Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9612fc10-b58f-40ba-931d-e2082c30f2e9.roa
File:                     9612fc10-b58f-40ba-931d-e2082c30f2e9.roa (raw, json)
Hash identifier:          k2ZLYC2Ou8iRX6BydZcd+9L5YizRkk9OfQKuQ7IeT/k=
Subject key identifier:   7B:CB:AB:BB:5E:16:7C:D6:FF:AA:49:69:C7:2A:EB:5E:C3:BB:32:35
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7841110E1664536121CA7321CC07D09992B74560
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9612fc10-b58f-40ba-931d-e2082c30f2e9.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d040:1000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Wed 22 Jan 2025 02:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:41:11:0e:16:64:53:61:21:ca:73:21:cc:07:d0:99:92:b7:45:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=c2229b8caf2374be42e4c81ee7cb0d224a504d9e7fd7f5903db1d903fc9ba0be, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:a7:1d:b4:d7:1d:de:ba:10:3e:c7:08:fd:
                    b5:4f:81:31:c5:f6:73:33:9f:94:c2:49:80:3e:17:
                    d4:5d:6e:91:5e:83:1e:7b:96:47:88:4b:bf:3d:00:
                    8c:09:79:e0:a1:fb:a8:36:d3:ec:77:28:f1:d0:2d:
                    66:49:f0:d9:89:06:52:64:54:5c:53:56:87:c4:ec:
                    03:8c:4b:7c:2b:bd:3e:fe:5c:78:47:b7:11:ce:6e:
                    cc:37:57:3b:c6:7b:50:73:11:25:2c:d5:e9:fa:5b:
                    c0:ce:b4:a3:5a:1e:e3:d8:c2:c1:4a:a9:9c:4e:e6:
                    ea:5a:e6:f5:32:f6:43:5b:3c:33:ea:7a:7a:7b:34:
                    8f:70:d9:f5:92:d4:66:b7:12:83:62:5b:a4:cf:49:
                    35:05:97:34:fc:b5:0b:45:da:93:81:bb:d4:44:3d:
                    28:b4:80:b2:65:7f:13:8e:22:22:55:2c:2f:57:1c:
                    c6:85:a2:cd:8f:8c:e9:be:d1:be:09:9a:bc:de:ec:
                    f1:c9:25:ea:be:c5:e1:0e:ce:21:ff:00:6e:c5:92:
                    03:37:d8:b0:f6:f3:b6:34:e7:64:c9:62:5c:be:fd:
                    7b:b1:ea:17:dd:a0:be:f1:a7:34:f2:77:c5:07:aa:
                    95:3d:83:83:ca:a4:fc:51:75:c9:12:e4:f7:64:53:
                    e2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CB:AB:BB:5E:16:7C:D6:FF:AA:49:69:C7:2A:EB:5E:C3:BB:32:35
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9612fc10-b58f-40ba-931d-e2082c30f2e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d040:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:cb:f5:ad:34:cf:19:c9:4f:78:b7:2e:d6:0e:24:a4:c8:85:
         11:7c:0c:60:d1:c2:64:a7:6d:93:73:ab:0c:50:58:5b:df:47:
         9c:23:6b:0d:fb:a0:25:f9:ee:b9:3e:5d:6d:0b:1d:db:05:b8:
         30:b2:e3:c9:64:22:12:00:42:a2:f3:3f:92:48:9c:83:ea:0e:
         c1:92:01:0f:01:8e:a5:a4:87:68:a0:c8:db:69:24:11:74:5e:
         06:b8:64:e1:eb:1f:b7:44:b9:1e:e1:97:32:9a:63:2e:f6:09:
         83:1f:6e:3b:8d:7e:7e:9a:3b:ed:02:3c:f2:39:6d:44:f0:03:
         bd:aa:cc:d1:df:25:78:4e:e1:52:ee:04:f9:51:00:5f:d9:b8:
         25:68:03:69:52:30:07:65:f8:4a:29:7f:0e:63:fe:4e:e9:08:
         28:08:1b:1f:2c:d0:3d:26:bf:95:e4:5b:63:fc:86:57:74:9e:
         1f:22:01:f6:d3:93:9e:a4:f1:4f:16:1f:c5:7d:68:c1:bf:6e:
         eb:8b:07:b4:6b:17:a0:97:f4:4e:1b:f9:c5:f3:f7:ed:e0:f8:
         4a:9f:4e:89:28:ae:cb:e1:be:9d:f4:64:2b:3e:c2:32:f2:fe:
         ed:c5:13:1c:d2:ee:f3:f4:cf:6d:65:34:27:3e:cc:4a:03:36:
         5f:72:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----