Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e2030.roa
File:                     3231362e3134362e32342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          K5qjdNYDk1BZPelMpZc8XLKk1tCoBSwddcEKa7Z+uR8=
Subject key identifier:   5F:73:45:F6:97:75:E7:8B:67:49:7C:58:30:3E:BD:E2:1A:AC:97:D3
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       56DA183C58B566015E0FA394E23E65C3B7971B6B
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e2030.roa
Signing time:             Mon 07 Aug 2023 22:04:21 +0000
ROA not before:           Mon 07 Aug 2023 21:59:21 +0000
ROA not after:            Mon 05 Aug 2024 22:04:21 +0000
asID:                     0
IP address blocks:        216.146.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 12 Aug 2023 00:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:da:18:3c:58:b5:66:01:5e:0f:a3:94:e2:3e:65:c3:b7:97:1b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Aug  7 21:59:21 2023 GMT
            Not After : Aug  5 22:04:21 2024 GMT
        Subject: CN=5F7345F69775E78B67497C58303EBDE21AAC97D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:28:63:27:0d:2c:81:31:10:95:34:8b:0e:69:
                    da:3f:de:c2:d9:05:80:92:13:fd:25:61:7a:3e:a3:
                    6a:36:24:81:12:21:8b:54:b9:d0:f4:d3:8d:f3:53:
                    1e:19:a1:23:87:81:bf:95:ef:00:23:54:0b:e9:d1:
                    8c:8d:0d:8e:5b:c0:e6:0d:9b:73:19:d4:1d:9e:07:
                    90:b7:02:4f:19:75:7a:58:4b:11:bd:c9:d3:df:1c:
                    b0:c6:46:30:5f:66:a7:d5:27:2e:a6:86:9d:85:95:
                    d6:4e:b3:fb:22:eb:ee:87:6b:d4:ef:27:ee:0d:37:
                    6d:00:16:75:8e:17:46:a4:93:3d:a3:da:04:f5:b1:
                    b3:e9:d3:7f:14:e2:8b:89:06:fb:c8:ac:1b:4f:24:
                    a9:57:49:a3:10:92:31:bf:b7:c4:c6:b2:6d:61:97:
                    62:53:df:ae:ea:fa:a7:34:ce:5d:98:5f:9c:8d:9a:
                    3c:aa:e7:3f:e8:6d:07:90:43:81:3c:51:fc:50:96:
                    16:04:2e:89:21:a5:a8:28:24:6c:db:af:17:5e:59:
                    87:58:19:6e:f2:a4:e1:c9:8c:da:8b:75:24:98:a3:
                    1d:94:47:41:aa:df:5c:05:85:8d:45:cf:b7:95:ea:
                    e6:10:17:5e:4f:0b:d6:c5:a9:ca:4a:4f:73:c9:51:
                    ef:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:73:45:F6:97:75:E7:8B:67:49:7C:58:30:3E:BD:E2:1A:AC:97:D3
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:4d:c3:db:e2:c7:de:9f:0b:09:0e:02:c2:94:2d:96:06:a3:
         03:26:2b:ba:bf:2c:12:f9:f0:42:cd:5d:14:db:e9:8b:fd:5c:
         a1:93:b3:86:d7:36:93:c5:85:43:29:b5:f5:97:5c:c1:81:a3:
         6f:5b:5f:99:11:c6:4a:0c:df:7b:5a:ad:bf:d8:87:53:27:70:
         fd:16:79:c6:95:9c:ec:5c:67:77:6c:97:d1:57:e2:48:48:80:
         cd:b4:68:cb:f7:f3:f6:8c:b3:b8:c3:cb:95:bf:e2:29:30:5d:
         60:c6:e5:31:7a:ee:5d:d5:da:72:e2:2b:89:f8:69:94:d6:e4:
         70:b8:85:90:5b:bd:6c:36:c6:a7:db:57:56:b8:cd:6e:68:35:
         b6:c6:67:ed:99:d7:d0:83:ab:a1:2c:b1:1d:66:f0:64:3d:b8:
         2d:8e:1c:9f:02:6f:b4:79:9e:bf:49:2e:e8:11:68:34:8e:16:
         8f:48:11:13:be:c5:62:8a:8d:d7:e5:c4:ab:ec:4b:60:e2:38:
         2b:87:f2:8a:90:79:48:4a:84:ea:22:8d:1b:52:c4:14:a6:80:
         e9:81:e7:30:03:0d:24:a4:c5:df:c9:42:e6:d2:c4:b5:52:ab:
         fc:5f:8f:74:49:6a:81:e5:37:9a:36:62:ff:7f:bb:4c:b4:17:
         5e:f3:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----