Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa
File:                     61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa (raw, json)
Hash identifier:          +rJWB141Owr3QeYG7p1UaKOASZGkrp1KfVcbN8vscZg=
Subject key identifier:   E9:BF:EF:00:0E:DC:3E:C4:4E:DB:B1:90:F1:B2:85:C6:35:CC:33:12
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       53C0171CB6F4FE36D2EB48194642A905F2049DCF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa
Signing time:             Wed 30 Jul 2025 00:31:27 +0000
ROA not before:           Wed 30 Jul 2025 00:31:27 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:a080::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c0:17:1c:b6:f4:fe:36:d2:eb:48:19:46:42:a9:05:f2:04:9d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:31:27 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=bc50e4208746322a300f699729b7a980dc6dfc26393dc7b04812b268cf952c77, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:33:3a:eb:89:7f:30:52:83:63:33:56:bb:4b:
                    62:fd:11:39:1a:80:ad:63:9f:b5:5c:73:17:35:09:
                    5e:72:2e:ff:c2:80:e7:29:b5:bd:e5:3f:61:a8:fd:
                    b8:77:bf:89:1d:bb:bc:c1:cc:ae:5d:6e:75:0f:89:
                    69:5e:f0:f1:48:e0:30:b7:fa:62:ba:29:59:34:e7:
                    6b:49:fe:db:d8:40:29:b5:68:eb:fd:6c:2c:be:e2:
                    0d:71:1c:d7:7b:42:69:a4:c8:42:78:8c:95:eb:0d:
                    00:94:34:f4:b4:80:6f:64:70:ec:20:85:4f:33:e0:
                    75:dc:e6:48:06:37:2e:ed:8d:9e:a0:37:6c:45:32:
                    f5:c1:28:04:ea:01:c5:15:65:7b:76:5d:25:c9:ba:
                    9a:10:a3:4b:a1:07:35:89:b1:ad:ee:d6:17:5b:90:
                    c9:e5:90:17:5a:f6:4b:e6:19:f4:84:7c:c4:3f:31:
                    98:ca:07:b9:ea:60:b1:45:18:ad:05:ef:95:48:31:
                    32:bc:bc:e4:f0:fe:ca:8a:46:85:50:95:dc:53:cc:
                    90:fd:7b:a3:74:de:ae:47:d5:0d:58:ee:c2:74:78:
                    de:c3:36:98:60:2e:c6:5c:5a:ac:2f:e8:f3:b6:f4:
                    5d:9b:fb:7b:6a:d7:8f:17:4f:28:b3:71:7e:5f:a4:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BF:EF:00:0E:DC:3E:C4:4E:DB:B1:90:F1:B2:85:C6:35:CC:33:12
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:a080::/46

    Signature Algorithm: sha256WithRSAEncryption
         25:26:58:b8:be:01:61:d2:a1:03:da:a6:04:2a:48:fa:da:0c:
         d2:1b:a5:02:6a:87:b1:95:60:7b:67:9f:33:c0:dd:27:f7:98:
         30:bc:8e:e7:a8:85:28:0a:df:b1:db:54:6b:0e:e3:56:c5:8b:
         f6:21:05:32:88:24:eb:4c:fb:25:db:d5:3a:b0:a4:2b:35:00:
         61:3d:9c:20:64:b8:41:52:e4:08:96:f3:1f:3b:b9:72:9d:26:
         9a:d4:c5:84:a2:22:32:40:6e:08:22:28:ba:6b:92:9a:0e:89:
         70:b5:5f:59:ef:50:76:8c:c7:3b:d0:d5:91:eb:2c:1d:88:05:
         64:ae:6d:75:bf:28:c8:8c:71:be:da:78:25:62:2e:21:42:00:
         f8:ce:0e:d2:0e:bc:d5:07:31:59:96:6e:2d:9c:b2:b1:9f:b1:
         ee:8b:86:74:b3:2e:80:f2:1b:3f:5d:23:de:aa:ed:ac:57:19:
         c8:79:d3:a2:f3:be:9a:09:9e:94:95:63:2c:06:b6:38:58:01:
         85:8c:4c:99:de:66:07:e4:12:ed:c9:00:34:b9:ab:20:70:8d:
         e2:b5:5b:ea:f7:1f:47:e1:65:68:94:71:51:d4:50:22:fe:13:
         40:75:43:a4:8e:b5:52:d9:54:c8:fd:c1:ec:d3:bb:02:9c:72:
         0a:08:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----