Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630383a3a2f34382d3438203d3e20323033333333.roa
File:                     323630323a666166643a6630383a3a2f34382d3438203d3e20323033333333.roa (raw, json)
Hash identifier:          zMP+cf94yKxYfpgPiL1c7sOU9dYzmejyUI1EIdeLQMM=
Subject key identifier:   F0:EE:75:40:51:97:17:23:CE:13:32:6E:B8:39:D5:21:B0:20:E6:80
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       041D17D4A0FEB81739B2ADCEE88306F054BD9BBD
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630383a3a2f34382d3438203d3e20323033333333.roa
Signing time:             Wed 15 Nov 2023 12:11:40 +0000
ROA not before:           Wed 15 Nov 2023 12:06:40 +0000
ROA not after:            Wed 13 Nov 2024 12:11:40 +0000
asID:                     203333
IP address blocks:        2602:fafd:f08::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 02:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1d:17:d4:a0:fe:b8:17:39:b2:ad:ce:e8:83:06:f0:54:bd:9b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Nov 15 12:06:40 2023 GMT
            Not After : Nov 13 12:11:40 2024 GMT
        Subject: CN=F0EE754051971723CE13326EB839D521B020E680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:26:16:d2:8d:90:cb:74:f3:36:45:dd:a7:
                    a7:fe:dc:88:cb:87:75:b1:a4:c9:b4:cc:f3:c0:f2:
                    de:3a:e3:e1:66:7a:e6:6d:da:41:dd:ee:86:5f:9c:
                    24:0b:a5:f8:8f:f4:78:e5:85:66:e0:42:a9:ba:44:
                    f1:dd:5f:91:95:14:6c:59:02:f6:86:ba:4e:b5:bf:
                    bd:f8:e2:43:4f:7f:85:93:06:23:55:f0:f8:fc:c6:
                    cf:9c:3c:db:9f:a2:4f:91:00:30:72:12:dc:ec:0c:
                    d0:dc:8d:19:9d:9b:fd:6d:96:e5:e2:2b:c1:47:bc:
                    a8:3a:cd:3b:6b:13:ac:23:b8:14:e6:dd:84:f4:46:
                    87:5c:97:69:44:84:61:96:74:23:00:a0:44:24:c4:
                    10:2d:2d:09:38:8b:f0:c5:04:9b:3e:ed:96:7a:bd:
                    0b:65:cd:27:ae:f8:8e:07:27:e8:2f:85:a3:aa:13:
                    c0:e0:f4:d1:32:5a:3a:fa:9d:37:b9:4a:52:63:e6:
                    85:c6:5b:b0:97:55:90:ae:5c:26:19:4e:24:21:a8:
                    f0:34:ca:a1:21:39:7c:bf:6d:82:95:98:60:ec:19:
                    c3:72:7a:d9:30:56:e1:11:b4:62:be:6b:8e:2f:31:
                    a4:99:2d:d4:d7:2b:97:07:3c:4d:7d:6a:08:be:a3:
                    a5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EE:75:40:51:97:17:23:CE:13:32:6E:B8:39:D5:21:B0:20:E6:80
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630383a3a2f34382d3438203d3e20323033333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f08::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:84:ea:40:22:5e:30:42:0a:f8:e8:a2:e2:44:8e:9c:bd:98:
         78:e4:23:03:d7:72:ca:8f:62:8c:4d:ba:c9:83:da:22:66:0a:
         67:b9:9e:03:d2:47:1e:b9:e5:b8:66:42:dd:73:a5:14:9f:e9:
         4b:4a:44:1d:b2:2f:ad:51:0d:49:d7:b1:65:0b:5c:79:ed:6c:
         ff:f4:8b:6f:5f:fa:2b:5a:94:30:8b:3f:47:a4:35:ef:4a:a7:
         11:4f:24:19:be:f1:f9:e4:b6:ba:a1:2f:16:95:66:fa:c3:df:
         6a:d9:35:26:e8:a8:df:3c:2f:fa:92:11:d6:8f:19:36:9a:ec:
         5f:36:a1:bc:57:1c:42:10:f2:ef:54:9d:ff:5f:5c:2d:e3:31:
         ad:64:44:f0:a9:29:79:f8:30:09:4e:cf:19:02:66:0b:2c:a9:
         8e:43:87:58:78:c4:3d:1f:4c:22:cd:66:4c:cd:0f:ba:30:13:
         67:13:24:1e:87:eb:be:e7:b8:54:65:a3:eb:53:22:77:d9:38:
         e0:af:df:b9:d6:5a:bd:c4:0a:44:ed:a5:aa:df:59:c1:c3:d9:
         e0:73:26:81:73:17:5c:d0:4f:d1:46:db:72:10:07:e1:28:d4:
         26:06:4d:ed:0f:72:a6:07:23:e4:0a:7a:fe:1c:6a:e3:e6:ba:
         19:f3:75:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----