Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a68467b-5a6b-40bb-89ac-d45360c16dd6.roa
File:                     1a68467b-5a6b-40bb-89ac-d45360c16dd6.roa (raw, json)
Hash identifier:          AqlTSgtr2/N9s8F7asU1iXy7JDUAt+1BhsLr3xT37AQ=
Subject key identifier:   70:57:02:D9:14:CF:0D:7C:32:80:29:36:EE:19:BD:7D:91:7E:4E:F0
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       02296A92A4A21439D6413016208F50662DC43746
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a68467b-5a6b-40bb-89ac-d45360c16dd6.roa
Signing time:             Thu 22 May 2025 00:38:31 +0000
ROA not before:           Thu 22 May 2025 00:38:31 +0000
ROA not after:            Thu 26 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab9:9040::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:29:6a:92:a4:a2:14:39:d6:41:30:16:20:8f:50:66:2d:c4:37:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 22 00:38:31 2025 GMT
            Not After : Jun 26 23:59:59 2025 GMT
        Subject: serialNumber=eda4f60c2e31972185ebfd6b279d2152b04bc61aa4abe6a315c2d0c3531797ec, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:eb:b6:0e:ed:45:f1:9b:dc:33:67:ad:92:
                    df:16:44:c8:4f:8c:b6:27:54:d0:d7:55:f4:d9:85:
                    72:35:b4:03:45:b2:27:98:0a:84:1c:e9:24:0a:71:
                    cd:b1:67:44:4e:a0:23:8e:8c:8e:d4:b2:ab:79:97:
                    0f:2a:93:bb:bf:4b:27:1d:ca:26:6e:e6:18:5d:a2:
                    48:79:98:77:79:cf:c9:5b:e0:e5:20:f1:2a:81:94:
                    da:b5:87:6f:f6:0e:db:5b:27:e8:07:f7:e4:91:88:
                    bc:06:cc:d6:2f:60:4b:61:80:94:e7:f2:09:39:66:
                    e3:fb:cc:04:de:a7:61:1a:43:e8:96:b4:70:6e:c0:
                    57:7d:6b:bd:28:4c:c0:7f:1b:3a:39:2a:b0:2d:ed:
                    29:4d:79:e3:5b:80:13:8b:be:ea:67:2e:d7:40:7b:
                    48:23:85:9c:e9:38:6c:b4:bb:4e:10:f4:13:e4:35:
                    62:03:d9:a5:1c:1b:ea:4f:f3:fc:8b:a6:07:e1:26:
                    54:f2:ac:86:b3:a1:8c:f9:48:e1:99:fc:22:b0:59:
                    20:ce:e4:1b:3d:62:9a:08:bc:02:b5:87:66:bb:07:
                    09:a5:45:61:10:67:83:55:4e:88:17:fb:0d:0e:c4:
                    a9:d7:e9:36:36:ad:d9:d3:f8:4e:a9:f3:fe:36:e7:
                    ba:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:57:02:D9:14:CF:0D:7C:32:80:29:36:EE:19:BD:7D:91:7E:4E:F0
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a68467b-5a6b-40bb-89ac-d45360c16dd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab9:9040::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:ff:57:c5:78:2e:94:ec:31:56:b9:6f:bb:11:1f:f9:cb:af:
         ad:68:64:78:e2:fc:c6:88:b9:c5:d4:79:f7:3c:a8:af:40:04:
         04:79:a2:21:c0:aa:f3:f7:1d:22:0e:40:29:10:a0:11:e0:0b:
         66:20:19:68:2e:2e:95:e3:31:b3:4c:11:f2:ad:67:51:b8:7c:
         ad:3f:76:70:f8:6d:24:f5:c8:58:8a:31:1b:87:2b:c6:c3:92:
         61:c3:6f:a4:ee:fd:b0:c9:9c:ce:72:6d:14:cb:cd:f1:0d:19:
         fe:b6:b4:23:17:25:1e:f7:e7:86:0a:84:27:d0:0c:ef:cf:90:
         52:c1:1f:0d:71:db:9b:fe:fe:c2:34:12:de:44:cb:f9:3e:7a:
         cd:98:93:67:e5:04:f7:52:c6:5f:31:55:86:4e:a1:2b:71:a3:
         af:49:ed:f7:00:fd:38:a8:30:6c:5d:c3:f0:d3:ad:20:58:51:
         dd:51:57:6d:a2:9a:af:39:03:d8:cb:f1:2f:16:32:93:3f:35:
         6d:f7:c8:f2:c9:e2:ac:4a:e3:22:b9:29:bf:10:b4:0c:d9:c9:
         b5:4d:34:98:be:a0:75:0f:57:f6:68:04:41:6c:7d:8c:02:d5:
         d7:5f:cb:5f:fe:d2:66:29:90:04:84:97:7e:0e:f4:41:d1:8e:
         c9:83:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----