Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36011bed-a74c-4ae6-afa5-be6fd3ac1b63.roa
File:                     36011bed-a74c-4ae6-afa5-be6fd3ac1b63.roa (raw, json)
Hash identifier:          FMRlSnWY+6OWCtDipirbET7GHuRTgmt0RHljDNA29gM=
Subject key identifier:   B6:B5:F4:72:C2:0E:11:2A:14:8A:B4:47:A9:C9:89:2A:C0:BA:58:42
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       54B381EC3CE5522F0813616BDC36D395F489C545
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36011bed-a74c-4ae6-afa5-be6fd3ac1b63.roa
Signing time:             Thu 22 May 2025 00:38:20 +0000
ROA not before:           Thu 22 May 2025 00:38:20 +0000
ROA not after:            Thu 26 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab9:4880::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b3:81:ec:3c:e5:52:2f:08:13:61:6b:dc:36:d3:95:f4:89:c5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 22 00:38:20 2025 GMT
            Not After : Jun 26 23:59:59 2025 GMT
        Subject: serialNumber=3f58e0339c8b97417929be4701a3a65daf8ee805ba10b0e7ab35c406c5bb8f01, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:3f:92:dc:ee:d9:10:72:48:83:a5:5e:32:
                    11:63:46:1e:c4:d4:69:6f:62:4f:64:0b:eb:a2:0f:
                    d8:73:b7:24:fe:d3:db:83:ce:d7:00:7c:f8:a9:fe:
                    5b:b2:9a:77:88:9f:7f:5e:bf:9c:57:ce:48:fa:16:
                    69:2a:63:41:bf:e5:19:75:f9:0d:ff:3c:30:77:f7:
                    15:f4:13:2f:72:f2:63:00:30:48:d3:a4:ad:02:3a:
                    4e:42:07:58:cf:0c:05:0a:e0:c7:86:63:b3:73:bf:
                    1e:23:e3:3a:5d:5e:cd:88:62:a4:54:c3:c7:c0:bd:
                    eb:c3:52:80:33:82:8c:80:e0:ae:c6:44:a6:ef:16:
                    b7:3c:6c:d6:ed:63:cb:77:31:6c:4c:bc:da:d1:45:
                    a8:9e:7f:be:84:a6:dc:82:84:6c:d8:37:af:33:5f:
                    95:24:ec:91:a8:9f:c6:39:85:c1:8f:5f:60:b0:c8:
                    d4:88:f4:7d:51:dd:d2:b5:3a:cd:2c:90:1e:76:d7:
                    97:32:67:54:7c:10:05:97:4e:50:ff:68:7f:75:67:
                    ad:24:c2:89:41:f8:e4:76:c2:c6:bc:2e:b0:9c:e2:
                    af:3f:22:b3:e8:75:f2:90:fa:ab:45:c5:94:8b:20:
                    6e:cd:12:4c:e8:ef:fe:10:1c:4e:3a:35:2d:ca:d1:
                    90:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B5:F4:72:C2:0E:11:2A:14:8A:B4:47:A9:C9:89:2A:C0:BA:58:42
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36011bed-a74c-4ae6-afa5-be6fd3ac1b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab9:4880::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:ee:aa:81:ec:e0:e8:c6:0d:38:68:d2:97:96:7f:07:a5:97:
         49:5c:ba:92:e7:e8:08:54:76:5e:ab:b8:2d:f9:91:97:63:c4:
         75:0d:ef:be:3d:e3:8e:8d:86:a7:e1:fc:1b:6b:69:c5:c9:ac:
         ba:d7:3a:ab:51:9c:af:0c:77:97:47:9b:76:10:be:da:54:0d:
         34:70:8a:ec:75:d2:4d:91:e0:b1:6c:53:37:30:6b:3c:43:63:
         e5:a2:16:f0:46:e6:7d:28:cd:f6:a1:8b:d0:0e:4a:b8:27:ed:
         dd:75:44:f2:c2:48:1e:9b:89:33:03:9a:ec:7a:5b:cb:dc:e5:
         d6:a8:9e:cc:da:3d:ba:69:af:1e:db:34:7b:4c:38:ee:91:4d:
         bf:e2:bc:c6:63:51:1c:8f:74:21:80:92:b4:65:61:52:cb:b8:
         f6:a3:78:d9:3a:e9:01:6b:0d:f3:7e:2f:11:cb:36:2c:d9:fd:
         a7:94:8e:ce:04:7d:ba:ba:29:8d:e5:d3:74:10:d3:2f:9d:8c:
         ec:00:e6:30:95:0d:dd:58:51:40:cf:3b:c4:c8:04:0e:35:03:
         27:42:3d:31:89:3f:f3:cc:d6:bd:9f:4b:0f:f9:2d:d5:71:9e:
         bc:8f:94:8d:6a:b1:01:28:0e:5d:19:32:84:d1:0b:3c:7e:56:
         88:1f:ac:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----