Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adbdc15b-cf27-4bd7-b6eb-12dc63205e62.roa
File:                     adbdc15b-cf27-4bd7-b6eb-12dc63205e62.roa (raw, json)
Hash identifier:          H61vDijDIX+EsZU6x5MuYYuCdUApCWMj82l8upqGUGg=
Subject key identifier:   AB:9F:17:87:93:F8:CE:F3:90:B2:C1:AC:EC:5A:CF:78:1F:BF:44:F2
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       72BD580059375C0EEE54C5B4C9DEFDCF6DF953C2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adbdc15b-cf27-4bd7-b6eb-12dc63205e62.roa
Signing time:             Thu 22 May 2025 00:38:31 +0000
ROA not before:           Thu 22 May 2025 00:38:31 +0000
ROA not after:            Thu 26 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab9:9080::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bd:58:00:59:37:5c:0e:ee:54:c5:b4:c9:de:fd:cf:6d:f9:53:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 22 00:38:31 2025 GMT
            Not After : Jun 26 23:59:59 2025 GMT
        Subject: serialNumber=0ffb13ab47439573d330000d65a94c01a61262d2c68d83ed4a05d1ea16399d8e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:2e:1c:4d:f7:e5:dc:94:70:3a:a8:b7:ee:
                    0d:a4:01:ca:b4:01:d7:b7:5d:6b:f5:c3:26:99:b8:
                    85:8b:f3:c1:62:6c:67:81:7b:b2:0c:59:e6:db:04:
                    d3:3d:5b:b4:ba:c5:99:82:43:4a:fa:e8:3a:c8:97:
                    a0:3d:a1:d5:4a:7e:fe:2a:c0:98:6e:7c:fd:4b:64:
                    36:82:79:c5:3e:6c:5c:73:ae:34:6b:f9:6e:83:47:
                    17:ad:be:c0:6b:bc:c8:33:46:20:95:27:0c:a7:d0:
                    d1:ac:35:d0:f5:cd:f6:c8:51:a1:86:b8:29:a2:7f:
                    22:3d:cb:65:9b:19:ec:eb:3d:8e:59:f8:05:c6:fa:
                    c8:88:14:d8:7d:fd:86:b8:1c:0a:7d:19:63:60:8f:
                    20:7c:39:e4:f0:b7:08:28:e1:ec:16:43:74:f2:c8:
                    eb:f6:23:97:93:c6:1c:9a:de:d4:b2:33:69:2e:2f:
                    b7:62:62:2d:7a:32:43:9f:0e:b1:f9:90:d1:18:83:
                    28:ab:c9:e4:b0:ae:17:c2:f1:f2:54:3f:61:73:5b:
                    0f:63:6e:81:d6:ee:ca:cc:97:38:9f:9b:cb:4b:dd:
                    7e:0b:92:a5:b8:c5:be:9b:46:40:80:6c:f7:ea:79:
                    ad:25:7c:24:b1:77:e3:f4:a7:ca:2e:b6:3c:4a:54:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9F:17:87:93:F8:CE:F3:90:B2:C1:AC:EC:5A:CF:78:1F:BF:44:F2
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adbdc15b-cf27-4bd7-b6eb-12dc63205e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab9:9080::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:78:3e:f6:60:76:56:94:18:ff:e3:7c:86:d4:50:01:db:ec:
         67:98:23:cf:9c:f4:cf:10:26:44:d7:08:97:c6:b1:fd:7a:39:
         24:a9:44:db:3d:e6:8b:e1:65:28:86:6f:82:c7:c6:50:20:3e:
         59:ff:9c:62:b9:e4:30:b3:f2:3c:13:42:f9:a9:32:35:14:a1:
         21:28:58:04:a0:42:1a:1a:db:15:b7:a0:d9:74:a0:f8:74:d8:
         32:85:e6:62:29:10:f3:6d:d6:a1:b7:2e:ad:59:ff:45:dc:2a:
         30:32:41:54:94:f6:dc:99:76:33:51:f8:65:80:76:8a:30:9c:
         49:19:a2:bc:5d:c3:b8:b7:f2:5a:49:3a:fa:0b:c2:d9:f3:7d:
         8b:47:07:bf:7f:07:db:47:9f:eb:70:ca:4d:80:b9:3d:bc:96:
         b4:62:9e:6e:88:f6:75:08:fd:fc:f7:03:99:85:5a:dc:22:24:
         f3:40:f3:7b:b4:7f:4e:2b:42:9f:25:e9:20:1e:18:56:b1:b8:
         02:f0:0e:22:3b:fd:0a:fa:99:5e:ac:6c:f6:e7:79:78:86:b3:
         c5:b6:bf:fd:be:9f:c4:0b:f3:0c:4b:2d:f8:68:20:8c:c9:9b:
         b1:9b:fa:ae:42:0b:b3:ef:ad:cc:1f:ce:13:bb:75:8d:cb:14:
         7a:2e:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----