Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e20333936393938.roa
File:                     32332e3133342e39302e302f32342d3234203d3e20333936393938.roa (raw, json)
Hash identifier:          q9eU1X0dsMRxoXkm1SAY6Cc6mg5qwFlegc1htmKVnzw=
Subject key identifier:   7C:69:51:40:59:BE:9B:21:45:F1:0E:92:C4:C1:54:29:3E:EC:4A:72
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       6B322E6D43AD85C3250D16FA1A86ED6AE0E7F6A5
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e20333936393938.roa
Signing time:             Wed 21 Dec 2022 22:19:50 +0000
ROA not before:           Wed 21 Dec 2022 22:14:50 +0000
ROA not after:            Wed 20 Dec 2023 22:19:50 +0000
asID:                     396998
IP address blocks:        23.134.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:32:2e:6d:43:ad:85:c3:25:0d:16:fa:1a:86:ed:6a:e0:e7:f6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Dec 21 22:14:50 2022 GMT
            Not After : Dec 20 22:19:50 2023 GMT
        Subject: CN=7C69514059BE9B2145F10E92C4C154293EEC4A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:53:a0:71:64:b3:97:33:4d:c3:e3:2c:49:
                    da:3d:9b:f4:ff:ad:e7:cc:bd:40:5e:25:a0:57:85:
                    1c:e0:f6:8c:a9:89:f0:1b:5d:8e:fe:53:1c:58:26:
                    11:81:fc:ce:44:b2:ee:e8:7d:cc:c9:59:de:59:7d:
                    a7:b6:40:0e:43:ba:8b:70:74:41:85:24:1b:15:c6:
                    ab:9e:d0:a2:31:25:d7:b7:89:ca:2e:57:d9:48:8b:
                    c6:9e:60:f8:70:25:78:a7:e2:84:46:5f:a5:08:ca:
                    2d:c8:79:f7:1b:fe:2a:be:fa:ee:d4:7f:06:b7:16:
                    02:67:2a:2a:b6:88:de:81:07:a9:22:4d:3a:6a:88:
                    20:50:76:8f:c4:76:00:34:05:b4:f7:b6:55:44:85:
                    6b:a3:f6:c3:06:c1:14:a1:ce:49:53:5b:68:37:4f:
                    4f:e1:7d:44:c0:72:6c:52:a2:61:e2:dc:af:77:48:
                    a4:b3:c0:ca:a9:6c:7e:d2:9b:0d:25:e5:c5:b0:5c:
                    77:9b:4e:f2:01:72:83:d8:05:06:ea:87:8d:c6:64:
                    25:45:46:58:bb:2a:35:04:87:6b:01:7e:ba:7d:39:
                    ab:f9:1d:69:da:f4:3a:3c:ba:ad:7f:3a:89:f6:72:
                    8b:e1:fb:0a:3c:3b:0e:95:aa:08:f5:21:e6:20:ae:
                    b1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:69:51:40:59:BE:9B:21:45:F1:0E:92:C4:C1:54:29:3E:EC:4A:72
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e39302e302f32342d3234203d3e20333936393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:5b:1a:b3:06:86:18:05:31:e9:2e:aa:2f:67:9b:0c:e3:
         47:60:fc:5d:5e:27:d9:68:8b:06:5d:2f:01:93:73:71:0d:71:
         94:6f:0f:55:b0:32:f3:13:43:c2:5f:ec:b0:f0:e0:11:11:a4:
         0b:e5:8d:96:e7:65:56:17:5b:b4:c6:0f:3d:be:fe:a5:94:42:
         5f:83:6b:b4:f7:e6:17:39:e0:aa:ee:5c:28:4c:56:23:34:f9:
         76:7a:e8:8a:10:7a:e6:8b:62:5d:2e:ad:d3:d0:4e:b3:bc:dc:
         81:91:f5:6f:17:8e:8d:49:3c:52:d1:d1:e6:a5:6a:79:4f:b6:
         86:b1:01:b9:ac:28:40:36:a4:2f:ab:5e:b2:f3:25:ff:56:2a:
         e1:cd:09:8c:02:cb:81:17:07:62:b7:08:42:6b:97:19:f7:7d:
         b4:3e:67:e4:30:02:b9:54:11:df:3a:67:0e:eb:2e:bf:be:92:
         86:3e:b9:bb:12:e3:96:7f:e2:55:95:4e:0a:e3:49:94:03:41:
         43:cb:98:d8:83:b1:f9:53:f4:62:b6:a3:f9:1d:c8:a8:4c:f4:
         40:a2:e1:24:2a:06:67:c8:d4:e0:a4:b0:a2:43:dd:d3:f9:51:
         b8:10:da:83:2f:24:6a:39:1e:47:76:59:d4:10:c4:b5:d3:f7:
         73:91:22:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----