Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7111dbee-e85c-4c8f-9f4a-65126d765aac.roa
File:                     7111dbee-e85c-4c8f-9f4a-65126d765aac.roa (raw, json)
Hash identifier:          oDfNm97cgUheASRtsZkScBHairVYohF5vhbgoTORNFw=
Subject key identifier:   E6:FE:49:61:24:81:B1:7D:6F:31:98:B2:98:2C:7D:AA:C5:EE:78:A2
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       511F14840809C912E9831318C93BB5CF836F720F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7111dbee-e85c-4c8f-9f4a-65126d765aac.roa
Signing time:             Wed 30 Jul 2025 00:50:44 +0000
ROA not before:           Wed 30 Jul 2025 00:50:44 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:70c0::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1f:14:84:08:09:c9:12:e9:83:13:18:c9:3b:b5:cf:83:6f:72:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:50:44 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=1f8a0314783cc8920780519dde2334ad7632689ee80a9f4273ccb85dac9b4c59, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:f4:e1:66:0f:d2:4d:8e:dc:c4:13:a8:c1:
                    31:17:b6:7f:4b:29:93:6a:00:f5:73:1d:0f:ab:4b:
                    21:ac:0f:ca:2e:b3:75:36:ad:b8:99:68:af:e9:0e:
                    37:59:68:bf:cc:fd:c6:d5:17:d3:01:b9:bf:3c:ff:
                    46:ff:be:00:7f:fd:ce:0c:f9:71:b7:79:56:11:05:
                    16:c1:aa:a7:0e:93:e9:fc:ce:59:b4:eb:47:51:9c:
                    cb:a3:44:28:7c:f9:88:c7:6d:75:41:94:b1:8c:bc:
                    05:18:4c:86:e4:94:0f:1b:b5:e6:28:17:7b:6c:e2:
                    c3:36:d1:c2:2c:be:08:68:df:71:2e:d6:81:a7:e8:
                    67:67:fb:69:e6:25:b5:5e:11:b5:88:fd:f5:9d:4e:
                    56:0b:67:bc:e2:e0:21:58:59:dd:f0:ac:36:95:bb:
                    25:9d:d9:bf:ff:f9:54:00:08:9c:1d:d7:c5:3b:98:
                    35:96:39:9a:23:a7:4f:72:33:f3:7d:19:21:02:da:
                    c7:72:c0:1d:24:84:36:7d:02:8c:8d:54:8c:df:28:
                    26:4c:08:66:74:76:ba:1f:53:f4:1b:d3:72:8a:8a:
                    42:94:57:a8:4d:b8:92:59:da:1e:dd:17:50:85:a5:
                    4a:a1:91:77:44:a0:bc:2e:89:a8:9e:fd:75:16:d3:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FE:49:61:24:81:B1:7D:6F:31:98:B2:98:2C:7D:AA:C5:EE:78:A2
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7111dbee-e85c-4c8f-9f4a-65126d765aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:70c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         00:ec:c5:c7:a8:13:df:f6:3a:98:13:6a:bf:16:c8:e4:cd:29:
         29:09:a9:1d:f7:b1:2b:96:fe:7f:6e:e6:4c:06:2f:9c:a9:c6:
         fe:3f:bd:ca:ff:86:aa:35:68:d0:a7:01:e0:be:35:b2:fa:a4:
         d3:e6:5f:69:3f:79:fd:5f:e2:e3:83:1d:8f:79:da:5a:10:13:
         3f:31:b6:43:6d:52:b0:02:3f:23:9f:3d:77:b5:d5:86:04:13:
         2c:68:b4:26:d0:36:03:fa:79:f2:de:db:b7:fd:45:a1:eb:d6:
         6d:9e:9f:63:e8:1f:50:09:7b:bf:8e:fb:61:e0:6e:fa:1b:43:
         75:16:a0:5b:21:a3:af:6d:73:a3:db:a0:42:1d:08:78:d6:ea:
         74:10:26:6c:be:e0:ec:ce:78:4d:b2:e7:7a:dd:7f:fd:32:1d:
         ba:65:03:df:55:fb:92:c5:81:6c:94:97:36:64:3f:32:b4:57:
         2a:1a:5b:2c:1d:46:00:74:0f:f7:0a:bf:9c:01:2f:f1:2d:a6:
         cf:18:fa:df:ef:f4:94:ab:5f:a5:05:46:99:ff:4b:ef:17:3d:
         08:b6:77:42:9a:01:d2:81:d5:1a:52:5b:f5:0d:28:9e:0d:31:
         fd:48:ac:33:f8:1b:73:66:62:c3:4a:f7:04:5f:9a:cf:6c:3e:
         7b:18:bc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----