Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206505.roa
File:                     AS206505.roa (raw, json)
Hash identifier:          e346QIyNEeJEUsmvkD4YBe9+vLcL8FdO5BC0/TdFsNo=
Subject key identifier:   23:46:6F:FF:B9:9D:BA:0C:25:2D:B6:B6:DA:AB:82:5E:36:6D:FA:E2
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5AE0EF55AB28C84CAE3C114DB4778884E1217851
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206505.roa
Signing time:             Thu 17 Oct 2024 19:43:49 +0000
ROA not before:           Thu 17 Oct 2024 19:38:49 +0000
ROA not after:            Thu 16 Oct 2025 19:43:49 +0000
asID:                     206505
IP address blocks:        86.38.246.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 18 Oct 2024 22:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e0:ef:55:ab:28:c8:4c:ae:3c:11:4d:b4:77:88:84:e1:21:78:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct 17 19:38:49 2024 GMT
            Not After : Oct 16 19:43:49 2025 GMT
        Subject: CN=23466FFFB99DBA0C252DB6B6DAAB825E366DFAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8d:96:b2:25:3f:4e:be:73:04:74:a5:af:8e:
                    f9:47:a7:43:83:2c:3f:3a:23:9d:f4:dd:da:82:fe:
                    ba:67:1a:ec:a2:fc:ce:bb:f2:b2:4f:62:73:a5:24:
                    85:25:3c:83:f3:3c:f6:e2:a5:c0:1f:92:71:f6:50:
                    20:55:12:3a:98:11:8c:89:fb:d2:c9:6b:31:52:5f:
                    1d:51:aa:7f:4f:ac:5f:82:0a:ac:6a:a3:bb:53:93:
                    d8:f2:27:11:fb:b8:b0:76:68:cf:32:b6:40:de:df:
                    c9:8c:cb:85:96:b5:ce:03:8d:32:d2:4c:15:92:e0:
                    a8:8e:ea:d2:f4:14:fe:cc:36:79:5e:7f:02:8d:f2:
                    84:60:1c:0f:34:0b:db:66:c8:ea:1e:a5:42:a3:73:
                    35:a5:e1:fb:10:ed:23:a0:f1:b6:e9:dc:62:e9:15:
                    a6:d8:b8:23:ee:d1:2b:4c:73:46:de:86:13:94:79:
                    72:af:96:3c:de:a8:dc:ce:db:e7:a8:91:d4:bb:f3:
                    7c:b4:83:48:e0:da:44:82:e6:db:fd:ff:40:3c:b5:
                    0a:8f:41:cf:52:fe:00:aa:df:13:2d:56:0c:fc:54:
                    85:7e:e6:40:8a:df:da:a7:6c:d2:0b:84:b0:8d:af:
                    ab:94:6f:3e:e8:72:d6:bf:77:98:9a:fe:3a:43:17:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:46:6F:FF:B9:9D:BA:0C:25:2D:B6:B6:DA:AB:82:5E:36:6D:FA:E2
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206505.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c3:dd:85:82:35:67:2f:0a:00:88:f7:23:6f:4d:74:f8:07:
         15:31:ae:3a:69:1b:db:e8:2b:6b:86:08:22:2e:2e:e9:4a:6c:
         d7:81:28:24:68:ab:31:9d:17:51:b1:ec:1f:82:ed:48:ff:c9:
         49:73:b6:2d:c5:b2:2a:81:36:2e:54:21:25:c2:2f:ec:72:89:
         fa:5d:1d:8a:a7:7b:99:e8:33:af:81:ed:8b:93:8e:b1:15:fa:
         02:c6:be:07:6b:3a:17:db:c5:fc:09:e9:41:bf:06:22:c1:8f:
         aa:1f:e0:b8:bf:27:76:cd:2e:48:88:43:a8:b2:d1:d2:48:03:
         af:60:2e:99:aa:58:56:0b:71:1d:0d:d1:4e:18:bb:7b:a6:6d:
         e6:bc:42:47:a9:27:e1:33:92:80:e8:a6:3a:d2:a6:d0:44:13:
         0d:5a:dc:b0:93:66:2e:25:9e:ae:82:c0:af:8c:5b:75:a6:43:
         db:c3:5a:a8:cf:d2:5e:4b:cb:6d:b0:80:4f:ab:b6:4f:53:65:
         b5:19:44:4c:1f:8e:e9:86:82:ef:9f:e6:2e:2b:ec:e3:be:2b:
         24:b2:5b:a6:96:35:19:fd:f6:77:44:41:5c:4b:ec:a8:ef:9e:
         3b:74:2b:f9:92:f3:2e:95:45:90:36:68:90:b7:0a:75:d2:50:
         82:9b:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:38:29 2025 by rpki-client