Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e20323133323838.roa
File:                     32332e3133342e39302e302f32342d3234203d3e20323133323838.roa (raw, json)
Hash identifier:          tRIrHuem1d4jpJZ3seoXvEYLmHsjA38wcsNjybdWn4A=
Subject key identifier:   34:F1:A4:D7:2E:E3:B9:F1:C9:53:6F:89:C1:38:CF:61:C2:90:51:BE
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       6B33442E5B390814D9044BB515CF8492808DE5FB
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e20323133323838.roa
Signing time:             Sat 29 Jul 2023 11:09:57 +0000
ROA not before:           Sat 29 Jul 2023 11:04:57 +0000
ROA not after:            Sat 27 Jul 2024 11:09:57 +0000
asID:                     213288
IP address blocks:        23.134.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 01:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:33:44:2e:5b:39:08:14:d9:04:4b:b5:15:cf:84:92:80:8d:e5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Jul 29 11:04:57 2023 GMT
            Not After : Jul 27 11:09:57 2024 GMT
        Subject: CN=34F1A4D72EE3B9F1C9536F89C138CF61C29051BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:3d:58:f8:91:15:fd:65:05:68:48:07:3d:
                    99:6e:23:c7:ca:eb:e6:17:4c:b9:29:31:33:df:df:
                    29:b6:05:7c:d2:57:88:b7:69:a2:96:52:e4:11:cb:
                    ce:11:03:e3:1f:83:c5:90:b9:1a:a0:5a:b0:88:23:
                    51:15:00:08:da:cb:7e:b0:18:d3:98:6f:42:1d:65:
                    ba:4e:68:d8:b9:96:1d:51:a1:48:4e:84:15:5b:25:
                    fa:53:bd:f3:82:1a:ac:03:0c:47:af:1b:70:ca:08:
                    13:32:24:9c:0a:fd:e8:ca:94:83:ca:77:ed:c0:48:
                    18:b3:2c:b5:7a:7e:1f:b5:55:4e:1d:f0:b4:11:bf:
                    61:97:cc:24:79:e8:26:84:01:57:ed:6c:32:95:6c:
                    20:cf:7a:35:fd:6f:99:7e:6c:a3:58:d8:d6:84:e8:
                    04:a9:2d:79:73:b7:de:37:85:33:e9:a5:84:68:90:
                    8e:81:a4:31:eb:2d:45:e4:e8:ed:07:27:4d:81:5e:
                    2f:cc:5c:b4:41:70:69:2e:b3:c2:5f:9e:9e:8b:9f:
                    5e:a7:a3:68:bc:07:1d:f3:78:ba:eb:22:f4:50:44:
                    f7:31:ec:7b:31:e7:42:45:96:75:78:a8:8f:6b:1b:
                    53:d8:b1:32:a2:74:46:6c:c8:cb:fa:96:d8:5c:8e:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F1:A4:D7:2E:E3:B9:F1:C9:53:6F:89:C1:38:CF:61:C2:90:51:BE
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e20323133323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ab:80:bd:7f:aa:8b:4c:38:d8:4d:c9:7f:df:87:29:ac:4d:
         f8:3a:76:23:18:94:0e:50:76:17:70:5e:1f:f1:2e:a5:44:b6:
         05:5a:f4:c9:8a:d6:ce:36:7b:db:8e:b6:bf:73:98:d2:b7:8c:
         21:39:b3:ab:80:ac:f8:75:76:a6:76:ec:6d:60:3b:de:a1:7d:
         bb:0f:6a:b3:1d:5d:ef:6b:01:0e:2c:6f:a6:c1:89:16:ed:76:
         70:f0:50:33:ad:08:cd:cb:da:00:82:32:06:1d:0b:ee:07:79:
         45:df:26:2b:c6:65:11:1e:1b:3d:d3:3d:32:0f:c1:96:f5:43:
         95:72:8a:76:5b:91:f1:d7:08:9c:dc:d7:95:95:d8:ad:4c:f4:
         af:91:1c:55:00:bd:e0:1b:2e:cd:77:5f:43:b1:55:72:fd:e3:
         d4:08:71:2e:7d:70:c4:c7:0f:03:0b:cc:ae:f1:6a:16:9a:f2:
         2e:f9:67:61:66:b1:b5:b9:b5:7d:2c:36:e3:61:d6:b7:5a:56:
         80:21:18:c3:17:bf:00:d2:af:a6:d6:39:f9:81:1e:88:3b:c7:
         27:ee:d1:66:c0:97:1b:fe:64:a2:3a:44:5e:d0:5a:aa:36:76:
         b9:dc:1a:22:12:8e:37:7a:ac:bf:54:3b:ab:b9:f1:5e:f8:3c:
         11:3f:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----