Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082e749c-d4cf-4235-9051-09c377e17fbe.roa
File:                     082e749c-d4cf-4235-9051-09c377e17fbe.roa (raw, json)
Hash identifier:          NEdA6ncJVO540wWZPE4BkgV7zNg50KI7ENcrEWz1LKQ=
Subject key identifier:   77:72:53:C3:81:0F:84:E4:EA:97:31:75:3C:13:11:EE:73:5C:FB:2F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       53390CB3E999054A832F6AA65F947FCE69791265
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082e749c-d4cf-4235-9051-09c377e17fbe.roa
Signing time:             Mon 12 May 2025 15:10:05 +0000
ROA not before:           Mon 12 May 2025 15:10:05 +0000
ROA not after:            Mon 16 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dabb:6000::/40 maxlen: 48
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 20:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:39:0c:b3:e9:99:05:4a:83:2f:6a:a6:5f:94:7f:ce:69:79:12:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 12 15:10:05 2025 GMT
            Not After : Jun 16 23:59:59 2025 GMT
        Subject: serialNumber=2f436cc09cf8f99e2653df8a8ff1d167a918fa3daa78340bb0dd696c7dc84e53, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:ff:08:1b:04:09:81:04:4d:10:90:8f:0e:
                    b2:bf:2a:88:6d:71:ac:a3:80:4a:62:ad:0a:4e:55:
                    7e:42:25:3d:5f:63:d0:ee:50:69:20:6d:92:ae:78:
                    52:9e:1a:b7:83:62:55:b7:43:51:72:97:de:c1:46:
                    95:2f:5a:f1:e1:41:25:bd:ec:fe:82:19:31:ff:fe:
                    ec:9b:aa:be:86:e2:db:92:0b:c3:fe:4d:9f:61:5a:
                    83:b6:1a:bd:3c:b0:ad:3a:ee:8c:f5:f4:aa:bb:3c:
                    6d:16:2a:c2:ed:02:aa:b8:35:8e:7a:0a:fc:3a:2e:
                    72:43:9d:e1:dd:d2:4e:c1:f3:c7:0b:a2:2d:44:d9:
                    17:bf:29:17:db:53:94:8c:a0:5c:0b:b6:fc:eb:81:
                    81:f9:9e:e0:4a:95:b3:91:49:4c:67:fa:c5:af:75:
                    dd:50:3a:07:fd:d6:59:b5:ec:5a:db:b2:65:12:3c:
                    c1:1b:b5:b8:20:20:fb:c3:f8:55:cd:8d:7c:db:90:
                    6b:7b:c6:2a:85:55:b5:b6:5d:34:1c:12:4a:a5:ec:
                    2e:85:b3:ac:4a:ce:d7:35:ce:01:1d:ed:8f:52:b1:
                    19:9d:e6:85:7c:8b:60:79:b0:1b:61:69:66:3b:cd:
                    86:ee:aa:92:c8:c2:0b:e9:ff:2e:f0:36:06:19:a1:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:72:53:C3:81:0F:84:E4:EA:97:31:75:3C:13:11:EE:73:5C:FB:2F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082e749c-d4cf-4235-9051-09c377e17fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dabb:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:81:81:52:39:3f:83:1c:38:4e:29:4a:f5:f3:64:69:d6:00:
         7f:28:bb:39:89:1a:f1:94:36:a7:de:03:4f:4e:26:e2:d6:df:
         9f:c8:b5:69:74:bc:d9:6d:6b:1b:f5:42:ec:71:b4:f4:db:6d:
         ef:d4:97:2a:b1:e8:77:81:cb:d7:cb:45:e1:b6:bc:0e:4c:13:
         5b:73:f4:e7:bf:99:d1:dd:cd:ec:50:21:c1:d3:dd:dc:4b:05:
         15:90:79:78:3c:07:a9:3c:50:07:d0:a1:55:6d:43:50:1f:3e:
         6c:2b:10:99:d6:93:50:85:39:0f:2f:bb:d6:03:ee:16:4a:fe:
         2e:1e:3b:d3:f2:ed:2f:91:7c:4a:e0:51:16:c5:a6:cc:21:1d:
         78:c0:ee:6a:ab:de:75:9d:4c:ed:cb:ed:09:d6:49:7b:b6:9e:
         64:61:d2:e3:00:c0:b4:d3:5f:66:a4:50:e9:0d:e3:02:be:9c:
         e4:6f:e4:c4:75:23:99:01:0c:f9:14:ef:a2:8a:dc:15:22:3d:
         ea:71:a6:2a:56:83:2b:ba:00:4a:46:ff:07:c3:17:64:1c:5c:
         47:bd:d0:8c:1e:1f:0a:ca:dc:51:40:43:84:65:df:9c:21:d9:
         57:04:d0:11:5e:0f:2a:9c:92:31:59:4a:38:4d:40:c5:be:d7:
         9c:3c:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----