Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662363a3a2f34382d3438203d3e203230343733.roa
File:                     323630323a666166643a6662363a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier:          GJFa+L+I5sLVDNAd+rUK8BX0C4QfmYd1hS/8jZGI3CU=
Subject key identifier:   84:CC:43:73:FB:DE:AD:51:2C:22:49:D0:59:4E:72:BF:A8:DD:63:99
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       4EE857CD5FE16E816228892B1E60D616625FE71E
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662363a3a2f34382d3438203d3e203230343733.roa
Signing time:             Mon 05 Feb 2024 00:57:59 +0000
ROA not before:           Mon 05 Feb 2024 00:52:59 +0000
ROA not after:            Mon 03 Feb 2025 00:57:59 +0000
asID:                     20473
IP address blocks:        2602:fafd:fb6::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 02:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e8:57:cd:5f:e1:6e:81:62:28:89:2b:1e:60:d6:16:62:5f:e7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Feb  5 00:52:59 2024 GMT
            Not After : Feb  3 00:57:59 2025 GMT
        Subject: CN=84CC4373FBDEAD512C2249D0594E72BFA8DD6399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:b4:b3:64:36:1f:35:c6:d3:26:8c:2a:31:
                    c0:16:2f:d4:1a:e0:3d:f5:f0:f4:2a:cd:21:c3:b8:
                    94:86:71:7a:a2:85:74:4a:39:64:f4:a7:a4:7b:f4:
                    1e:99:f2:fe:74:d0:14:09:dc:01:df:8d:53:68:d4:
                    50:5a:67:60:f1:41:78:82:25:63:0c:f5:d6:a8:74:
                    ad:c3:eb:4e:9a:c1:c0:e7:52:9c:9f:e3:ff:eb:8c:
                    30:dd:e3:46:be:d2:39:e5:81:ad:a1:3c:c6:c0:62:
                    10:22:08:d3:34:cb:0f:4e:4e:f6:48:1e:8e:65:62:
                    83:48:c8:0e:80:4e:ef:b9:a7:e4:00:72:21:ec:4f:
                    7c:9a:3b:af:ae:89:c3:1c:41:f7:b4:62:80:9c:8a:
                    e2:d0:9b:7b:ea:66:90:23:96:f7:8f:99:67:6a:9a:
                    43:e6:23:f3:13:83:9e:36:e2:c1:15:eb:86:53:dc:
                    c2:c4:3c:cc:6e:a9:67:83:f4:b1:c3:0d:d2:19:fa:
                    bb:8e:ff:18:9f:f8:85:35:ee:6b:0b:8c:60:ae:cf:
                    42:ae:1e:0d:30:8a:09:14:a4:f4:7d:22:eb:be:21:
                    99:7d:33:b4:8a:cb:74:3f:21:a2:b5:fa:04:48:b0:
                    17:cf:58:b5:9b:b8:fe:8a:3e:83:f6:38:55:fd:03:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CC:43:73:FB:DE:AD:51:2C:22:49:D0:59:4E:72:BF:A8:DD:63:99
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662363a3a2f34382d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb6::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:69:c7:49:18:2d:0e:35:18:10:24:a1:82:0e:f6:f1:1a:7a:
         eb:68:d4:3c:f6:71:b8:20:a1:a0:b4:39:c5:82:74:a0:ab:52:
         be:e7:ab:df:22:3d:76:b5:ac:fa:83:66:b0:f1:87:47:56:f7:
         80:fb:c2:43:82:e4:37:62:f1:dd:fb:63:fb:73:52:7b:b4:2e:
         6c:01:68:04:d8:7c:c8:81:38:f9:73:d3:20:6d:62:70:db:05:
         0f:ef:6d:b0:01:ae:08:61:33:7f:99:70:89:8d:f6:50:7a:5c:
         94:3e:69:fc:1c:db:6b:c7:3f:b1:5e:52:68:97:09:d2:ed:cc:
         bb:e6:07:0c:8f:31:1f:e7:06:94:99:50:ef:5d:bb:68:29:48:
         6b:ce:10:c1:0d:f7:49:1d:02:cc:a7:48:5e:3a:ba:26:7b:fe:
         ac:c6:22:a0:c2:4f:8e:88:67:6f:a2:1b:3a:6f:53:c4:f3:bf:
         d1:48:de:99:5b:24:de:02:fd:37:c3:b0:9d:d7:c2:08:df:96:
         32:98:7d:a5:a7:49:46:00:4d:2d:cd:6b:a4:45:9d:51:1d:a2:
         a1:5e:56:e0:53:2a:45:82:6f:5d:e4:6d:05:7f:ef:92:86:60:
         20:c7:da:96:14:10:fb:7e:9f:a3:84:a0:2b:3c:db:59:55:a1:
         0c:4a:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----