Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f53f7a72-64c0-40ee-9ab6-db0e04b1b282.roa
File:                     f53f7a72-64c0-40ee-9ab6-db0e04b1b282.roa (raw, json)
Hash identifier:          /PD93gOkK5g76sFDzKIsTxQf4PMBzW60hA6f64JgyzQ=
Subject key identifier:   DA:56:04:CC:22:79:FD:C4:4A:23:FC:4E:85:84:54:96:5E:7F:85:78
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       320428F485C2B79CD3BFDF0A24D25CDC3C4B58EF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f53f7a72-64c0-40ee-9ab6-db0e04b1b282.roa
Signing time:             Wed 30 Jul 2025 00:21:25 +0000
ROA not before:           Wed 30 Jul 2025 00:21:25 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:e080::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:04:28:f4:85:c2:b7:9c:d3:bf:df:0a:24:d2:5c:dc:3c:4b:58:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:21:25 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=d999e48b05ee95e29b726e46d90ecac1b709d130bc3223e8b02b3f917300c33d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:28:65:ae:70:5f:5d:58:47:f7:83:b4:f3:
                    3f:15:1f:96:db:7a:4d:39:32:e3:6f:6e:2e:49:6a:
                    cc:f8:f9:66:68:cd:3d:d5:dd:bd:bb:d7:c9:76:56:
                    cb:cc:f6:a2:e1:12:63:d5:ec:fe:a8:96:50:1e:d5:
                    35:de:4b:e4:e0:89:4d:2c:03:37:22:b9:65:38:77:
                    f4:ab:7f:cd:2f:8a:7e:74:0d:f6:3b:df:50:cd:e8:
                    2f:dc:06:1f:b6:c6:e7:a9:1e:1b:9a:fd:0b:b2:d8:
                    16:76:ee:b8:7b:6e:00:80:66:fe:48:05:6c:a3:09:
                    00:e0:44:02:67:2e:24:1a:e3:63:ac:9c:01:b9:d9:
                    f9:33:f2:73:d5:9b:ac:eb:25:6c:cc:3a:53:fe:7a:
                    8a:01:2b:5f:5b:83:ab:03:92:96:1a:e8:82:24:30:
                    32:99:5c:06:01:bc:0f:0e:d9:39:b0:71:e9:e3:49:
                    8f:28:15:b4:61:2e:d6:ff:66:1d:da:93:4f:bc:41:
                    c1:61:c2:f6:d8:c6:b4:b7:7b:9e:34:1b:4d:68:85:
                    2d:7c:96:0b:6e:62:56:ee:d2:1e:3a:91:be:82:39:
                    9d:ed:d7:89:d2:1c:1e:0d:7c:92:a6:04:e0:d7:34:
                    96:a7:a5:68:82:52:a5:2b:4e:10:14:7c:62:53:b6:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:56:04:CC:22:79:FD:C4:4A:23:FC:4E:85:84:54:96:5E:7F:85:78
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f53f7a72-64c0-40ee-9ab6-db0e04b1b282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:e080::/46

    Signature Algorithm: sha256WithRSAEncryption
         07:c2:20:34:0b:9b:fc:b4:43:5c:10:1d:d7:b6:42:6a:d8:3a:
         40:47:91:f6:19:5e:e9:68:46:d5:8c:fd:bf:46:53:f6:64:c3:
         ed:9b:27:e7:05:e2:77:70:91:34:18:a7:6e:80:5f:e7:78:f0:
         fd:d1:cb:80:2f:ca:fc:42:90:8a:59:7f:6a:3b:86:53:6a:d0:
         e6:38:37:d7:fa:a5:70:f3:87:13:17:c1:ce:e1:a8:8e:bd:d0:
         33:fe:50:82:f1:4c:32:c3:77:e5:ab:8e:9e:47:e9:7c:1b:36:
         96:0f:71:0b:1d:b7:83:8c:8d:81:81:fb:27:41:a4:69:08:95:
         38:b5:d6:b3:c7:5f:2c:8e:01:a0:16:67:f1:5e:1a:15:c5:0a:
         77:d0:fa:ef:9c:74:dc:44:59:a8:f9:10:b9:1c:5f:63:89:de:
         78:41:d8:0c:bc:8f:3b:a3:f8:c2:48:5e:16:06:1f:28:f5:fa:
         d8:90:0d:0f:e1:cf:50:1b:3d:ba:3f:cb:bd:2c:84:a7:60:b8:
         4c:e7:3b:f7:8f:c6:98:f3:03:02:2a:2c:97:56:87:9d:17:34:
         a5:ef:ce:36:3b:32:19:18:82:d9:5e:55:5a:25:c4:72:6a:5c:
         55:7b:a0:b9:ce:62:48:6a:f2:e1:b7:91:a9:fd:4a:88:c0:28:
         ae:e2:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:57:23 2025 by rpki-client