Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662373a3a2f34382d3438203d3e203235383632.roa
File:                     323630323a666166643a6662373a3a2f34382d3438203d3e203235383632.roa (raw, json)
Hash identifier:          RkpAuPf6Fv29TWDZjguWd7llMdZJ9A9Wo+eVY3azg+4=
Subject key identifier:   38:4B:39:BE:C4:4E:55:AA:83:4E:14:DC:0E:8B:39:05:C9:16:E8:BA
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       6207FAD410DFEA4D396631AA6F6F7198574ED666
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662373a3a2f34382d3438203d3e203235383632.roa
Signing time:             Fri 16 Feb 2024 08:58:02 +0000
ROA not before:           Fri 16 Feb 2024 08:53:02 +0000
ROA not after:            Fri 14 Feb 2025 08:58:02 +0000
asID:                     25862
IP address blocks:        2602:fafd:fb7::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 02:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:07:fa:d4:10:df:ea:4d:39:66:31:aa:6f:6f:71:98:57:4e:d6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Feb 16 08:53:02 2024 GMT
            Not After : Feb 14 08:58:02 2025 GMT
        Subject: CN=384B39BEC44E55AA834E14DC0E8B3905C916E8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:13:08:42:0c:c9:85:1c:3b:41:22:e4:85:6e:
                    09:5a:7e:d6:18:07:d0:fb:6b:38:11:be:eb:a5:13:
                    3a:ee:5c:5a:f7:70:13:ca:d3:22:0c:6c:7c:3e:59:
                    f5:4c:f6:86:5d:ef:de:13:b0:b0:8f:f7:bf:e2:c3:
                    9f:e9:ae:7b:da:bd:bf:9a:24:7f:6d:55:d4:b7:34:
                    a8:46:a6:d2:c0:99:80:ef:45:ad:50:20:a6:50:1e:
                    fc:56:3d:37:5f:de:ba:63:66:c1:d1:b4:8c:4a:b6:
                    6d:c0:9a:c6:85:49:35:b2:5b:0b:e3:fa:b3:6a:0e:
                    94:6f:e5:69:24:07:8d:d3:c4:23:ca:c9:75:22:a8:
                    21:d2:be:a8:e8:e8:b6:d7:71:26:04:4b:68:50:78:
                    17:2e:37:ff:52:c6:b1:cb:a4:45:1e:b7:11:af:11:
                    ec:09:94:ae:4e:0c:c8:ca:27:ad:b4:92:f4:a0:d5:
                    f1:f7:c8:80:10:e7:64:ca:c9:15:b4:38:d3:0b:bc:
                    e1:fa:34:58:d0:6f:62:06:a4:02:f8:4f:5f:6d:61:
                    f2:7a:82:e2:fa:8c:b0:ff:26:a8:2a:b9:e7:cc:2c:
                    b3:42:4c:02:1e:6b:09:47:b2:bf:c9:9b:ff:ae:91:
                    fc:9e:48:55:29:2e:3c:b8:e6:41:bb:29:46:85:79:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4B:39:BE:C4:4E:55:AA:83:4E:14:DC:0E:8B:39:05:C9:16:E8:BA
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6662373a3a2f34382d3438203d3e203235383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fb7::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:c3:ec:38:0c:99:38:01:4c:68:33:43:46:73:09:e4:ea:fe:
         aa:07:31:06:40:9a:31:70:5b:da:b0:30:11:19:51:47:9a:47:
         14:11:9e:52:6e:1e:2d:bb:31:0c:06:5e:9b:26:25:dc:29:6f:
         63:0f:4a:8b:a1:7a:0a:5e:66:15:e0:e7:61:2f:a6:48:b4:5c:
         5a:92:51:25:84:05:a0:18:12:bb:1d:f7:bb:f4:aa:08:e9:34:
         69:c7:4c:f1:d1:f8:b3:2b:cd:67:ee:2f:aa:32:b4:f4:21:8b:
         79:d7:72:da:23:0a:1e:d8:e9:e0:02:64:60:75:6b:ea:dd:9f:
         54:fb:85:17:8f:92:40:f9:62:93:8f:ec:4f:e4:9d:d7:f9:1b:
         d0:bf:09:b2:09:b2:c3:b6:6d:4e:08:70:6e:b8:59:9d:01:41:
         83:ab:da:28:f5:ff:94:68:1f:aa:d3:62:74:15:83:7d:07:4a:
         3f:a3:3b:cb:c9:20:02:5a:c0:a0:49:9b:f7:c5:d5:a7:10:87:
         e1:e3:e4:07:da:5f:5b:af:7c:d3:32:ac:f0:ec:2e:63:39:de:
         c3:d4:a3:3b:f4:03:73:85:b6:be:6c:f9:f1:6f:ab:c3:74:87:
         05:eb:d0:32:0a:bd:5f:44:a2:97:e1:71:51:e0:5d:70:5e:66:
         7b:38:23:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----