Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/757fd902-ab85-4def-b303-6bd8719e0f02.roa
File:                     757fd902-ab85-4def-b303-6bd8719e0f02.roa (raw, json)
Hash identifier:          bpdT9VhG++kIUHiJi94ItahPlDYJWpeUzzosJFtelZk=
Subject key identifier:   1C:BB:14:84:04:22:4F:A5:5E:2E:0E:FD:EB:C5:F1:6C:2C:72:DA:0B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5F7BF3273848AFB1FC362CC1918BA73441D4B48E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/757fd902-ab85-4def-b303-6bd8719e0f02.roa
Signing time:             Thu 17 Apr 2025 16:07:25 +0000
ROA not before:           Thu 17 Apr 2025 16:07:25 +0000
ROA not after:            Thu 22 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dabb:e000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Thu 17 Apr 2025 20:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7b:f3:27:38:48:af:b1:fc:36:2c:c1:91:8b:a7:34:41:d4:b4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Apr 17 16:07:25 2025 GMT
            Not After : May 22 23:59:59 2025 GMT
        Subject: serialNumber=2a02e66a1650e86672f4fa0575372e9f0404294d3655a2b51200ac963d335af6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:42:e9:20:a5:98:0a:61:98:e9:21:5d:d6:
                    10:4a:16:e3:dd:6e:70:27:81:76:f5:1e:bf:bb:e4:
                    ca:a4:de:eb:f4:ec:42:07:3d:8e:39:63:26:63:44:
                    fa:b8:b0:73:a6:29:cd:76:6b:8b:1e:15:4f:e6:83:
                    60:53:bb:97:45:c0:5e:5a:4e:5c:f0:e9:34:7f:c2:
                    b0:40:a9:82:0b:dd:a3:23:f7:24:d5:ff:1c:ec:35:
                    44:b8:9d:8b:f4:e9:c0:5a:81:6d:d2:0d:58:7f:04:
                    e1:6f:70:34:2b:b3:24:c7:19:2d:63:de:a7:15:dc:
                    6a:48:b4:b1:98:e8:ef:40:eb:4b:d8:dd:43:ca:15:
                    a0:6f:cc:18:09:07:2a:e9:44:19:64:ee:bc:73:6a:
                    af:90:41:0e:60:34:63:75:18:b8:ea:0d:14:e0:a9:
                    98:a8:4d:18:60:f4:e0:93:03:e5:a7:8b:a5:c7:6f:
                    62:33:6d:06:69:d4:f8:be:98:97:3e:b9:c6:18:2a:
                    7a:86:74:9b:c8:70:50:95:e4:93:60:97:6a:05:c2:
                    4c:30:31:0c:82:3d:24:bb:74:74:1b:7a:f1:6f:87:
                    cd:39:53:8a:0d:a7:85:ae:17:fc:98:4a:af:0a:3a:
                    df:df:b7:78:f3:fb:19:13:05:75:40:b8:29:d3:ce:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:14:84:04:22:4F:A5:5E:2E:0E:FD:EB:C5:F1:6C:2C:72:DA:0B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/757fd902-ab85-4def-b303-6bd8719e0f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dabb:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:fb:ef:37:57:17:c3:28:d0:4c:8e:c3:d8:5c:4c:5a:5a:6e:
         8f:ad:ad:b6:e9:87:58:cb:2d:81:24:06:32:a0:af:0f:b2:e8:
         a7:50:a5:c2:6d:d3:71:ec:1f:d3:8b:00:da:0a:f2:b7:4a:cd:
         2f:d7:7b:f0:a5:ef:ff:d3:35:70:45:76:43:30:5a:b5:31:4e:
         0e:b9:2b:ab:93:ca:0b:c4:51:c9:aa:fb:f3:b4:b6:b8:aa:9c:
         d4:f2:48:88:a4:d0:44:fe:c3:f9:01:c9:c8:fd:2e:6a:45:ae:
         1c:6e:f0:ac:c6:f5:cd:a0:41:a5:c4:12:37:b4:67:5e:af:8f:
         9e:4c:3a:f0:84:ec:ca:af:c3:e2:8c:b2:2b:19:b1:7b:14:cf:
         79:25:91:66:c9:f5:00:d1:b3:b0:15:72:3d:4c:a4:b3:f3:1b:
         dd:ce:7f:02:1a:63:35:63:2e:79:62:cf:91:8c:ef:0f:d3:4c:
         ca:4e:26:fd:2d:82:02:9e:6a:79:a5:75:a4:97:de:63:27:f0:
         90:35:18:0c:41:a1:14:f8:d0:7c:dd:8c:ee:1b:87:30:9c:88:
         e2:06:1a:eb:3c:eb:66:9f:21:80:63:89:60:b2:e5:f4:c6:dd:
         9b:a5:af:ee:34:3c:dd:d6:43:85:09:27:a5:fe:c5:f0:92:9c:
         ba:97:d6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----