Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199081.roa
File:                     AS199081.roa (raw, json)
Hash identifier:          8zjIxF80elynpo49r+vLulpE3AFmidMAm0yw57thsyA=
Subject key identifier:   E1:F1:63:68:90:95:14:74:4F:0F:81:52:EB:58:C5:89:1C:19:EE:17
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7C3A3DF635D8A3E29C9216454C51DE918F631B74
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199081.roa
Signing time:             Fri 04 Aug 2023 08:52:20 +0000
ROA not before:           Fri 04 Aug 2023 08:47:20 +0000
ROA not after:            Fri 02 Aug 2024 08:52:20 +0000
asID:                     199081
IP address blocks:        89.117.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3a:3d:f6:35:d8:a3:e2:9c:92:16:45:4c:51:de:91:8f:63:1b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug  4 08:47:20 2023 GMT
            Not After : Aug  2 08:52:20 2024 GMT
        Subject: CN=E1F16368909514744F0F8152EB58C5891C19EE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:3e:0a:e7:eb:4f:b3:bb:5e:2b:09:5e:eb:
                    d4:42:a4:03:7a:e5:cd:b8:34:a1:a1:f3:b2:af:f0:
                    b6:83:aa:b4:50:b6:94:07:28:6b:3b:11:88:7c:45:
                    5f:c3:8e:16:1e:a5:26:0b:e0:60:d6:c0:5d:6b:bf:
                    25:5b:9f:a6:eb:3a:2a:37:2d:57:b9:5b:1c:26:49:
                    29:3f:bd:db:f6:3c:7a:18:de:2b:0f:cb:1a:c9:93:
                    91:c5:cf:8c:93:26:77:44:31:35:60:0c:01:26:5c:
                    04:d0:04:7e:04:2c:a7:13:cb:1c:24:ab:2b:a7:03:
                    d7:f1:ad:6b:44:5b:be:8d:18:a3:a4:9b:a4:6a:24:
                    06:96:fb:55:cb:34:91:71:e0:0b:84:c0:27:db:49:
                    dd:50:9f:c5:09:68:52:88:a9:76:44:4a:76:49:72:
                    ee:c2:01:dd:37:ce:54:ef:c2:bc:8d:d9:25:8f:7d:
                    0b:63:a7:69:fe:70:3a:f4:2c:42:f4:64:9e:e0:05:
                    1c:b1:f4:66:95:cf:11:a2:c0:f7:7f:60:ad:63:aa:
                    69:e7:ae:c8:84:0a:06:0f:42:62:ab:a3:59:d5:cf:
                    5b:01:c8:49:7e:3f:b9:44:7c:76:f1:3d:a9:44:a3:
                    73:e7:19:bb:06:d2:4b:d8:6a:e6:05:3a:0c:2e:51:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F1:63:68:90:95:14:74:4F:0F:81:52:EB:58:C5:89:1C:19:EE:17
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199081.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:80:6a:c5:fa:d4:c8:58:85:aa:20:e7:a7:d1:69:26:b6:3c:
         29:90:67:7b:e1:93:a8:ae:28:bd:5c:2f:3b:20:aa:9a:02:a4:
         9f:15:39:98:24:a9:32:5d:36:79:f2:47:29:6c:09:1e:15:b5:
         08:c7:70:42:ab:7c:7c:9e:24:c5:7c:36:95:04:85:fc:59:fa:
         a3:56:4f:02:ef:cc:e0:29:0e:c5:a3:e6:ae:2a:3e:fd:9a:a3:
         cf:b3:12:df:96:c4:7b:f5:3a:8b:12:2a:e1:3b:da:dc:3e:45:
         ac:8c:b7:e8:71:9f:09:2c:bf:a1:8d:07:52:6e:7b:3f:6a:ec:
         83:d1:eb:27:8e:2a:11:80:b7:33:15:73:aa:e8:6a:15:9d:40:
         b4:c0:13:55:c1:74:16:7f:2a:d7:39:a2:10:ad:f7:17:d7:ab:
         96:07:cf:36:36:f9:48:ae:8a:b3:f4:78:c8:2a:f1:d0:07:5f:
         4c:23:92:fc:b0:2c:53:ee:0a:99:c8:03:62:2f:bf:5f:63:cf:
         87:68:05:01:33:2f:64:f3:85:b6:9c:38:5e:e8:94:a7:11:16:
         44:71:0f:98:82:b5:6f:77:82:a1:4f:9c:11:90:f0:07:e2:bf:
         77:51:b2:d1:c9:b9:e2:80:56:b6:55:04:c1:a8:ae:9c:19:74:
         f6:63:a8:54
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUfDo99jXYo+KckhZFTFHekY9jG3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzA4MDQwODQ3MjBaFw0yNDA4MDIwODUyMjBaMDMxMTAvBgNV
BAMTKEUxRjE2MzY4OTA5NTE0NzQ0RjBGODE1MkVCNThDNTg5MUMxOUVFMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98T4K5+tPs7teKwle69RCpAN6
5c24NKGh87Kv8LaDqrRQtpQHKGs7EYh8RV/DjhYepSYL4GDWwF1rvyVbn6brOio3
LVe5WxwmSSk/vdv2PHoY3isPyxrJk5HFz4yTJndEMTVgDAEmXATQBH4ELKcTyxwk
qyunA9fxrWtEW76NGKOkm6RqJAaW+1XLNJFx4AuEwCfbSd1Qn8UJaFKIqXZESnZJ
cu7CAd03zlTvwryN2SWPfQtjp2n+cDr0LEL0ZJ7gBRyx9GaVzxGiwPd/YK1jqmnn
rsiECgYPQmKro1nVz1sByEl+P7lEfHbxPalEo3PnGbsG0kvYauYFOgwuUbzxAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU4fFjaJCVFHRPD4FS61jFiRwZ7hcwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzE5OTA4MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl1mDANBgkqhkiG9w0B
AQsFAAOCAQEAsYBqxfrUyFiFqiDnp9FpJrY8KZBne+GTqK4ovVwvOyCqmgKknxU5
mCSpMl02efJHKWwJHhW1CMdwQqt8fJ4kxXw2lQSF/Fn6o1ZPAu/M4CkOxaPmrio+
/Zqjz7MS35bEe/U6ixIq4Tva3D5FrIy36HGfCSy/oY0HUm57P2rsg9HrJ44qEYC3
MxVzquhqFZ1AtMATVcF0Fn8q1zmiEK33F9erlgfPNjb5SK6Ks/R4yCrx0AdfTCOS
/LAsU+4KmcgDYi+/X2PPh2gFATMvZPOFtpw4XuiUpxEWRHEPmIK1b3eCoU+cEZDw
B+K/d1Gy0cm54oBWtlUEwaiunBl09mOoVA==
-----END CERTIFICATE-----
Generated at Thu Sep 21 19:14:59 2023 by rpki-client on console-ams.rpki-client.org