Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddfcf121-0154-4bc3-ad5a-0d64482466dd.roa
File:                     ddfcf121-0154-4bc3-ad5a-0d64482466dd.roa (raw, json)
Hash identifier:          ZQ+PblrFD9x+gXtJ58wjmJSxuaCz+Y3KC39bF+8lZhM=
Subject key identifier:   09:AE:70:21:EE:39:D1:6A:58:99:61:4C:26:9D:23:B2:E4:A7:A0:34
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0A2FE71C3A51940CC260BE14F4790CC0661F1364
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddfcf121-0154-4bc3-ad5a-0d64482466dd.roa
Signing time:             Thu 17 Apr 2025 16:08:56 +0000
ROA not before:           Thu 17 Apr 2025 16:08:56 +0000
ROA not after:            Thu 22 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daee:f000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Thu 17 Apr 2025 20:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2f:e7:1c:3a:51:94:0c:c2:60:be:14:f4:79:0c:c0:66:1f:13:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Apr 17 16:08:56 2025 GMT
            Not After : May 22 23:59:59 2025 GMT
        Subject: serialNumber=a8ff2f5ae37da0de60984d93154d396b049382df5da7510f767a8a7991421ad8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:aa:25:5c:0c:ad:6f:04:57:4a:50:92:6c:34:
                    8d:87:d4:a0:7a:a0:76:2e:1b:4d:1b:54:5c:bf:04:
                    63:c0:b7:5a:0b:8f:34:c9:8d:e6:7a:83:4d:d6:f5:
                    07:3c:c5:d5:f0:74:5e:46:2b:64:cd:eb:0f:e8:3f:
                    75:7c:5c:72:66:4d:b6:87:50:20:99:c8:89:c4:c5:
                    bb:97:83:42:23:c9:8e:82:9f:c5:37:c9:9e:9a:bb:
                    43:8e:ee:4b:19:a2:30:60:93:d3:0c:a6:55:93:02:
                    89:3e:20:92:4c:7d:1d:15:3b:c9:0e:4f:50:9b:fc:
                    49:da:6a:73:24:66:80:0c:93:41:e1:49:fc:b1:f5:
                    64:46:3b:56:1e:71:80:73:06:5a:57:85:9e:cc:65:
                    f6:02:77:ab:4e:3f:86:bd:70:b3:b5:5e:40:ce:ca:
                    9f:8e:1d:29:0e:88:dd:da:7e:01:3d:b6:52:d5:ea:
                    31:bc:8a:a1:c5:b2:d2:4c:29:66:91:52:36:a7:bf:
                    3f:1c:4d:85:98:df:e3:10:41:05:19:2a:67:de:b6:
                    bc:ed:2f:33:b7:29:a7:ba:a5:49:7c:e7:3f:9f:9f:
                    22:e7:a6:a8:3a:77:fd:d7:52:f4:e5:01:75:92:44:
                    1c:86:a5:e3:53:28:91:fb:28:f2:59:74:ca:b2:fb:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AE:70:21:EE:39:D1:6A:58:99:61:4C:26:9D:23:B2:E4:A7:A0:34
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddfcf121-0154-4bc3-ad5a-0d64482466dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daee:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:ce:78:df:f3:5b:c2:7e:a2:be:c8:3a:c6:90:3e:7c:2b:c2:
         2a:57:84:a2:a3:31:06:81:55:9b:ce:dc:16:1e:76:13:44:91:
         b2:43:c8:e4:04:f0:b1:4b:b0:e8:ea:a1:fa:cd:db:3c:a0:7a:
         89:2f:6e:e7:64:17:5d:dc:2d:cf:30:3d:93:48:07:b1:73:89:
         de:f0:b4:7f:27:d6:b4:f3:34:7a:27:9f:cb:e3:97:7a:2e:1c:
         27:2e:80:15:46:31:59:cd:87:ec:9e:7e:7f:f9:09:3a:2f:b7:
         8f:d4:a6:48:4f:45:22:c5:28:75:f4:d6:f5:cc:75:5c:66:2e:
         9a:49:f1:2f:8d:f4:c1:e7:c5:27:60:dc:5c:02:63:93:34:9c:
         91:96:37:6b:a8:5c:32:fb:93:c7:e8:fb:f1:07:3d:03:2d:1c:
         8c:1d:9a:d7:31:40:fa:e8:d3:ce:63:c4:14:78:2d:6c:bd:e8:
         c8:18:1d:e3:28:18:66:7e:81:f9:02:03:a7:1b:5d:2b:1f:5e:
         c8:82:73:52:dd:1e:39:e3:71:30:56:54:e4:37:a7:07:27:de:
         44:e5:02:a5:72:57:f4:cd:b4:e1:81:fc:ef:ac:43:70:4c:15:
         a6:cd:9f:51:31:14:52:c6:99:f7:54:7a:26:8b:7d:61:4c:f5:
         33:9d:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----