Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76d32851-28e5-441b-b5ac-b7e6f5cd8767.roa
File:                     76d32851-28e5-441b-b5ac-b7e6f5cd8767.roa (raw, json)
Hash identifier:          O9WAb/E5vVbKujycDjOr27DB9DtcJ8CW9IcAVaCIzQY=
Subject key identifier:   2A:C6:00:9F:D8:83:27:67:5D:A0:8E:68:BA:61:17:36:4D:44:D8:CA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0DC03D969A579B353E5F85A02B4B1C6B273068F5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76d32851-28e5-441b-b5ac-b7e6f5cd8767.roa
Signing time:             Mon 12 May 2025 15:10:41 +0000
ROA not before:           Mon 12 May 2025 15:10:41 +0000
ROA not after:            Mon 16 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daee:e000::/40 maxlen: 48
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 20:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c0:3d:96:9a:57:9b:35:3e:5f:85:a0:2b:4b:1c:6b:27:30:68:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 12 15:10:41 2025 GMT
            Not After : Jun 16 23:59:59 2025 GMT
        Subject: serialNumber=0fef12bd092fd859e1e12d59288492e0d0b76d1d99e9d3784cfe60ca1183cd8c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:3d:11:ed:85:ae:2b:75:8c:63:9c:4f:ef:
                    47:28:13:ed:4a:06:0f:51:35:41:3e:28:e7:3f:27:
                    e4:c2:e6:db:15:74:8e:f7:42:cc:8c:94:d0:df:99:
                    c8:ac:eb:b7:f1:f1:61:e9:22:5a:d5:35:e0:9b:f0:
                    cd:7c:c2:ef:f2:cb:f4:4b:6b:72:27:be:d2:90:25:
                    61:e7:99:95:de:b8:bf:40:b8:c7:f2:e3:6e:a6:b9:
                    56:e8:72:22:87:54:65:95:1c:2a:74:6c:7d:28:fa:
                    2d:9c:20:f3:12:e5:69:54:58:43:08:fc:7c:82:9c:
                    f2:56:48:f7:62:50:9b:34:e0:c1:ca:5f:f5:17:c8:
                    bf:a6:99:04:28:8c:c3:75:ba:f1:96:bf:26:d1:c5:
                    62:99:51:06:f7:46:76:e9:ad:08:c2:54:d7:c0:2b:
                    e5:0f:6d:7f:02:9f:1d:fe:e0:a3:cc:6a:b3:04:19:
                    7b:7f:b0:c5:4b:72:35:d8:69:87:64:0e:85:fc:57:
                    76:55:74:41:53:75:a9:7b:67:93:b7:c8:6d:1f:57:
                    77:0e:07:40:2f:52:d3:a3:1e:ed:16:ab:c3:a7:82:
                    73:ef:2b:2e:70:e3:47:3c:bd:c7:05:94:33:cc:d3:
                    39:df:00:2a:75:89:d9:a5:5d:69:3a:44:cf:1b:14:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C6:00:9F:D8:83:27:67:5D:A0:8E:68:BA:61:17:36:4D:44:D8:CA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76d32851-28e5-441b-b5ac-b7e6f5cd8767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daee:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:66:63:21:20:99:d8:bb:14:db:3c:49:d6:c5:70:3b:01:a6:
         e3:7f:9b:f3:43:ab:f7:e1:22:10:86:a5:7a:47:fb:35:2a:45:
         89:d5:9a:60:8d:a7:58:1c:55:2b:31:71:99:a0:3c:ec:ae:e3:
         3e:41:51:6e:28:d5:a3:1d:e1:4a:23:91:78:08:cd:be:8d:32:
         4c:01:0a:f4:f6:05:97:4c:1d:c7:ba:4c:89:7f:11:54:39:1f:
         1f:f9:67:cc:0b:76:45:14:ed:bf:64:6b:0f:f6:ca:c1:9e:df:
         16:57:54:5f:49:87:ed:ed:7e:2c:ab:81:dd:2e:4a:37:ba:41:
         ec:09:c7:7e:31:b4:b3:3a:7a:63:f1:88:03:eb:4b:96:9c:65:
         35:93:d5:41:94:b8:56:46:b5:d6:21:23:1c:c9:41:65:64:89:
         49:8b:e4:c8:ad:0a:8b:0b:d8:0e:c3:d4:c8:ea:38:74:a0:44:
         ab:bc:09:e5:8a:2e:df:21:03:f6:ed:bf:5a:c5:c0:24:23:74:
         ac:2e:ae:ee:b5:e3:9c:b2:a6:3f:e3:f7:b8:63:ce:7b:d8:7c:
         9c:0e:2d:ae:0f:76:f0:51:c5:a3:32:d4:1e:38:96:ae:f2:73:
         a9:33:33:10:37:5d:d4:6f:b9:39:9a:0c:97:4c:3d:15:64:63:
         08:d2:9f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----