Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab3a32e4-8e0e-4bdf-8c84-83cdc5c86fb0.roa
File:                     ab3a32e4-8e0e-4bdf-8c84-83cdc5c86fb0.roa (raw, json)
Hash identifier:          jXWlxMJqKc3qLGzgmVYxjVtvqwP56Y6AgvivAhFwTyU=
Subject key identifier:   CD:0C:76:49:87:AF:DE:67:C0:6E:21:87:CA:37:7B:6C:C6:A2:6B:1E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4F2EF163CCC8BB9D5D761A6511655AC51833CB24
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab3a32e4-8e0e-4bdf-8c84-83cdc5c86fb0.roa
Signing time:             Mon 12 May 2025 16:20:10 +0000
ROA not before:           Mon 12 May 2025 16:20:10 +0000
ROA not after:            Mon 16 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06e:800::/40 maxlen: 40
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 18:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2e:f1:63:cc:c8:bb:9d:5d:76:1a:65:11:65:5a:c5:18:33:cb:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: May 12 16:20:10 2025 GMT
            Not After : Jun 16 23:59:59 2025 GMT
        Subject: serialNumber=c55068d4c954c7913a287a140cbb3e6400011721010946fcdc860447270871ed, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:5a:17:20:69:25:46:a4:16:db:d0:b8:4c:
                    b5:36:fe:58:1c:b6:06:f8:83:4e:f3:57:71:1c:81:
                    7c:b2:8b:3a:1d:a5:c8:90:3a:19:ab:ec:c1:38:b7:
                    db:43:19:60:d1:a9:de:84:d7:ba:52:41:99:c7:98:
                    c7:4c:5b:bf:26:ce:04:97:8a:22:28:2e:96:32:38:
                    17:cb:98:40:f7:67:43:2a:7c:55:0f:ca:af:83:e2:
                    40:6a:29:c3:54:11:12:8c:dd:f9:12:92:71:7b:91:
                    f2:97:7d:a6:7a:2f:41:36:ec:aa:db:fd:70:60:e6:
                    52:e8:dc:f7:07:58:b0:a1:64:82:06:f0:f0:3c:ef:
                    63:d7:c4:f7:ac:b2:20:28:69:45:bb:90:ed:cc:0d:
                    4d:e7:02:30:ea:40:d8:c7:d8:ce:33:3b:ca:b3:12:
                    21:af:d1:3a:e1:1c:18:4e:32:9f:ff:bf:75:61:2f:
                    08:71:c2:11:53:d4:59:4d:95:01:d0:f4:18:49:5e:
                    36:87:3b:15:fd:c5:55:53:b9:2c:df:1d:e6:cc:c3:
                    4e:43:82:82:47:df:af:e6:bd:cb:d0:c7:40:e4:05:
                    03:6e:22:41:04:fe:36:84:2c:3b:82:73:55:69:5d:
                    06:9a:9a:b0:a0:99:d6:b0:fa:37:9f:4a:95:a9:bc:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0C:76:49:87:AF:DE:67:C0:6E:21:87:CA:37:7B:6C:C6:A2:6B:1E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab3a32e4-8e0e-4bdf-8c84-83cdc5c86fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06e:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:db:21:93:82:32:6c:6d:98:a3:f5:74:55:01:14:3e:00:c9:
         1c:45:ad:14:71:20:85:8b:d7:e1:5b:15:81:19:12:94:fe:b7:
         6a:0e:40:ad:66:18:4d:b5:73:3d:84:59:b2:f7:1f:6c:ae:4a:
         1c:b8:85:3e:da:3f:5c:7f:d6:18:19:78:8b:08:2a:0b:66:3b:
         15:2f:27:5f:9b:37:45:4e:91:34:52:7d:39:9a:ca:6f:57:a5:
         6c:c0:81:d2:1c:ee:93:06:fa:6b:6e:3a:f6:7f:40:1e:46:b2:
         86:02:8b:87:cf:a3:8b:5f:2b:8e:46:3a:3f:74:bf:09:fc:31:
         1e:e3:d9:48:7a:3d:3f:1a:a4:9b:8f:89:25:8b:0d:9c:b9:a6:
         e2:14:05:fe:b7:60:fc:a9:6c:fc:5c:2b:bc:6e:00:5f:7e:2c:
         36:5c:e3:35:98:74:fe:a4:d8:18:4b:5c:86:49:6b:c6:6a:5d:
         d5:29:50:f4:09:9e:a5:99:e7:d6:bf:df:3b:f9:62:6d:fd:d9:
         03:79:c7:c3:e6:2a:6d:3d:95:f9:ea:83:c7:b6:cc:00:c4:5e:
         9f:ea:de:2e:ed:44:d4:46:b6:e2:e2:ca:cf:1e:33:a0:b8:a6:
         f9:f5:10:67:75:fa:f9:81:e9:d8:ef:33:93:f3:5f:97:70:05:
         7e:8f:7b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----