Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32322d3234203d3e20393234.roa
File:                     3136322e3232322e31362e302f32322d3234203d3e20393234.roa (raw, json)
Hash identifier:          hvH5UcevdhZMHQqWBrbwuSIZfifldogJuWKfeRb2rVg=
Subject key identifier:   52:3E:63:84:2A:A6:2D:AE:7B:25:B4:AA:CE:FC:D1:8E:55:4D:67:4F
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       2966838BFF55B870968DC409B5633498F6950BA1
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32322d3234203d3e20393234.roa
Signing time:             Tue 19 Dec 2023 23:55:22 +0000
ROA not before:           Tue 19 Dec 2023 23:50:22 +0000
ROA not after:            Tue 17 Dec 2024 23:55:22 +0000
asID:                     924
IP address blocks:        162.222.16.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:66:83:8b:ff:55:b8:70:96:8d:c4:09:b5:63:34:98:f6:95:0b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Dec 19 23:50:22 2023 GMT
            Not After : Dec 17 23:55:22 2024 GMT
        Subject: CN=523E63842AA62DAE7B25B4AACEFCD18E554D674F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:20:8a:7b:e5:19:f8:e0:14:86:66:a0:da:
                    5d:18:ea:a5:6c:f0:07:75:26:9e:b8:41:3e:13:29:
                    23:09:53:71:11:60:00:f5:5a:db:d4:ba:5e:4b:4f:
                    94:9e:96:10:7f:02:77:29:39:17:3a:05:4b:81:2b:
                    eb:60:cd:df:29:43:0f:22:ad:77:c8:0e:bf:a5:d9:
                    c5:8d:99:21:90:52:15:bb:65:04:35:8a:a9:c7:5f:
                    7c:d8:2f:8d:73:4b:26:0b:6d:aa:1a:1e:e1:06:82:
                    f6:06:e9:ac:5b:50:3c:5a:ca:7d:b7:a1:0d:e3:3c:
                    6c:5f:16:71:dd:e2:52:b4:99:d5:75:4e:1a:39:11:
                    9c:5e:8f:5c:22:65:d2:e6:ca:b6:09:96:c1:fa:e2:
                    07:93:26:f5:e0:cd:bb:2d:08:0d:26:3d:c4:a8:64:
                    8d:a6:63:a5:f0:05:29:21:37:3a:ef:21:b5:bb:f4:
                    c1:fd:43:4a:89:e3:49:7a:1a:ab:14:6b:0d:86:36:
                    4a:a5:63:7f:cf:4a:a7:be:c1:eb:ef:7b:d7:09:1a:
                    56:5d:db:64:3f:22:66:7b:28:f5:80:99:5f:bd:46:
                    5d:27:ec:4a:d8:52:f9:d6:4d:42:d8:7b:04:e1:a0:
                    05:14:ee:b9:fa:bc:ac:ff:d9:bb:e8:11:b0:58:02:
                    e7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3E:63:84:2A:A6:2D:AE:7B:25:B4:AA:CE:FC:D1:8E:55:4D:67:4F
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32322d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:75:05:bc:d1:86:16:65:4d:17:0b:26:40:a7:b8:86:32:59:
         32:8d:c2:a5:34:f7:04:db:4f:d6:0b:f0:ac:a5:48:4f:c5:6e:
         4c:40:ea:92:5e:03:25:3c:1b:b6:af:cd:5e:c2:ed:53:85:5e:
         5f:a7:9a:4a:ce:ea:a4:73:33:e2:d4:2e:cb:51:14:11:2a:35:
         12:9e:93:7c:a2:7a:f8:61:04:dc:6d:77:4f:e2:5f:ee:b1:99:
         e2:4f:ec:a0:df:26:dd:00:7f:21:cc:c3:b9:d1:8d:4f:97:0d:
         e3:00:cf:a4:b3:60:36:1b:c7:01:ff:d8:b2:a0:74:71:9a:3d:
         8a:b1:92:75:ec:88:4e:fc:8d:56:03:99:ff:82:36:e6:9f:b4:
         94:0e:a8:56:46:57:e6:2a:46:69:dd:0a:f6:e0:e7:6f:f8:05:
         d3:88:f2:92:89:18:f9:57:10:17:cc:c3:cc:8f:77:32:e3:4f:
         6e:7c:b0:2a:7a:de:da:21:65:81:3f:84:67:c9:c9:dd:1f:0b:
         70:1f:0c:1c:b7:8c:87:bb:cf:0b:26:42:86:8e:b5:6d:7e:1f:
         7c:85:cf:7b:c5:81:bd:53:fb:4e:be:db:31:68:58:d1:68:60:
         0b:8d:41:7e:3a:31:3d:fa:5d:3c:24:74:6c:2a:6b:cb:f2:96:
         98:9a:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----