Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc66e433-9a78-4ade-bbf1-f5e98b1e6fca.roa
File:                     fc66e433-9a78-4ade-bbf1-f5e98b1e6fca.roa (raw, json)
Hash identifier:          UmKp85GfHLecVdvgpMPw6vNmsS5Q5C+nbgkY9zTTy4A=
Subject key identifier:   F0:64:EC:19:FB:C4:01:79:6F:BA:5E:A3:59:A7:29:FE:CE:61:E7:57
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       07256568E145F8004B770C16DAA85A4B515B54CB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc66e433-9a78-4ade-bbf1-f5e98b1e6fca.roa
Signing time:             Thu 22 May 2025 00:52:07 +0000
ROA not before:           Thu 22 May 2025 00:52:07 +0000
ROA not after:            Thu 26 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab9:b000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:25:65:68:e1:45:f8:00:4b:77:0c:16:da:a8:5a:4b:51:5b:54:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 22 00:52:07 2025 GMT
            Not After : Jun 26 23:59:59 2025 GMT
        Subject: serialNumber=4e7f2010bb1adbaa542af3384fb11d190bc8adbc0dd145e2204bbd70719d7cff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:c2:86:d4:fd:1f:85:7c:84:9e:d6:4e:a4:
                    5b:d7:7e:ab:37:2b:c2:08:e0:cb:ec:19:d9:6f:f6:
                    81:15:87:22:e8:63:9b:79:6f:8f:fd:87:af:4f:b2:
                    fc:68:0c:8a:dd:54:03:cc:9d:0d:68:95:63:c8:8a:
                    0d:69:a0:e5:97:68:24:58:be:98:1b:6c:4f:6b:20:
                    9c:23:68:2e:ab:2d:37:7b:ff:7a:6b:3a:64:56:a0:
                    7a:26:f3:e9:ce:ce:e6:d1:e1:b8:31:97:af:8c:bc:
                    cd:b0:2e:ed:44:c4:aa:40:7c:cd:0d:05:45:5f:27:
                    41:50:58:75:88:ff:8a:72:88:71:8c:3a:9f:12:a3:
                    25:01:43:d4:28:97:92:fc:46:27:7a:a9:ca:97:af:
                    96:c0:8b:44:99:af:17:4e:5d:e7:b3:cc:fa:1b:c4:
                    d8:ca:64:9c:56:25:f4:ee:42:ba:35:91:23:ea:36:
                    8f:de:30:e1:fa:fb:5f:4d:a1:2e:90:2d:02:23:69:
                    21:13:bf:7d:e9:fa:b7:1b:f9:3b:48:1f:4a:14:07:
                    b5:91:70:db:aa:0d:f0:2d:f1:cd:30:96:bf:56:56:
                    79:f8:52:60:db:c8:e4:75:99:35:74:b4:77:e6:f4:
                    ae:ed:2f:64:3c:61:c5:69:be:d4:5c:10:9b:4c:e5:
                    a7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:64:EC:19:FB:C4:01:79:6F:BA:5E:A3:59:A7:29:FE:CE:61:E7:57
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fc66e433-9a78-4ade-bbf1-f5e98b1e6fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab9:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:4e:a1:c9:96:73:58:7c:13:18:d9:03:b5:59:2c:f9:3a:29:
         58:21:9c:cb:4c:09:99:3f:63:e4:d4:4d:ba:67:d4:0e:92:de:
         5e:42:25:8c:fd:83:aa:13:ad:1c:20:ca:e1:97:a7:73:b9:55:
         13:e3:73:eb:5f:2d:17:35:e7:a2:d1:61:45:5e:b8:e1:44:9d:
         d0:1a:ee:3b:fc:70:cf:4d:f9:b9:93:ab:26:40:15:3c:6f:d7:
         54:28:d8:a6:41:28:8e:1b:26:b7:92:bc:ad:4f:69:f8:e5:de:
         07:36:8a:c3:9e:8f:27:47:e1:ef:1c:e1:0f:c6:32:9f:3e:89:
         4f:5c:14:e3:71:ea:bc:76:ab:ee:74:8b:0c:63:e1:f1:90:2b:
         74:7c:95:bd:5b:45:c4:73:df:e7:67:d9:b7:95:49:09:7f:74:
         ae:90:7a:84:cb:5b:88:9e:3b:45:44:8b:e5:3f:99:04:db:cf:
         27:72:b6:5d:15:3c:dd:99:dd:70:a5:0b:49:26:89:4d:5d:88:
         50:77:ed:fc:0e:ea:e4:c1:e9:ef:f7:22:8b:46:fa:b0:f1:3a:
         4d:2e:1b:4a:f5:dd:8f:13:ff:98:ad:2e:65:e5:b1:63:a3:fb:
         69:bf:53:41:40:6e:6f:af:fd:ab:13:fc:82:73:c5:c6:1f:59:
         f9:9c:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----