Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6664303a3a2f34342d3434203d3e20333934343134.roa
File:                     323630323a666166643a6664303a3a2f34342d3434203d3e20333934343134.roa (raw, json)
Hash identifier:          vdAMKUQ1Jg3sA17bacn9g1/1+dbHiFfFpAUNyi59hG8=
Subject key identifier:   4A:60:EF:A2:DA:1F:24:34:79:18:D0:63:87:74:55:15:F7:F8:4F:47
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       038C19016FCA0F49715792217EA2EBEBBB2A8A3F
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6664303a3a2f34342d3434203d3e20333934343134.roa
Signing time:             Tue 16 May 2023 10:31:03 +0000
ROA not before:           Tue 16 May 2023 10:26:03 +0000
ROA not after:            Tue 14 May 2024 10:31:03 +0000
asID:                     394414
IP address blocks:        2602:fafd:fd0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8c:19:01:6f:ca:0f:49:71:57:92:21:7e:a2:eb:eb:bb:2a:8a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: May 16 10:26:03 2023 GMT
            Not After : May 14 10:31:03 2024 GMT
        Subject: CN=4A60EFA2DA1F24347918D06387745515F7F84F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:40:0c:46:f3:7f:3f:f7:15:e2:39:82:b1:
                    a1:92:6e:c3:ac:4d:d7:53:53:0d:b3:bf:f3:9a:b7:
                    72:bb:56:bd:73:a2:65:85:3d:73:70:58:56:84:40:
                    e4:88:88:a8:63:cf:53:5f:2b:af:7d:1c:12:75:d1:
                    e2:70:21:1d:d7:78:93:25:e8:e0:5b:cc:2c:43:90:
                    6e:40:c0:9e:39:f8:c1:d8:3c:e9:85:7b:f7:9b:61:
                    ac:67:04:77:09:95:78:1d:9b:55:02:6d:ef:f5:7f:
                    2f:9f:60:8f:b3:61:65:1f:7f:45:ae:68:68:a6:05:
                    d7:02:92:bc:96:f6:f7:df:cc:8c:b9:ee:82:42:19:
                    f5:12:aa:7a:19:3d:d6:44:13:03:60:60:85:4c:21:
                    e7:10:34:65:88:c5:2d:73:ca:e3:da:43:46:9d:ef:
                    10:7a:3f:70:21:ae:df:e9:cc:98:42:82:ea:18:25:
                    a5:c9:49:00:aa:06:ba:00:5e:4e:2c:48:30:a6:a3:
                    d5:f3:36:83:4f:90:58:3d:d5:1e:8b:c2:ca:9d:8e:
                    4a:e2:d9:99:0c:5c:1f:1c:24:6f:81:92:61:c8:e7:
                    b0:ad:88:74:a1:e0:f8:5a:f3:58:41:86:d0:c4:cd:
                    e0:8c:7c:fb:bf:6a:d4:e0:57:03:c8:50:4e:44:ec:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:60:EF:A2:DA:1F:24:34:79:18:D0:63:87:74:55:15:F7:F8:4F:47
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6664303a3a2f34342d3434203d3e20333934343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:fd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:bb:88:c9:0b:f0:e3:f0:ce:1c:6f:57:eb:80:01:2b:bf:f2:
         ed:a9:52:5c:57:56:e0:fa:1c:51:ae:32:e2:fa:c9:09:25:0f:
         09:21:98:08:cb:de:53:29:8e:1d:7a:05:39:2d:ba:80:51:f7:
         78:f0:43:98:e7:31:7a:9b:05:2f:80:2c:01:56:13:19:c1:89:
         01:2a:cd:ad:cb:3b:b6:c0:84:f8:cd:f7:fd:27:56:a3:3b:25:
         2c:cb:45:89:7a:69:56:2c:bc:0f:25:0d:a4:35:7d:9a:0f:7b:
         a5:99:d0:27:14:49:d2:37:ca:d6:e4:1e:8c:ca:44:fe:52:9f:
         b5:c2:91:63:de:12:af:7f:e0:84:01:a0:f4:6b:c1:5b:5b:27:
         33:ee:42:42:14:ba:dd:cf:d1:27:3f:2a:4b:57:50:95:6d:cb:
         4a:90:15:4d:77:5f:61:83:4c:9b:dc:4f:b2:59:aa:72:73:ef:
         7a:68:90:86:a3:36:e8:b8:e4:b4:94:80:85:e6:bb:87:d4:60:
         a2:e5:8a:ee:27:b7:9f:8e:55:7a:27:60:db:36:f1:81:4f:07:
         f5:bd:f1:43:30:51:e2:5f:5c:3c:e2:1f:f7:f5:f8:c6:b2:bc:
         cf:e0:fe:e1:bb:98:1f:fd:91:ad:95:2e:6f:56:38:9b:45:d9:
         27:8f:60:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org