Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204843.roa
File:                     AS204843.roa (raw, json)
Hash identifier:          4BMSoWGD0y0s8MynSguH6vwiAFr5z19OYIkKruOrOW4=
Subject key identifier:   F7:67:F5:D2:B0:9B:9E:72:4B:CB:41:88:58:2B:C3:ED:07:A8:ED:12
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       52D5223963014023878D9ED9496F3498ECF3CE2E
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204843.roa
Signing time:             Mon 10 Jul 2023 11:00:06 +0000
ROA not before:           Mon 10 Jul 2023 10:55:06 +0000
ROA not after:            Mon 08 Jul 2024 11:00:06 +0000
asID:                     204843
IP address blocks:        89.117.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d5:22:39:63:01:40:23:87:8d:9e:d9:49:6f:34:98:ec:f3:ce:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul 10 10:55:06 2023 GMT
            Not After : Jul  8 11:00:06 2024 GMT
        Subject: CN=F767F5D2B09B9E724BCB4188582BC3ED07A8ED12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:95:76:07:af:e6:29:d8:eb:19:3b:00:cd:
                    1b:b5:06:eb:e7:c5:97:8f:98:50:83:61:73:36:41:
                    98:71:9b:bc:8c:63:16:e2:1e:7d:1e:54:ca:c6:f7:
                    f8:3c:cb:88:56:f1:32:06:0a:21:58:de:8b:b1:41:
                    ea:fa:07:84:48:af:a8:e9:dd:43:c0:ee:c4:6b:69:
                    32:9f:cc:9b:ab:a7:91:0b:c7:28:42:c2:92:02:11:
                    a4:cc:e1:3f:f8:10:6e:1a:6f:57:e4:c2:82:b3:ca:
                    9f:e8:b7:5b:e1:13:5f:58:ba:31:34:18:6c:47:66:
                    7a:f0:17:a6:ee:de:60:ca:be:fe:a6:e0:4a:a5:3e:
                    0b:1a:ee:6a:f8:a1:0a:b6:ff:6b:98:ad:fb:6c:62:
                    75:9d:15:64:55:32:ec:7c:05:8f:82:62:49:2b:13:
                    f4:ff:de:d2:e6:bb:9c:c4:38:3f:ee:20:48:e2:1e:
                    cb:d0:35:b4:df:a8:27:dd:7d:3d:ae:c8:03:07:ed:
                    f0:85:8f:ed:a1:e2:b8:f5:3c:03:71:96:4f:b0:84:
                    6a:9b:6d:ce:9d:4a:8b:44:d7:24:44:37:28:b2:a0:
                    38:bc:54:cd:8c:42:a5:67:9b:c3:a7:4f:72:2b:df:
                    63:68:14:09:33:a9:f1:87:2b:2d:f5:9c:b2:bd:3b:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:F5:D2:B0:9B:9E:72:4B:CB:41:88:58:2B:C3:ED:07:A8:ED:12
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204843.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:83:42:ea:7e:a8:24:f7:9f:1c:f4:e9:57:a4:fa:60:33:c5:
         72:0f:ee:7d:c8:2c:36:29:d1:37:70:0f:95:89:32:6f:99:92:
         1d:16:05:14:0f:23:4d:87:42:df:88:f7:f9:67:8f:82:d5:a0:
         f3:ac:32:04:9f:8d:ab:d2:70:f2:8c:d7:91:54:78:80:13:a3:
         54:6e:99:fb:d0:6d:be:86:8c:7c:32:98:7e:b4:85:f5:24:ac:
         b1:38:13:49:14:a3:e7:3c:dc:a9:5d:67:22:32:f5:38:20:aa:
         55:c9:11:a3:9a:5c:8c:46:89:37:e0:9d:a9:b2:38:7d:14:4b:
         0c:9d:6b:aa:62:51:c9:18:5e:44:a8:f1:b3:ac:1e:bc:3f:c8:
         21:3f:9b:ad:e9:75:16:c1:93:2e:6c:b1:31:25:ca:38:a9:dd:
         dc:7c:78:4d:9f:07:99:3e:fa:ab:48:19:aa:58:d8:8e:2b:5f:
         71:84:70:de:a9:3f:58:e3:3a:90:41:75:72:aa:51:eb:3a:96:
         92:17:ee:ec:e8:56:d6:37:1e:72:62:3a:03:31:31:51:3d:91:
         8e:f6:7f:c3:24:81:df:c3:d2:94:8e:aa:69:b5:4a:2f:d2:df:
         a6:d0:48:52:2b:65:6e:f6:c7:3e:08:13:75:d6:6f:c4:e0:16:
         d2:10:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org