Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207459.roa
File:                     AS207459.roa (raw, json)
Hash identifier:          WMtVZT+ToqcbEmrJwHCGkw86D0n+0e+IUNA1cNKY5YY=
Subject key identifier:   C0:41:40:B2:01:83:F9:9C:5B:A7:07:76:D6:55:A7:AF:4E:D1:78:F8
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0E15A39C2489ED8B9D86512664791914700EBD
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207459.roa
Signing time:             Thu 13 Apr 2023 15:00:16 +0000
ROA not before:           Thu 13 Apr 2023 14:55:16 +0000
ROA not after:            Thu 11 Apr 2024 15:00:16 +0000
asID:                     207459
IP address blocks:        89.116.253.0/24 maxlen: 24
                          89.117.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 12:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:15:a3:9c:24:89:ed:8b:9d:86:51:26:64:79:19:14:70:0e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 13 14:55:16 2023 GMT
            Not After : Apr 11 15:00:16 2024 GMT
        Subject: CN=C04140B20183F99C5BA70776D655A7AF4ED178F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:fb:0d:5e:52:fc:e8:3a:86:f1:cd:91:19:
                    86:7d:cd:62:59:70:52:4a:93:75:cf:c4:6d:30:7e:
                    db:96:ed:cf:2a:33:d3:43:04:14:7c:75:bf:00:88:
                    8a:df:68:8b:f1:76:ce:68:84:c9:be:43:ef:b0:14:
                    37:05:0d:fc:8f:6e:cd:a8:95:a8:38:6e:8d:76:17:
                    15:0c:ca:b9:d4:12:63:ce:2c:94:27:cf:e1:0c:fe:
                    ce:ae:c4:a0:fa:e7:f1:84:a0:89:c9:18:24:da:56:
                    e0:fd:30:d0:cb:9d:5f:8d:fe:8e:23:3a:92:c4:0b:
                    b3:25:e2:a5:a8:8c:fe:72:e1:c3:c5:61:07:4f:74:
                    94:85:74:3b:c9:e8:72:51:68:d6:61:ef:52:70:03:
                    1c:37:04:bb:44:16:89:29:78:bf:88:16:7d:38:ca:
                    44:e2:0b:92:15:d8:2f:e3:34:b9:87:a7:44:71:c0:
                    da:fa:30:92:85:e2:ad:40:f6:da:d1:8d:d4:bf:0a:
                    f4:99:59:cb:3b:92:72:81:85:ef:64:1d:f5:c1:7a:
                    d2:30:de:78:40:f7:89:9e:73:f2:cc:54:2a:76:28:
                    b2:40:be:68:48:d6:59:7b:c0:92:f9:21:7e:87:fa:
                    c5:23:5c:d4:b3:a9:f2:32:dd:5b:a1:f3:7e:b5:ba:
                    7e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:41:40:B2:01:83:F9:9C:5B:A7:07:76:D6:55:A7:AF:4E:D1:78:F8
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.253.0/24
                  89.117.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:9d:ac:2e:58:f7:88:19:ac:24:5d:59:cd:54:94:0b:3b:b9:
         71:e7:1d:f5:66:e1:63:4d:fd:f7:bf:73:3e:0c:ab:ed:50:11:
         29:6f:37:1a:70:cc:c0:2e:8e:5f:4f:fa:fb:1b:aa:50:e0:97:
         7c:40:5e:67:44:4b:4e:2d:76:de:0b:10:9f:c0:12:f9:c8:0a:
         ce:d3:09:a8:af:ea:5f:01:ee:a5:bc:e6:2c:55:84:1d:96:11:
         1f:8b:00:51:05:38:05:37:e2:20:b9:3d:20:fc:9a:55:5e:e4:
         1e:74:63:37:16:e3:51:a8:5c:43:ae:c1:de:ae:a0:46:81:46:
         7e:f4:5f:08:03:3b:35:31:31:4f:3a:0d:42:94:21:59:c8:7d:
         0b:46:22:b3:c3:bc:01:98:d5:1c:d5:dd:eb:b2:92:13:4b:a9:
         7a:82:b1:9c:cc:ca:30:64:cf:71:5f:8a:bc:8b:33:99:77:4d:
         12:92:0d:84:c3:78:c7:f5:ce:c1:84:dd:5b:a4:eb:70:d5:7f:
         7f:fe:62:20:c3:5a:e9:93:99:22:95:ef:95:9e:4d:09:e8:ab:
         f2:77:36:fe:4c:1a:d0:fa:77:a5:bd:8f:ff:53:8f:20:c3:96:
         31:60:ce:1d:04:71:08:3a:34:81:f7:9f:45:d8:2e:ac:c6:06:
         fe:e4:9c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 17:11:00 2024 by rpki-client on console-ams.rpki-client.org