Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e20323331323838.roa
File:                     32332e3133342e39302e302f32342d3234203d3e20323331323838.roa (raw, json)
Hash identifier:          bfXnbS+p8v9QMhoFTPPRzweUQkeqbivuqgQw010o9FU=
Subject key identifier:   2E:41:3D:3E:E8:E1:EC:C6:5A:8C:40:E3:BE:90:CC:AF:D0:E8:D5:08
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       47FFAFFE1AA2A007FA606C8E5988C43EB19B6E3C
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e20323331323838.roa
Signing time:             Sat 29 Jul 2023 11:07:59 +0000
ROA not before:           Sat 29 Jul 2023 11:02:59 +0000
ROA not after:            Sat 27 Jul 2024 11:07:59 +0000
asID:                     231288
IP address blocks:        23.134.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ff:af:fe:1a:a2:a0:07:fa:60:6c:8e:59:88:c4:3e:b1:9b:6e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Jul 29 11:02:59 2023 GMT
            Not After : Jul 27 11:07:59 2024 GMT
        Subject: CN=2E413D3EE8E1ECC65A8C40E3BE90CCAFD0E8D508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:ed:9b:c1:92:1a:4b:bd:84:be:18:64:3f:
                    18:51:d2:7e:61:41:04:17:b8:6d:45:49:4b:18:1c:
                    5f:e0:4c:89:e9:9c:92:24:ec:b9:1b:61:09:27:84:
                    6b:e8:bf:e5:44:ae:fa:57:9c:ab:fe:e8:09:68:3a:
                    94:63:86:19:58:21:f6:ca:0e:54:a5:25:62:e3:e1:
                    b7:12:3b:7e:ce:9a:96:77:d8:85:90:18:1e:78:65:
                    19:27:af:c0:cb:1f:07:6e:ad:85:be:7a:32:50:41:
                    d2:1f:5a:33:de:82:5f:bb:94:64:21:d7:e2:53:1b:
                    54:f8:22:c4:8c:9f:9f:70:c2:2e:f8:3b:e6:4a:fb:
                    b9:3d:f5:cd:52:4a:1f:cb:c8:4a:e9:28:13:ba:c9:
                    52:76:f3:ed:3d:00:e8:05:ae:e9:1a:ca:49:79:49:
                    ca:16:69:b8:c7:45:b2:a1:e9:74:18:b5:5a:0c:7b:
                    55:1c:ba:8a:43:dd:cb:a6:3f:2c:e7:2d:87:43:7f:
                    ed:08:34:72:84:3d:bf:20:82:ac:fc:53:90:71:eb:
                    36:18:95:3c:bb:78:3b:f4:d3:eb:93:49:e4:ac:77:
                    02:b9:37:b0:f1:04:43:4d:25:09:5e:08:f1:7d:f3:
                    5b:59:5b:58:8d:6d:df:7c:db:c4:2f:05:5b:50:64:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:41:3D:3E:E8:E1:EC:C6:5A:8C:40:E3:BE:90:CC:AF:D0:E8:D5:08
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e20323331323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:27:7e:ea:b4:a8:90:94:89:24:b3:c6:2a:3b:fa:a1:56:61:
         c5:77:0c:b9:65:b6:26:09:68:a3:01:4b:07:2b:be:8f:1c:f7:
         5a:61:07:df:62:0e:4a:e7:e4:ea:40:de:55:00:98:60:c3:3b:
         09:3f:77:da:a3:c4:ff:e7:80:96:cc:d9:d9:35:af:32:9f:ea:
         ff:74:46:60:be:04:88:4b:6f:32:78:fd:c6:67:e0:41:7c:6c:
         00:b6:94:7c:03:8d:01:9a:63:50:96:9f:5f:01:8b:90:78:8b:
         bf:cc:c6:95:58:15:14:10:a3:d5:12:ab:db:fa:35:1a:9a:78:
         d1:5b:27:6c:2f:05:70:aa:c8:20:40:96:91:08:7d:7f:4a:cf:
         c6:53:4b:78:9a:c1:c5:3e:60:fb:0a:94:56:17:03:bc:89:1b:
         d8:2a:75:76:05:ac:2c:e6:03:43:ce:e7:fa:71:42:b7:8f:db:
         d5:49:3c:99:4f:9e:e2:2b:3d:81:ef:ce:09:81:73:d4:5a:1a:
         7e:2e:87:a7:8b:7d:6c:64:20:4a:b4:a5:0c:5c:8d:98:13:74:
         fe:a3:41:75:cd:a3:a2:d2:be:14:4d:8c:3c:b8:e1:9a:4d:5f:
         38:56:8f:4e:a2:5e:16:38:d2:11:81:86:2c:c2:da:85:0f:67:
         7e:49:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----