Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7db5fc43-9628-439c-b31d-c866fd9a8651.roa
File:                     7db5fc43-9628-439c-b31d-c866fd9a8651.roa (raw, json)
Hash identifier:          29ILF3YWmhydTV6tYTf+s/zLl833WM4YqapWQTxXZAM=
Subject key identifier:   FD:B7:D3:AC:42:B8:F8:DD:B2:58:58:A3:0D:B6:BF:C9:A7:44:7B:A2
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4016133532CA07E9AA44247C2E461A167C1AF66C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7db5fc43-9628-439c-b31d-c866fd9a8651.roa
Signing time:             Mon 12 May 2025 15:01:01 +0000
ROA not before:           Mon 12 May 2025 15:01:01 +0000
ROA not after:            Mon 16 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daee:c000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 20:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:16:13:35:32:ca:07:e9:aa:44:24:7c:2e:46:1a:16:7c:1a:f6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 12 15:01:01 2025 GMT
            Not After : Jun 16 23:59:59 2025 GMT
        Subject: serialNumber=ef9c80dee2400d1293f39368399a7bb22b700aa7e0c453efd1e9ce7ec344e9bc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:5d:e6:ee:de:86:a1:f3:e0:51:d1:d3:98:
                    da:fa:52:e1:75:04:eb:15:45:2f:8b:52:a6:a2:2f:
                    d7:42:6b:c7:4d:be:94:00:72:e0:8f:4e:45:ce:0f:
                    82:c2:81:76:d8:46:ad:af:74:dd:9d:0b:43:4c:d6:
                    a4:9d:52:69:14:9b:56:f0:c7:1c:33:0c:96:89:49:
                    73:f7:03:d2:ae:c9:8a:c9:2b:f2:8a:63:e3:6c:98:
                    42:5a:10:17:02:ea:7b:4f:11:24:74:ab:9a:e5:a1:
                    e5:86:a2:2d:ee:63:09:1d:60:e3:86:e9:18:b5:c7:
                    fa:91:f7:e9:f6:8c:fb:22:32:de:d6:bb:03:1a:81:
                    d4:98:bb:e7:92:3a:c6:86:f9:61:6c:d9:74:c0:2c:
                    59:93:8d:59:75:94:20:b6:74:d3:34:85:eb:4d:28:
                    a3:08:cc:aa:a6:2c:c3:a7:99:ba:b6:f7:63:d9:63:
                    ef:d5:33:46:51:e2:fe:0d:6d:41:2f:8a:ca:d0:43:
                    f9:1b:22:5a:68:7a:4a:0f:7b:7a:13:8e:db:90:af:
                    9e:af:18:e2:bd:26:ee:06:2d:77:ae:10:2e:96:c8:
                    72:75:33:06:5a:42:db:48:b8:13:e3:63:48:bd:8b:
                    40:ea:72:6c:1d:c7:2f:bb:50:15:ce:3d:4f:b5:3d:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B7:D3:AC:42:B8:F8:DD:B2:58:58:A3:0D:B6:BF:C9:A7:44:7B:A2
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7db5fc43-9628-439c-b31d-c866fd9a8651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daee:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:32:2e:bf:9a:06:9f:20:f3:14:ff:d1:02:0b:e7:1a:6d:6a:
         2e:c4:f4:f0:48:15:fc:af:6c:73:3c:f2:52:44:b5:62:e5:b6:
         18:1a:f6:1d:12:d4:4a:d8:25:f0:e8:ee:0b:9d:af:14:4f:d3:
         4b:b4:e9:a9:86:4e:67:07:78:a0:a8:ab:70:12:76:34:5a:01:
         79:16:35:5a:aa:af:eb:75:fe:c3:25:a6:5c:26:c8:52:f9:69:
         19:30:a2:e1:e8:b7:e2:be:00:5f:f1:52:f0:35:3f:65:77:e5:
         ac:1e:68:bf:a5:69:99:28:9d:8f:7f:41:fa:23:3a:0b:0e:6d:
         de:15:87:50:b6:5b:19:f7:97:28:a1:e9:0c:af:a1:2d:4c:33:
         49:86:fa:22:68:68:02:2c:19:1f:2b:5c:cd:8a:bf:2e:0d:8f:
         a7:f8:ed:22:06:f8:d2:fb:5e:d4:45:b2:e4:fe:3e:16:c5:9e:
         4b:29:10:d9:86:af:36:39:ba:21:80:a6:d4:0d:e2:4d:1c:03:
         34:47:90:e7:6a:40:c1:4c:e5:9e:1e:4b:2d:55:04:fc:c9:46:
         94:ac:c1:e9:80:3b:9f:be:b7:f9:cf:b9:f1:50:b1:e7:d3:e5:
         00:53:d7:c5:65:0b:5d:42:97:38:1c:3c:af:52:f8:40:ca:03:
         d9:39:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----