Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31372e302f32342d3234203d3e20333936393938.roa
File:                     3136322e3232322e31372e302f32342d3234203d3e20333936393938.roa (raw, json)
Hash identifier:          ila1HjANO1FPlJfSOzHVXgHP7xaw7iaSebcShjUKWv8=
Subject key identifier:   EE:7C:26:98:71:C5:B6:57:7C:FD:27:79:6B:09:B6:1D:DE:BF:B9:5D
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       38DAF753BD4826CE2E85A782876C44CCE835BBD5
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31372e302f32342d3234203d3e20333936393938.roa
Signing time:             Thu 21 Dec 2023 12:05:27 +0000
ROA not before:           Thu 21 Dec 2023 12:00:27 +0000
ROA not after:            Thu 19 Dec 2024 12:05:27 +0000
asID:                     396998
IP address blocks:        162.222.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 23:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:da:f7:53:bd:48:26:ce:2e:85:a7:82:87:6c:44:cc:e8:35:bb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Dec 21 12:00:27 2023 GMT
            Not After : Dec 19 12:05:27 2024 GMT
        Subject: CN=EE7C269871C5B6577CFD27796B09B61DDEBFB95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:83:ce:6d:e1:0b:84:06:95:55:fa:00:ff:
                    a3:15:af:06:e0:5d:0e:e9:2a:b0:e9:9d:e6:5c:d4:
                    ad:81:ad:cd:95:b6:8d:53:4d:f2:d5:3f:9f:a0:0f:
                    65:a3:4b:09:6c:b5:b6:ec:25:06:9b:38:05:af:82:
                    8c:c6:bd:5a:39:ca:58:bd:0c:2b:d8:36:ae:74:75:
                    a9:4e:d3:af:63:e8:fd:e9:68:68:2c:81:99:1c:3c:
                    b7:36:41:ac:35:0e:e2:7c:d7:7e:59:14:f4:c5:25:
                    39:d8:ee:25:28:c9:0f:39:11:af:d2:24:8f:e1:a8:
                    f0:6f:94:24:f5:0b:06:e7:26:4f:85:61:b6:77:dc:
                    91:b5:68:5b:bc:fc:70:a5:8f:37:5a:18:9b:9b:25:
                    9a:25:d9:bf:bb:32:01:79:dd:37:7a:78:11:80:84:
                    c4:15:0e:a4:2c:08:7c:4e:7c:b5:75:13:8a:b5:e3:
                    5a:56:7a:97:22:26:41:38:51:bd:dc:c8:b8:b7:c2:
                    8e:5a:db:b5:9b:55:51:ea:8a:7e:14:fc:17:bd:6e:
                    72:ea:b6:f3:17:88:f6:bf:51:ec:07:f1:87:a6:a5:
                    f0:6e:21:da:8b:08:c2:dc:18:86:14:bf:da:22:a4:
                    fd:3e:a0:2e:64:3e:3e:bc:8f:33:82:a0:80:c9:78:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7C:26:98:71:C5:B6:57:7C:FD:27:79:6B:09:B6:1D:DE:BF:B9:5D
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31372e302f32342d3234203d3e20333936393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:72:28:b2:5c:c9:d9:17:71:f1:9f:68:8d:fc:be:11:ee:f7:
         60:a0:af:0e:f0:9e:24:75:bc:d8:be:11:b4:71:e4:d2:d3:73:
         96:88:4b:86:26:03:cb:ab:fe:f8:fa:1f:99:8c:3a:74:0f:68:
         ba:ac:2e:9c:4a:cd:00:1e:be:b3:5c:7e:52:a9:b0:20:1c:3e:
         94:e4:40:10:85:33:43:12:a6:60:22:28:2a:e3:e5:e3:39:00:
         75:a6:83:de:43:81:08:3b:6c:83:c7:79:9b:55:1a:73:65:82:
         fc:45:65:44:61:cc:33:70:b0:fc:20:98:8c:de:b2:f6:54:a2:
         e0:3e:a4:30:c3:11:67:eb:da:8c:78:7e:06:34:28:ea:99:38:
         27:43:72:5e:d7:a8:74:fc:29:63:92:ee:5a:09:d3:72:2b:17:
         ea:9e:78:ff:90:e1:36:b0:82:bc:a3:34:61:c6:9e:35:5e:2a:
         07:7b:07:89:af:44:da:ef:63:5c:65:f5:79:35:05:70:e3:b4:
         6f:e3:27:76:b5:c6:c8:33:38:59:4d:c2:15:06:8e:21:d6:35:
         b1:03:d4:ff:7e:e8:8e:aa:cf:63:61:2e:c9:42:d2:f3:7f:e1:
         76:a5:c4:7a:83:04:54:8e:de:bd:63:ef:d8:12:d6:48:cd:12:
         b4:c4:e1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----