Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa
File:                     ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa (raw, json)
Hash identifier:          wHptnXUcFs1b3Lb/xvF9TC0dBFc0mPiYE73KXRlDAiw=
Subject key identifier:   E8:50:4B:D1:F1:9F:8A:BC:8E:A9:DA:37:CD:69:37:89:E2:C6:10:BA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0165896FB5E865594F57716E8E43CB27979D30FB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa
Signing time:             Wed 30 Jul 2025 00:30:15 +0000
ROA not before:           Wed 30 Jul 2025 00:30:15 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:b000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:65:89:6f:b5:e8:65:59:4f:57:71:6e:8e:43:cb:27:97:9d:30:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:30:15 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=25cdb50c26323604889a6a8b93d8e076f0ed3d9bca6a83122749f21cc212790c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:47:bf:9c:e7:d1:4d:26:31:63:70:ea:38:
                    fb:80:ff:93:44:5b:3a:0a:0d:e1:24:6d:5d:f5:ac:
                    1a:c8:a4:19:2c:89:af:c8:f4:dc:79:ca:9a:30:35:
                    a5:06:14:a2:b9:df:aa:ae:69:6b:4d:0e:3f:a8:cd:
                    59:83:cd:0d:71:b3:fa:2a:16:db:d7:e0:be:d4:2d:
                    93:5e:43:f7:19:6a:a4:36:98:a8:1f:58:3e:1c:49:
                    b8:0d:7a:d8:5d:1c:91:de:a7:7f:f2:74:04:9e:d1:
                    42:f0:d7:e7:46:28:ee:3e:60:79:91:cc:51:be:4c:
                    27:2e:66:e6:98:2f:6e:b1:b5:de:56:f9:31:e1:52:
                    38:14:0a:16:ad:f3:68:50:15:df:3a:dd:cc:d3:1f:
                    77:79:a1:a2:27:34:32:4b:17:0a:a1:bc:78:14:0f:
                    8e:1d:39:3b:c3:bb:30:46:19:08:f7:95:aa:b4:bf:
                    26:9e:a5:96:74:27:7d:2f:79:0a:66:44:a4:a1:b8:
                    b1:b4:92:1e:42:bf:d3:3b:50:aa:be:6a:45:47:f1:
                    76:ac:2f:bf:18:65:00:cf:23:bb:54:fc:c7:a1:80:
                    33:63:44:2e:d9:8c:f2:29:bb:28:f2:da:74:38:4c:
                    fe:33:bc:2c:61:a7:34:c8:58:bd:d6:c8:3e:89:5b:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:50:4B:D1:F1:9F:8A:BC:8E:A9:DA:37:CD:69:37:89:E2:C6:10:BA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:48:37:03:c4:b0:c2:4a:fa:49:3a:a1:7a:6c:a8:90:de:84:
         88:da:e9:0c:f9:17:a9:c4:4c:18:28:cf:fa:b0:f5:28:7d:b9:
         a9:56:19:7b:bc:97:a5:e2:a1:82:e9:f6:b1:29:b8:93:27:48:
         00:87:ff:a4:c0:b1:af:f1:05:41:34:44:7c:79:76:c9:af:ae:
         b9:4d:9d:a4:b5:50:cb:52:03:56:00:68:39:32:25:0a:99:d4:
         f3:da:c4:8d:6e:25:32:76:de:e3:12:bb:21:ad:ac:96:58:be:
         78:bb:09:e6:e9:12:19:63:1e:9e:d5:b9:fd:0b:e0:cf:e4:ba:
         1b:7b:bb:19:79:20:2d:0b:c1:bc:f8:6a:a5:ab:b1:05:1b:ed:
         a3:0e:8e:0e:88:42:16:7a:f1:f2:e5:93:99:4d:65:54:ba:3f:
         d1:47:eb:b9:c8:48:72:55:5c:3f:63:fb:54:84:30:f2:98:2f:
         71:7d:a9:a5:5d:9c:84:0f:31:0f:a6:ce:04:b4:bc:ea:f9:59:
         e8:cd:fb:bc:4e:1b:92:0b:3d:46:fb:c8:0e:5b:db:d1:05:e1:
         7c:60:ad:9e:b2:e4:17:80:d6:64:44:b8:e9:33:c4:1f:2f:20:
         79:86:52:89:e0:57:62:16:5b:88:ba:d7:43:72:10:4f:08:49:
         c3:2b:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:57:23 2025 by rpki-client