Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63ebe66f-11f9-4329-a5de-3a34081b922a.roa
File:                     63ebe66f-11f9-4329-a5de-3a34081b922a.roa (raw, json)
Hash identifier:          75Kr57lwwX6OC27QyDqH9UyGAivc9eLNZ9reuC4KxcM=
Subject key identifier:   B6:14:C3:1C:4E:53:0C:84:64:99:81:02:3C:2C:80:C1:61:6C:B4:8D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5F8EC7AD88C4F2345C409F1A8D93BDB9F06C90B9
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63ebe66f-11f9-4329-a5de-3a34081b922a.roa
Signing time:             Thu 22 May 2025 00:52:09 +0000
ROA not before:           Thu 22 May 2025 00:52:09 +0000
ROA not after:            Thu 26 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab9:f000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8e:c7:ad:88:c4:f2:34:5c:40:9f:1a:8d:93:bd:b9:f0:6c:90:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 22 00:52:09 2025 GMT
            Not After : Jun 26 23:59:59 2025 GMT
        Subject: serialNumber=4eb6afbbbb872f1dd97def8f5475511672a6848302283db10664da93f86dcf2f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:8b:6f:b2:3e:52:76:a8:e0:e4:b8:b0:07:
                    ca:9e:fd:a1:94:17:8d:c3:c0:dc:f6:9e:83:37:14:
                    31:d5:f1:ec:88:e1:39:60:75:a2:de:fc:29:cc:4c:
                    7b:7e:13:10:44:13:37:c4:dc:ed:63:d5:20:af:d3:
                    7d:60:16:fb:c0:aa:66:15:84:19:ca:13:0f:3b:10:
                    b4:af:db:23:56:e5:33:b0:a2:1f:2c:99:4c:75:84:
                    cf:00:18:74:7d:e2:7a:2e:49:0d:84:49:cd:fb:cf:
                    5f:d4:19:1d:d0:a1:40:89:64:e0:07:8a:76:ff:a8:
                    ed:93:d7:f7:39:8c:58:a3:fd:f3:2a:4a:99:a9:c5:
                    94:0e:22:c2:b4:24:d3:94:dd:2b:ab:6a:72:71:22:
                    ed:e0:bc:e4:aa:bf:6c:ed:95:31:88:cc:a4:d0:fc:
                    b6:ad:fa:70:1d:12:46:61:49:1e:de:89:e6:0c:6a:
                    1c:19:97:ea:bb:fc:75:32:76:d4:bc:14:d9:47:39:
                    e5:ac:6e:e0:98:36:fd:45:84:2b:2b:1e:36:3d:5b:
                    9b:a0:cf:c1:fb:41:4b:fa:99:14:11:ee:e3:26:e7:
                    d0:75:b9:ea:cf:dd:38:89:12:07:5c:a0:23:70:49:
                    81:49:e2:de:57:15:4e:d4:56:75:09:ee:54:5b:c2:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:14:C3:1C:4E:53:0C:84:64:99:81:02:3C:2C:80:C1:61:6C:B4:8D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63ebe66f-11f9-4329-a5de-3a34081b922a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab9:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b8:93:21:51:5a:4e:84:e3:b2:9b:30:48:94:cd:41:02:29:de:
         38:a7:b5:0f:a5:eb:77:f7:66:c5:3f:a0:69:f5:e6:11:4c:24:
         d5:3a:35:2d:79:5f:0d:38:56:9a:1f:6e:42:65:2b:97:34:0d:
         28:ad:00:f1:de:3c:b1:61:bd:3b:a3:91:84:74:d9:90:58:cf:
         87:ea:67:e0:7b:49:5d:59:2c:65:39:d3:fa:8b:58:16:2a:2b:
         65:82:95:23:9b:bf:63:6c:bd:3a:73:6f:64:2f:6b:fa:29:ff:
         52:d8:24:a9:25:d5:92:67:4d:54:97:fa:77:58:b7:9e:eb:d6:
         ad:d4:11:70:bc:2a:35:12:07:e7:f1:9c:e4:64:54:e9:98:cf:
         c1:7c:d0:75:64:f0:d5:d2:70:44:49:df:16:c7:7d:90:87:3f:
         9f:96:54:e7:b6:53:45:60:6f:97:d0:b1:99:c8:ff:2e:7e:0b:
         e5:07:09:c3:ed:24:f0:14:a9:10:53:7f:ae:99:df:35:41:c2:
         bf:bd:34:6f:52:ec:d9:60:86:10:39:2e:f0:b7:0f:96:fd:92:
         27:28:b4:79:00:bc:74:50:db:56:59:8a:d5:99:46:65:6a:ed:
         34:0b:df:2a:cc:80:ac:aa:42:73:70:a4:d4:de:f4:69:0f:d7:
         40:ea:bc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----