Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e20393234.roa
File:                     3231362e3134362e32372e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          Q0g+lWaju0dXwe7IbWWOvF1g96laHrPX/2aJIpLKrnA=
Subject key identifier:   C1:B5:DD:6A:45:6C:50:DC:53:B1:3A:FA:A0:F1:AB:93:87:72:FD:2A
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       75BAFF56DF72CBFC0D6083CA9EBA4E3BEFB98157
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e20393234.roa
Signing time:             Sun 01 Jan 2023 11:07:47 +0000
ROA not before:           Sun 01 Jan 2023 11:02:47 +0000
ROA not after:            Sun 31 Dec 2023 11:07:47 +0000
asID:                     924
IP address blocks:        216.146.27.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ba:ff:56:df:72:cb:fc:0d:60:83:ca:9e:ba:4e:3b:ef:b9:81:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Jan  1 11:02:47 2023 GMT
            Not After : Dec 31 11:07:47 2023 GMT
        Subject: CN=C1B5DD6A456C50DC53B13AFAA0F1AB938772FD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:51:a3:c2:c7:39:7c:cd:72:51:47:d8:29:
                    50:5c:ad:e4:47:7f:8e:1f:80:9c:32:10:e1:3f:29:
                    58:e8:d6:75:e2:ab:cf:01:ef:bc:75:a0:0d:cf:6a:
                    57:82:7e:75:f7:e5:d1:53:ed:c9:1a:f7:5e:81:bb:
                    b3:e8:c1:ef:dd:5d:6a:69:3d:4b:eb:a9:c1:96:60:
                    95:65:13:ba:54:a2:78:98:ea:19:d4:fa:c9:ed:22:
                    7a:4d:dc:99:fe:c9:5d:96:47:49:20:b6:ab:67:13:
                    d5:9c:a5:bf:72:36:2b:35:d5:a8:31:81:d0:28:23:
                    33:73:88:ce:81:a5:25:25:44:07:7e:38:f6:5e:d1:
                    b2:d3:61:01:9c:ce:77:2d:be:a5:25:a6:b0:78:a3:
                    ca:e9:bf:e1:dc:b7:af:17:9e:83:c6:28:af:5c:e1:
                    74:68:f1:ed:cd:e9:78:f4:90:ea:e3:cd:99:65:2a:
                    83:c3:90:da:ba:e3:21:1f:18:29:65:8f:78:61:c8:
                    e0:93:73:04:47:90:47:a3:f3:b4:30:73:21:c2:d5:
                    f4:02:6e:3e:78:85:1d:73:f8:d9:6e:57:d1:89:20:
                    e0:b4:6c:ed:a3:02:61:4f:17:0c:72:88:2e:e6:cc:
                    33:fc:23:c0:fe:db:5c:64:77:bb:3d:eb:13:9f:c1:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B5:DD:6A:45:6C:50:DC:53:B1:3A:FA:A0:F1:AB:93:87:72:FD:2A
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32372e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:95:23:99:a2:a2:e6:4c:0a:d9:21:df:fd:ea:78:7b:f6:6a:
         bd:30:96:95:b0:07:d2:6f:e4:65:9c:b4:a4:97:84:c3:d3:c0:
         f3:63:ec:03:4a:6c:2a:63:e4:0f:c0:16:4e:cb:f5:18:2c:11:
         a5:39:af:d1:ed:af:db:54:d2:3f:fe:08:d5:a5:15:16:84:8a:
         03:05:43:fa:84:71:f8:f3:28:14:7c:ad:cc:ce:8d:ee:cb:0a:
         9c:65:64:70:9e:33:4e:00:4b:7e:b1:bc:97:6f:9f:28:54:b2:
         18:37:48:65:87:ed:4c:6c:39:6e:7d:30:8e:50:05:95:b8:3f:
         7e:81:a9:e4:1e:ca:7d:03:dd:3a:88:7b:30:a7:42:05:a2:e9:
         f2:d0:78:0f:34:92:69:68:84:db:35:63:e1:0d:80:66:ff:42:
         a8:d3:0a:91:58:85:e7:ba:b8:1d:24:1e:d0:63:e9:a9:dd:94:
         32:82:07:47:2f:91:f8:e0:2e:f4:8c:c9:09:d2:ce:7b:15:df:
         6a:de:64:e2:3c:12:e0:9e:ea:57:3b:28:9b:1a:d8:ca:5f:79:
         6f:d7:76:3e:b3:d8:98:7a:de:1d:62:66:ff:59:3c:4a:51:2d:
         8d:51:df:67:ee:84:96:3c:c0:86:77:18:fa:3b:b3:b2:a6:64:
         76:5b:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----