Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab84696e-cfeb-4324-b2ed-e1db1e409253.roa
File:                     ab84696e-cfeb-4324-b2ed-e1db1e409253.roa (raw, json)
Hash identifier:          Sb9p4iN3aJzNKgyx7woIXgk7V9HXxcSxo/c3+Vf000o=
Subject key identifier:   DD:9B:B7:59:2F:45:76:61:F6:1F:76:BE:06:CE:65:24:C0:03:F9:E8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0EAA2FB74244A53CF7F81A4C98B8B4CD839AF5C1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab84696e-cfeb-4324-b2ed-e1db1e409253.roa
Signing time:             Wed 30 Jul 2025 00:41:37 +0000
ROA not before:           Wed 30 Jul 2025 00:41:37 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:c0c0::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:aa:2f:b7:42:44:a5:3c:f7:f8:1a:4c:98:b8:b4:cd:83:9a:f5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:41:37 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=c38937dc3fea32a1e565b8bf8a5100da6976926a1de1a91674f099e43b8b5a1f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:61:18:6a:20:70:d1:30:01:98:01:b2:12:
                    37:c6:ed:2d:cd:04:2d:be:e8:e6:02:12:48:2a:2e:
                    c9:cb:98:61:d6:d6:e0:cd:8b:d2:bb:9f:27:43:1d:
                    a2:2a:20:b2:d6:26:76:05:1f:1d:ca:22:81:c7:8e:
                    c4:8f:4d:fa:80:fd:ee:31:e9:76:f8:f8:5f:4e:4e:
                    cc:05:5f:57:16:3b:e6:75:ce:4a:c4:af:a1:1a:04:
                    ae:f3:ed:eb:57:6a:08:61:1f:37:d5:e7:2b:12:36:
                    8f:8f:4e:45:c8:e7:83:81:aa:72:a6:5d:71:d8:50:
                    76:40:cb:0f:8f:0e:a8:fc:c9:f9:a8:3b:d5:71:06:
                    67:92:77:6f:0a:d1:e8:0d:71:63:af:00:36:a5:16:
                    11:be:0f:2d:66:83:40:aa:cb:21:67:5c:25:ac:96:
                    b1:9f:d2:f3:a6:0a:3a:9e:99:3c:d3:25:9e:26:16:
                    7f:cf:5a:cb:9f:91:02:48:75:a6:3f:fd:e4:1e:20:
                    8f:3f:84:8f:04:e9:97:29:f7:12:54:ea:2b:27:b9:
                    f1:d6:9a:a2:f9:c9:2d:8e:8f:79:49:75:20:90:9b:
                    74:29:3a:f4:d7:ac:b6:11:d2:5f:29:4f:9e:b8:49:
                    69:27:2e:76:2d:0f:31:1b:f4:6e:ab:9f:c6:bb:45:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9B:B7:59:2F:45:76:61:F6:1F:76:BE:06:CE:65:24:C0:03:F9:E8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab84696e-cfeb-4324-b2ed-e1db1e409253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:c0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         c1:2b:5c:18:50:b4:03:9c:35:f1:05:5b:a6:32:cf:9a:22:df:
         d8:eb:7b:14:34:f1:3f:d3:2b:5b:13:4f:a9:4e:3c:61:e4:8a:
         2b:b2:67:21:56:ad:ce:91:e7:06:c0:1d:23:86:ab:2a:14:88:
         8d:db:ac:78:63:ed:dd:de:f1:cf:77:25:5d:77:ea:09:38:36:
         26:89:9c:9f:76:76:20:90:ac:fe:67:b2:cc:5b:36:87:44:ac:
         3d:81:7a:0a:82:ad:a3:b8:6c:ba:5c:da:f2:ab:57:2a:0a:37:
         9d:68:e7:83:9a:90:d5:0f:b8:ab:bb:d5:ab:26:25:b4:3f:09:
         f5:6f:7e:0c:81:ab:40:01:25:ab:e3:2c:fb:b9:ce:ed:11:7a:
         e2:4f:1c:01:d2:07:3e:d8:76:79:e6:f8:0f:67:f4:2d:7e:b2:
         25:c1:dd:4f:84:e7:fd:88:7b:d8:70:63:26:e8:6d:7d:06:6d:
         86:13:c1:28:6b:2a:23:ee:d9:d8:a9:a9:0d:56:a6:3c:63:2f:
         18:6d:fe:9a:7f:5c:64:50:68:49:ae:5b:bf:62:a2:ff:bf:1e:
         be:d4:a1:a5:88:d0:a9:e4:62:f4:8d:71:02:b0:6b:0d:66:a8:
         a1:6b:24:cb:eb:73:f6:c1:4c:e0:69:33:cd:57:ca:77:fd:5f:
         49:0b:ca:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----