Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197644.roa
File:                     AS197644.roa (raw, json)
Hash identifier:          om+Gd93H4zhNRGmPLyvATWtat3sVvBXiy8r1XoIlQOw=
Subject key identifier:   CF:44:04:8C:F1:C8:35:F6:2E:65:3C:05:73:7B:71:D6:8F:2F:29:CD
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       13508B40F1D7869DDF2650B2366E82BB11E7FB70
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197644.roa
Signing time:             Thu 27 Jul 2023 13:57:54 +0000
ROA not before:           Thu 27 Jul 2023 13:52:54 +0000
ROA not after:            Thu 25 Jul 2024 13:57:54 +0000
asID:                     197644
IP address blocks:        86.38.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:50:8b:40:f1:d7:86:9d:df:26:50:b2:36:6e:82:bb:11:e7:fb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul 27 13:52:54 2023 GMT
            Not After : Jul 25 13:57:54 2024 GMT
        Subject: CN=CF44048CF1C835F62E653C05737B71D68F2F29CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:f9:c5:79:f5:17:f0:78:0f:0a:c3:0e:a3:
                    03:1f:42:c6:10:df:4c:1d:8c:6d:c5:53:5f:27:e1:
                    18:87:70:52:02:b5:4a:13:83:8a:83:fa:e0:a7:87:
                    e8:2a:a9:b7:1c:01:5b:cf:ee:df:56:f0:fe:80:e6:
                    1e:af:1f:d3:9a:2e:63:78:e7:b6:ab:b3:af:c6:3d:
                    d6:6a:66:36:7d:02:1a:37:85:be:58:76:dd:11:54:
                    10:ce:98:f5:e9:71:1a:11:2b:99:03:9e:a8:9e:c0:
                    a7:d2:4d:50:68:04:2b:f6:2a:ad:79:49:76:f7:78:
                    ad:0d:a5:fd:63:57:a5:cf:d2:26:43:20:01:3e:be:
                    5b:f0:8e:0e:8d:1e:e2:6d:e6:d2:e8:fb:8f:c2:95:
                    2d:e1:15:b1:1e:ec:b3:ee:80:f3:39:03:a4:b4:50:
                    1b:c4:93:01:f9:ff:5f:e9:4a:f4:2b:4c:45:41:a0:
                    3b:0e:eb:9a:ed:ed:78:60:01:53:82:28:ff:99:03:
                    3d:14:16:19:d4:62:f8:45:fb:00:ef:4a:b5:d5:a6:
                    45:3e:81:e3:83:6c:9b:99:59:48:7a:96:e0:af:9b:
                    18:11:0a:2b:65:56:9d:e4:fc:a5:b3:a8:09:1e:95:
                    24:d9:8c:d0:f7:6b:59:45:c3:c6:e9:9e:1f:19:5b:
                    85:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:44:04:8C:F1:C8:35:F6:2E:65:3C:05:73:7B:71:D6:8F:2F:29:CD
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197644.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:da:69:4b:3a:65:ac:8e:b7:12:7d:07:33:93:60:6f:d9:89:
         97:10:6f:85:96:d9:33:3b:25:0e:20:60:f7:52:ff:9b:80:65:
         fc:69:cb:50:02:7a:bf:75:41:ee:60:b9:39:d7:db:13:33:14:
         97:af:9f:26:18:26:e7:18:09:fa:33:33:25:b2:c3:5b:46:59:
         9e:2a:2a:9f:71:47:13:b9:c2:45:ff:95:44:8b:c9:3c:ed:70:
         1e:4d:ee:2a:d6:c7:bb:e2:55:7a:97:08:22:68:b7:62:85:c2:
         2f:20:14:8e:3d:4b:b8:ff:79:7f:be:dc:1d:98:69:4a:4b:d2:
         33:ae:4e:10:13:52:b6:67:0e:c2:74:bc:4d:d3:12:bd:d9:ee:
         8c:d8:73:ec:bb:c3:ae:05:29:3b:f5:4a:16:cc:51:e4:aa:b2:
         6b:15:10:46:73:02:5c:e4:52:d0:45:4a:5e:00:59:0b:08:32:
         96:56:30:80:f1:29:e8:2b:c0:15:42:e4:8a:02:2e:ac:fa:f5:
         68:a1:e2:11:ed:f7:d1:4d:e5:c9:b5:fc:df:33:be:29:22:b9:
         8f:80:90:dc:42:1f:fa:ff:f7:2e:94:3b:05:cf:df:2f:50:1d:
         10:b5:2b:f3:e1:49:a2:10:23:36:c3:9e:ad:af:ed:df:f2:62:
         bc:01:2f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 15:50:30 2023 by rpki-client on console-ams.rpki-client.org