Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa
File:                     93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa (raw, json)
Hash identifier:          jGIcvib+k6MO/mneplTIXqzixtSzUWqFoS/ydfhQaj8=
Subject key identifier:   6A:8A:5D:17:6A:74:32:72:76:77:61:CF:3E:0C:61:64:01:54:55:18
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       150526AC7E7B08986C3721E9865A29643F37BC04
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa
Signing time:             Wed 30 Jul 2025 00:30:23 +0000
ROA not before:           Wed 30 Jul 2025 00:30:23 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:2800::/40 maxlen: 40
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:05:26:ac:7e:7b:08:98:6c:37:21:e9:86:5a:29:64:3f:37:bc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:30:23 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=1392fffba88f0d61f48428c4e1f315889d70030feae377a8001bba0da5d36f56, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:63:09:de:b3:e4:30:14:d5:2f:b7:4f:9b:
                    95:df:01:b3:c4:8a:ff:3f:68:7e:a0:3c:3c:81:1d:
                    c0:50:75:65:60:17:16:1a:a1:3d:9c:d5:af:9e:8c:
                    59:1c:9a:5e:27:1f:18:52:68:65:b7:35:bf:cf:c1:
                    62:31:a0:d9:7c:9b:e4:33:f1:37:9b:28:1a:24:1f:
                    3a:e7:74:d1:0a:e8:a6:38:9f:7a:a6:f0:ba:9e:8a:
                    c2:21:01:b8:c0:5f:be:9e:51:b5:e8:91:86:a5:42:
                    dd:32:b0:68:f1:3c:ca:fb:a8:7d:0b:a0:23:31:80:
                    19:ae:9e:be:37:78:cd:db:d4:27:5f:00:6b:7b:9f:
                    bf:d8:c9:9b:0f:9c:33:20:70:f2:b0:38:71:0f:59:
                    78:a4:ce:bd:82:7e:fa:84:2f:4c:5c:cf:d5:b9:a0:
                    ac:cc:b8:55:16:49:8e:c6:41:e2:6c:b8:2d:0a:01:
                    21:58:4b:bf:98:da:63:d8:68:58:ca:be:77:a2:41:
                    d8:fa:83:a9:86:c5:90:65:fb:81:c0:b2:a0:41:5b:
                    1d:9b:48:bb:86:84:aa:a1:30:c3:07:fd:6c:4a:79:
                    68:87:13:39:6f:a2:46:00:53:97:07:bc:85:cf:58:
                    41:d6:78:0d:78:c5:3d:3a:0b:42:fb:f2:f7:b7:9e:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8A:5D:17:6A:74:32:72:76:77:61:CF:3E:0C:61:64:01:54:55:18
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:3b:a8:38:e5:00:09:d2:e5:ef:53:e1:fb:1e:0b:38:14:06:
         75:16:92:ea:e5:00:7f:ed:64:27:a1:52:d1:b4:20:17:71:fd:
         c8:64:64:56:4d:77:14:18:5d:d0:09:3c:cc:59:9b:39:32:df:
         18:c6:3d:18:36:be:3b:0a:f1:58:ed:0b:bf:60:31:4f:ef:a7:
         93:d6:41:69:8c:92:cb:f5:4e:f8:83:e7:6c:5b:1a:9a:1e:7c:
         c4:d0:3d:98:10:69:8a:d7:d4:98:ff:84:8b:60:ea:1a:8f:4d:
         25:81:59:01:64:4a:83:f7:2f:c8:8f:a8:08:a0:09:36:1e:8b:
         c5:9a:f6:7c:1a:52:51:ca:ad:e2:70:8e:ba:e2:47:c6:01:cc:
         54:4c:40:45:2e:dc:99:20:b7:e0:5c:ba:fe:16:33:ad:51:fd:
         9e:af:e8:ca:b8:76:e9:17:9d:00:51:52:f3:20:15:e0:33:c4:
         da:5c:55:e4:e1:5e:49:a0:d3:f9:f0:a3:2a:61:92:09:84:71:
         31:7e:d1:8e:3b:93:cd:94:46:d1:e1:64:2f:55:a5:65:42:65:
         4e:ca:6b:a5:4d:f7:43:fd:57:be:ab:5e:3d:6d:9a:7b:3d:a0:
         6c:79:7a:b2:16:31:f5:41:9e:77:fe:b3:f7:62:68:de:d9:6d:
         30:10:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:57:26 2025 by rpki-client