ae:77:97:4b:1a:
         53:71:08:e5:fa:2c:d9:5b:28:87:0c:68:bf:b2:c7:07:4a:cb:
         1a:1c:ef:52:ba:b1:35:e2:44:2a:a2:69:29:4b:9d:24:33:9b:
         2c:7a:62:7e:24:78:2b:a2:c7:b4:0d:95:c7:af:9b:c9:63:c9:
         b6:cd:d4:5f:91:85:21:35:ed:fb:62:2f:75:b1:ae:a2:6c:8f:
         f9:37:cb:08:57:3c:a8:cd:e2:13:9f:34:c3:d4:9b:87:96:30:
         58:fa:0b:5d:b1:d7:bd:46:fa:84:43:fa:ea:3c:be:48:e4:f6:
         8b:82:c3:38:0e:13:4b:17:bd:e1:60:78:cb:53:35:a4:1c:e6:
         fc:50:25:b2:35:36:c0:fc:33:7a:d3:42:f5:61:1b:c6:69:69:
         44:05:60:28:93:0b:4a:f0:e0:ab:1a:26:40:8c:df:04:2c:bd:
         08:97:93:8d:9f:a6:26:a3:e4:b8:5e:12:8a:70:05:1b:77:53:
         83:3b:c6:ca:2f:f0:b4:77:1e:f9:35:c5:63:d7:05:d3:79:b2:
         24:b6:df:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----