Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203235383632.roa
File:                     323630323a666166643a6634303a3a2f34342d3438203d3e203235383632.roa (raw, json)
Hash identifier:          1r0o0v1PdHSTwScA2M4In3mx9CZylWIhH9vzUI9/ZGI=
Subject key identifier:   62:FD:CC:0C:B3:C1:A4:D2:05:7A:93:3D:15:78:F9:B0:BC:39:CA:C1
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       1F96ED50027F27F7B0789B985A355F3BB24E1E
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203235383632.roa
Signing time:             Fri 09 Feb 2024 07:58:01 +0000
ROA not before:           Fri 09 Feb 2024 07:53:01 +0000
ROA not after:            Fri 07 Feb 2025 07:58:01 +0000
asID:                     25862
IP address blocks:        2602:fafd:f40::/44 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 10:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:96:ed:50:02:7f:27:f7:b0:78:9b:98:5a:35:5f:3b:b2:4e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Feb  9 07:53:01 2024 GMT
            Not After : Feb  7 07:58:01 2025 GMT
        Subject: CN=62FDCC0CB3C1A4D2057A933D1578F9B0BC39CAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:0a:bf:cc:cd:db:95:44:b2:48:7e:0a:37:
                    8b:8b:b1:34:ea:82:78:98:ec:eb:04:99:b0:c8:5d:
                    60:4c:67:1b:5a:83:46:70:1a:6c:54:4f:96:22:5f:
                    2d:4b:8c:2c:62:f4:54:3c:26:55:55:85:fa:f5:fc:
                    0f:d3:a7:19:ab:86:e3:07:a5:2a:2a:f6:ab:de:c1:
                    b8:15:a7:e1:d2:b0:1d:3c:65:70:e9:25:84:b8:c6:
                    b8:c1:86:07:22:8f:91:c1:04:d5:d5:cb:e9:35:89:
                    0c:a2:50:0a:7f:64:76:3b:05:f5:9d:e5:76:c0:1a:
                    4b:8a:19:be:84:1f:8b:e3:52:80:32:04:13:3e:18:
                    4b:fd:8b:87:c7:00:7c:70:25:ad:2b:91:65:46:d5:
                    17:08:a8:79:6b:84:fc:50:9c:43:af:ca:bd:21:80:
                    8b:f5:43:fe:a0:ea:89:c4:51:07:0c:f6:61:57:f0:
                    ce:4f:46:2b:f4:94:b1:63:93:fb:c5:0e:7b:28:f9:
                    57:fb:ce:0e:fc:0f:75:b8:e9:ef:b3:da:28:c4:22:
                    ac:25:bc:34:5d:1d:8e:58:9b:c2:bd:e9:cb:78:ef:
                    81:5f:8b:89:d4:76:73:79:80:e1:61:b3:a2:01:33:
                    dc:c7:4b:8f:27:58:d6:0d:d3:cf:1e:4f:e7:9b:8b:
                    0b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FD:CC:0C:B3:C1:A4:D2:05:7A:93:3D:15:78:F9:B0:BC:39:CA:C1
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6634303a3a2f34342d3438203d3e203235383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f40::/44

    Signature Algorithm: sha256WithRSAEncryption
         55:37:18:ff:a1:21:23:33:c9:11:9b:9f:06:9d:b9:9f:2a:79:
         80:e2:87:06:64:56:3d:7d:3a:93:47:9e:3a:18:ed:ea:e2:dd:
         9b:63:1f:97:a0:90:cb:37:dd:75:ea:f0:c4:e9:95:62:0b:99:
         92:b0:a4:6d:d4:b4:1b:ef:ba:89:0b:94:51:8c:b1:cf:83:d2:
         a0:a6:9b:46:75:de:48:15:60:0e:ea:4f:ea:9b:b1:12:8f:d6:
         fa:c4:24:4c:bf:ab:82:4c:cc:e2:fe:51:9e:b1:41:79:5f:4c:
         bd:ec:c9:21:73:0d:45:6b:f0:7c:07:65:5f:ee:5d:69:7c:73:
         53:30:6e:30:d4:43:20:67:6b:5d:f3:72:94:60:9a:04:68:94:
         31:4e:01:b0:06:58:4b:38:9e:8c:94:73:ca:74:af:8c:3f:6a:
         98:d2:dd:c5:75:0a:1b:19:b8:2f:6f:3f:e5:de:ae:61:45:ee:
         85:9a:fd:47:5b:23:19:23:31:6d:6e:98:fd:f9:61:59:de:f8:
         3f:77:14:f6:44:26:84:57:d4:7a:a2:85:c9:e9:9d:87:cc:5d:
         11:2f:63:00:04:c4:05:93:40:de:47:5c:7e:0e:87:4b:c0:3d:
         e1:23:d1:bb:a7:4b:e8:52:94:66:09:aa:a0:e5:cd:1d:ea:67:
         fb:fc:a8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----