Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a87b96e-73b3-44dd-8ebe-dd19a2db48db.roa
File:                     8a87b96e-73b3-44dd-8ebe-dd19a2db48db.roa (raw, json)
Hash identifier:          EP0gUu/j3VJeTk0E3ixMRQWPZnzUqx6FnrS0hKPjWaI=
Subject key identifier:   67:05:F3:65:B4:B6:22:E4:84:B5:9B:22:50:52:5B:E3:2E:BB:B4:E7
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6B76B397AAF837CB0F4472A56825CFC6C9AF6B02
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a87b96e-73b3-44dd-8ebe-dd19a2db48db.roa
Signing time:             Mon 12 May 2025 15:10:05 +0000
ROA not before:           Mon 12 May 2025 15:10:05 +0000
ROA not after:            Mon 16 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dabb:4800::/40 maxlen: 48
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 20:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:76:b3:97:aa:f8:37:cb:0f:44:72:a5:68:25:cf:c6:c9:af:6b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 12 15:10:05 2025 GMT
            Not After : Jun 16 23:59:59 2025 GMT
        Subject: serialNumber=cd6179d37808b4b95966c4f2091bafb43ee7bc0eab4dfb946a9d839419399f07, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:25:a4:76:0e:59:d5:35:de:aa:da:7f:28:
                    18:52:f4:9a:dd:2a:b6:a9:fe:d8:22:1b:d7:36:47:
                    7b:37:7d:29:3b:e6:bb:9c:84:29:f9:19:52:4d:ec:
                    11:32:26:45:3f:93:00:b1:da:b9:0d:00:3c:a9:a9:
                    5c:ff:0e:06:d4:e7:02:f3:c4:28:02:b9:7d:18:dd:
                    0b:d7:ed:a2:4a:88:a8:06:2f:cf:1a:86:54:ea:2d:
                    78:43:43:29:7a:4e:a7:4d:07:32:e8:e9:57:ce:d9:
                    66:55:04:32:88:ac:0f:05:87:37:23:59:b3:b9:ac:
                    52:38:28:69:ba:32:21:50:d9:f6:66:78:e5:5f:f5:
                    a6:92:96:46:08:cf:d4:a8:91:e9:5f:e1:e6:8f:a0:
                    a5:c4:5e:0a:83:9b:c4:06:41:42:cb:0f:3f:b5:d2:
                    aa:cb:64:ef:f1:b6:59:bc:20:f6:a9:42:6c:3d:9a:
                    50:9f:d8:1d:04:13:e4:0d:2f:80:3f:d3:8d:42:47:
                    f5:52:de:51:b6:4f:bc:d3:a8:5e:28:ac:07:50:07:
                    9b:35:96:3f:74:3f:17:ee:15:39:9a:d9:9c:73:17:
                    41:49:27:d1:29:4f:16:f4:20:4f:78:3b:6a:d0:03:
                    55:14:b5:97:4f:76:91:4d:8b:2f:13:f0:a3:08:7b:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:05:F3:65:B4:B6:22:E4:84:B5:9B:22:50:52:5B:E3:2E:BB:B4:E7
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a87b96e-73b3-44dd-8ebe-dd19a2db48db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dabb:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:44:d2:e5:be:7d:26:b5:9b:d4:4d:3c:7c:81:22:c9:ce:e0:
         c1:92:b0:6d:1d:a4:85:a2:e6:9a:1f:a5:4f:4b:ea:9d:c8:11:
         58:fc:37:11:d8:40:2b:b7:21:1d:8a:83:d1:2a:d8:8f:48:92:
         81:59:fe:41:b5:03:0b:52:83:f6:2e:e0:b2:c0:2a:c1:4d:f6:
         9b:83:18:c9:45:a3:03:dd:9d:d9:7d:30:e4:25:4b:72:a0:3b:
         60:33:02:53:de:c6:fb:aa:79:0a:63:88:20:13:45:1a:75:36:
         1a:7f:3a:0b:d7:fd:fe:7d:76:9c:2b:59:88:d4:a7:47:c3:0c:
         a3:fb:45:4d:cf:a1:ce:92:c2:5d:db:ce:17:8c:3f:bc:7c:9c:
         b1:48:94:31:f2:18:08:e1:fa:bc:95:ab:3e:41:4a:73:b2:49:
         da:73:db:9c:4f:94:0a:ae:1f:ad:ec:b4:46:0b:84:b0:65:37:
         f5:91:e7:67:b4:3d:84:41:2f:62:28:cd:e0:ed:32:c3:08:a2:
         ea:a0:4b:d7:87:23:46:71:86:67:57:5d:a4:67:35:f1:4c:53:
         f9:da:38:97:29:ea:74:dc:43:a9:ac:b9:e4:e8:ec:44:94:c2:
         8a:e3:48:9c:50:90:9e:98:62:e3:cc:26:b6:30:3e:e5:9c:de:
         18:31:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----