Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS10753.roa
File:                     AS10753.roa (raw, json)
Hash identifier:          BkZXv7qT51yazj//VGDDxFP6mcwmvOOEH+TODFDohJE=
Subject key identifier:   A9:49:5D:CA:11:56:BC:48:C0:F8:22:82:B2:DB:40:D8:E6:5F:5A:E6
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       68ABD1CAAA99F0CEF3097994E04AC80EBFE9B01E
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS10753.roa
Signing time:             Fri 01 Sep 2023 16:12:16 +0000
ROA not before:           Fri 01 Sep 2023 16:07:16 +0000
ROA not after:            Fri 30 Aug 2024 16:12:16 +0000
asID:                     10753
IP address blocks:        89.117.40.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ab:d1:ca:aa:99:f0:ce:f3:09:79:94:e0:4a:c8:0e:bf:e9:b0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep  1 16:07:16 2023 GMT
            Not After : Aug 30 16:12:16 2024 GMT
        Subject: CN=A9495DCA1156BC48C0F82282B2DB40D8E65F5AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:5e:86:ab:22:42:78:c4:22:ab:db:a3:fe:
                    27:4d:fd:c5:aa:aa:2c:1a:4d:5b:83:79:8c:c2:03:
                    ad:03:be:c8:da:14:33:41:fd:b0:3d:54:29:ee:a6:
                    2e:bf:8b:93:68:4d:00:c8:a7:a1:ae:b6:2a:fc:74:
                    7a:ae:e7:76:49:9a:5b:fb:9e:16:ef:5c:c4:9a:47:
                    79:eb:84:36:21:e9:a0:5b:64:68:84:b8:b0:a1:a6:
                    9c:ab:e3:b6:6b:af:8f:03:07:12:47:98:79:c9:00:
                    9e:b6:f9:42:a8:1c:01:a2:e2:b9:89:ed:95:cb:1c:
                    7a:3e:4d:4c:42:69:3c:23:d0:70:4a:2b:b7:9a:bb:
                    d2:23:61:10:b8:e1:d6:0c:50:6c:fd:db:ca:56:31:
                    75:c7:1e:b7:a8:ae:b7:db:01:f5:a9:79:8b:29:bd:
                    ca:83:c4:8c:5e:7b:78:e6:e6:b5:78:9d:1e:66:e4:
                    f5:fc:34:55:19:ba:5f:c1:84:c1:0a:19:af:69:d0:
                    a3:bf:c9:bb:a0:d0:fc:1b:60:5f:5b:f9:79:59:25:
                    ef:56:fd:50:0a:83:9e:5f:7c:d1:2c:de:86:3d:1c:
                    46:b9:68:c9:5d:3e:5a:bc:dc:2f:17:51:67:b8:31:
                    e9:75:08:8e:70:8c:ab:8e:4c:0e:a2:c4:d2:7f:90:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:49:5D:CA:11:56:BC:48:C0:F8:22:82:B2:DB:40:D8:E6:5F:5A:E6
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS10753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:51:a6:5c:ab:bf:77:0b:cd:a2:93:cb:2d:9f:79:39:2e:ae:
         31:9d:ae:4a:e3:e0:ff:7b:b1:a5:c3:59:d5:ab:0c:e5:49:7e:
         f3:3f:2d:33:fa:cf:3e:44:4c:7b:d8:57:74:2d:6b:98:65:69:
         5a:12:e0:f6:c4:c6:51:94:0e:8f:9d:1d:ff:3f:af:f6:ef:d4:
         ae:db:05:b6:60:ec:da:b2:9b:17:0d:bd:e9:7d:36:72:10:cd:
         08:95:93:25:ff:71:f3:7f:0a:31:06:4e:75:07:64:4a:b8:dc:
         64:c0:02:61:6b:33:ae:6b:4f:80:03:c8:49:4d:53:db:1b:78:
         65:55:3d:28:c1:5d:d9:bf:4a:1a:8b:07:5f:9b:92:2a:5c:d0:
         5b:a6:51:96:22:73:b6:70:c7:40:df:d2:44:5a:9c:3d:e2:c4:
         9f:ae:36:23:9f:3a:fb:1f:cd:45:8f:3c:22:d7:c2:da:46:4b:
         94:5b:0d:61:37:15:2a:25:9a:49:b2:6f:45:04:d6:bd:8e:49:
         7a:74:22:06:27:d3:06:31:ce:0f:d8:b8:e5:cc:fb:29:8f:d2:
         7a:c2:ef:4d:26:89:09:ce:ad:9b:04:04:ad:15:10:54:56:c8:
         75:a0:92:fd:75:34:15:a6:bf:49:7b:e5:a7:51:b7:64:63:9e:
         ef:0d:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 19:36:37 2023 by rpki-client on console-fra.rpki-client.org