Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/503808d9-15a8-4d3f-81e0-d0314ab9d38f.roa
File:                     503808d9-15a8-4d3f-81e0-d0314ab9d38f.roa (raw, json)
Hash identifier:          zHT6/Ni5LrxWR6LjblxYSfXkM8+tbWZ9Hyq3XwgiGPY=
Subject key identifier:   49:92:6C:C7:F3:FC:4C:9A:AD:6D:54:B2:1C:64:0B:AB:55:39:38:1B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1B79AE5829097A4247D407DB5CFC4164BF478E31
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/503808d9-15a8-4d3f-81e0-d0314ab9d38f.roa
Signing time:             Wed 30 Jul 2025 00:50:22 +0000
ROA not before:           Wed 30 Jul 2025 00:50:22 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:b0c0::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:79:ae:58:29:09:7a:42:47:d4:07:db:5c:fc:41:64:bf:47:8e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:50:22 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=2f24b0e11a0d311914e3c68290cd333f96b784869a928bac8b0ce33befd51092, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:ca:73:ca:5e:b1:ce:01:d3:2d:ec:a3:26:
                    bb:d5:d1:8a:46:40:ec:a6:63:74:6f:b3:d7:95:7a:
                    ca:27:0d:9f:d1:b5:68:92:90:b3:e3:4c:91:9f:52:
                    f7:bf:fd:3f:5e:d6:5e:d5:2d:2d:20:82:51:80:c4:
                    b7:8c:ce:8e:0a:73:6a:0a:12:82:55:f7:64:05:cb:
                    ab:12:cd:17:76:8d:83:b5:3d:58:2c:2f:af:e6:54:
                    c9:4f:b8:98:6d:d2:f9:b4:2b:3f:bd:f0:45:47:f6:
                    80:59:ff:0a:86:c5:63:a1:e9:2b:d7:f1:ff:3a:5d:
                    84:2c:1d:15:78:a9:96:93:ba:e4:36:40:52:87:5b:
                    d3:35:90:32:c4:34:45:c4:bc:82:e6:e6:54:0b:73:
                    db:19:dc:73:d2:e6:35:34:44:78:96:f1:32:4c:ca:
                    07:a2:73:32:e6:2c:c8:d5:9d:8e:ff:fc:a8:49:a3:
                    c4:48:57:db:83:a3:a3:38:61:64:f0:dd:1d:33:0b:
                    cd:f6:5d:00:36:b4:f1:50:34:9e:2a:13:a3:4a:3b:
                    71:e1:92:18:1d:fa:3b:ea:52:2f:04:80:9b:6f:c4:
                    3e:77:9d:5e:be:2e:fc:17:4d:98:d9:98:8c:56:05:
                    50:a2:19:70:07:a0:01:84:d8:a3:23:a3:31:1f:14:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:92:6C:C7:F3:FC:4C:9A:AD:6D:54:B2:1C:64:0B:AB:55:39:38:1B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/503808d9-15a8-4d3f-81e0-d0314ab9d38f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:b0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         ae:f8:0b:75:6a:a3:50:ce:84:e7:4c:24:2f:c1:53:25:89:48:
         37:a5:0c:69:4a:2a:12:49:5a:6c:ae:a8:d6:67:08:aa:24:a5:
         f0:0c:36:4b:83:c9:22:eb:bb:6e:bd:ec:03:e0:10:3a:8e:26:
         a1:7f:df:4d:05:0b:3d:9d:30:3a:b4:0c:be:49:99:5a:21:92:
         9d:8f:d4:fd:a4:f6:16:f9:3f:88:a5:e6:21:07:de:92:82:f9:
         61:60:73:76:4f:14:68:73:90:ac:88:fa:b8:90:69:53:47:08:
         49:49:e0:4b:d5:cc:3e:b4:a8:7c:db:c3:4b:f6:a5:2b:51:6d:
         f0:1b:9d:ca:ff:bb:6d:d3:c7:9f:ac:b4:34:1e:d7:50:7c:80:
         61:2a:e8:f2:7b:b6:60:8e:6d:0a:fb:34:bc:20:30:02:17:ed:
         6e:92:ba:9d:c7:35:7b:23:db:24:0a:15:bc:f9:83:90:70:45:
         05:f0:63:82:5a:8d:ce:88:44:4b:d0:53:69:d9:59:91:21:7e:
         33:da:5a:77:99:7d:05:78:25:6c:9c:cf:c1:6a:0e:67:cc:6f:
         1a:05:f7:0c:02:01:75:81:d5:1b:06:59:62:5f:a5:80:84:0c:
         c8:f2:2a:60:6d:47:c5:4a:de:b5:92:5f:45:08:ed:58:4c:92:
         6e:54:bd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----