Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20393234.roa
File:                     3136322e3232322e31362e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          zAr+XuiGMTeg91o+p4zWOvJ3mbQPQvJYQzt4CmxbBnY=
Subject key identifier:   E5:1B:81:3C:C3:DE:97:31:DB:23:4D:72:C1:46:85:99:FE:BA:CA:36
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       145744E2C5CFE6CDA92D4B1E980D51FF6381802E
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20393234.roa
Signing time:             Sat 30 Dec 2023 12:43:47 +0000
ROA not before:           Sat 30 Dec 2023 12:38:47 +0000
ROA not after:            Sat 28 Dec 2024 12:43:47 +0000
asID:                     924
IP address blocks:        162.222.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:57:44:e2:c5:cf:e6:cd:a9:2d:4b:1e:98:0d:51:ff:63:81:80:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Dec 30 12:38:47 2023 GMT
            Not After : Dec 28 12:43:47 2024 GMT
        Subject: CN=E51B813CC3DE9731DB234D72C1468599FEBACA36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:cc:98:f6:53:97:f3:c4:1a:ec:c1:dd:ef:
                    00:71:01:86:26:77:02:65:c0:fb:8c:5f:16:2e:4c:
                    88:c0:80:3c:c2:18:c3:1f:f8:c6:e4:0c:f0:6f:2d:
                    3b:2e:77:6d:97:2f:f3:15:d0:71:de:bb:0a:c1:d2:
                    be:74:48:59:c2:72:f4:08:fe:17:65:a8:38:ae:4d:
                    d8:ad:27:63:d7:d4:53:a9:2d:ac:51:c6:c9:5b:41:
                    96:9b:1a:5a:d0:66:ba:4c:27:a1:fe:21:e6:50:36:
                    68:51:23:8c:77:2c:ef:40:2b:29:ec:7e:70:f0:99:
                    a4:25:f6:60:28:f0:24:7f:f9:d0:57:60:b4:b0:40:
                    bc:b2:62:99:f6:fa:68:74:65:ea:6d:47:ce:91:45:
                    59:31:25:f4:51:0d:eb:58:c5:b2:5a:e6:6c:4e:1a:
                    c6:a7:fb:ad:9e:e5:51:0c:ca:c2:87:ad:5d:b5:bd:
                    8e:fa:b5:c6:22:ba:0d:43:a2:5f:b9:b8:88:70:d3:
                    61:8c:d9:de:11:42:31:07:d1:88:0c:01:b0:11:c0:
                    d7:14:85:15:6b:f9:59:51:68:af:82:12:53:11:84:
                    23:3e:f7:f1:f8:f6:17:48:0c:e6:1b:dc:f0:e2:09:
                    c0:f0:15:6c:92:ca:a0:7e:ea:08:e7:6b:5d:8d:41:
                    43:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1B:81:3C:C3:DE:97:31:DB:23:4D:72:C1:46:85:99:FE:BA:CA:36
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31362e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:03:41:69:19:f2:57:a8:37:5b:03:b7:07:63:d9:da:93:49:
         ec:58:0d:d9:80:7f:7b:fa:cb:7b:44:bc:08:7b:22:f2:02:5b:
         ba:21:c7:be:69:76:8c:63:e0:88:91:25:ac:79:08:17:db:a4:
         cf:0e:5d:13:1b:58:5a:19:0d:66:ee:81:b6:cf:f1:ef:84:f7:
         93:ed:a7:eb:3a:74:67:a5:2d:d8:72:14:f7:9f:9d:bd:80:45:
         2f:ec:bc:bb:55:60:52:1f:52:98:5e:30:61:52:e4:45:b5:db:
         74:0b:4a:c8:6a:f7:6e:c1:ef:5c:b7:36:5b:1a:5e:61:1f:1e:
         da:f1:66:6e:f7:7d:c1:d0:75:c4:96:85:df:d2:b8:d1:0b:2e:
         ca:8f:bd:c6:01:fc:e8:1b:c9:78:10:e6:58:a1:d8:d7:09:bd:
         26:a5:86:58:71:80:33:ef:51:6e:66:59:64:c0:02:95:81:f1:
         9b:87:08:49:26:dc:95:8e:62:83:06:94:a1:aa:4f:1c:22:0e:
         34:08:bb:04:ef:64:4c:c1:d3:c4:8a:cb:f8:22:a8:e7:a4:df:
         14:b9:68:89:ad:23:f2:a5:56:f5:f2:8d:71:31:91:58:8e:d3:
         97:78:5f:ab:04:25:d2:e1:1c:d4:b9:4b:74:3d:d0:2a:13:19:
         b7:7d:61:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----