Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212166.roa
File:                     AS212166.roa (raw, json)
Hash identifier:          I/HvnEUxoO/GvKdW0Z7UlzJpPQJScxooppsGSIiYcZI=
Subject key identifier:   20:EE:15:A0:06:7E:9F:72:C2:2C:71:06:EC:2E:BA:8C:C1:52:9A:02
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       9A7454C512ECBCB5D7F7D96CF0CA1DAF93888C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212166.roa
Signing time:             Mon 14 Aug 2023 00:00:10 +0000
ROA not before:           Sun 13 Aug 2023 23:55:10 +0000
ROA not after:            Mon 12 Aug 2024 00:00:10 +0000
asID:                     212166
IP address blocks:        89.116.46.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 Nov 2023 18:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9a:74:54:c5:12:ec:bc:b5:d7:f7:d9:6c:f0:ca:1d:af:93:88:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug 13 23:55:10 2023 GMT
            Not After : Aug 12 00:00:10 2024 GMT
        Subject: CN=20EE15A0067E9F72C22C7106EC2EBA8CC1529A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:ae:0e:da:11:09:03:e7:c3:7e:39:26:39:
                    0a:9c:0e:83:73:27:25:25:c7:ba:20:40:62:08:1e:
                    44:0c:a5:d1:4d:5c:8c:c1:3e:bc:a6:18:33:20:91:
                    f3:b7:c3:96:77:fd:2f:ac:b1:04:e9:4e:60:f5:b1:
                    1a:4a:ca:08:70:30:b3:48:f3:b4:dd:19:2b:32:a9:
                    d8:62:09:96:c6:fc:2c:6f:8e:ac:cc:d5:41:21:20:
                    96:e1:35:f0:4a:e8:2e:a0:1f:69:a5:4c:73:90:69:
                    ad:71:32:3d:f8:c1:0b:a5:1d:cf:1d:29:82:a1:58:
                    36:8e:2f:42:a3:3a:8d:93:2a:9b:55:29:d3:f4:7a:
                    ab:df:c4:26:91:e2:87:76:67:47:a2:c8:8c:52:17:
                    7a:21:58:95:2f:a3:1d:cf:87:07:c1:f4:48:0b:39:
                    c8:95:d8:74:de:34:28:49:ac:9d:9a:66:b8:6c:b8:
                    37:a5:1f:46:03:40:6b:a2:71:1d:db:02:f3:33:c5:
                    b6:60:30:23:3f:f2:ac:32:11:8c:57:5e:8f:3b:3b:
                    ec:f3:87:6c:f2:6f:74:5c:57:b2:89:60:39:9d:49:
                    f9:68:19:b2:d0:1b:f2:7f:f4:3f:c5:f8:27:f1:c6:
                    24:a8:c3:b1:51:16:c9:5d:70:0c:6a:3e:29:d9:9b:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EE:15:A0:06:7E:9F:72:C2:2C:71:06:EC:2E:BA:8C:C1:52:9A:02
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212166.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:2b:91:0d:7b:76:18:3d:cc:2e:cd:e1:f2:61:21:e1:e4:
         b9:4f:3f:4c:81:7b:8c:0c:26:86:0d:e3:57:98:8a:27:1e:77:
         4a:73:5f:b4:e1:c6:5f:fe:3c:82:29:31:8f:34:c8:37:fa:4c:
         c9:d5:ab:4b:18:45:d7:66:85:7c:b0:52:5a:64:6d:ec:51:30:
         27:de:51:5f:1f:76:a7:48:49:b7:d1:73:fe:28:96:80:17:af:
         c1:7d:57:1a:89:e7:57:39:7b:35:e0:73:47:03:c0:f8:cc:b4:
         d7:86:67:ba:1a:54:fc:49:d5:3e:d7:d8:c1:1a:fd:a2:52:72:
         a5:70:f0:a9:ab:06:f2:fa:8b:b4:bc:32:5c:02:1f:3f:94:0b:
         c7:92:3b:1a:f4:c6:41:bb:3a:5c:2a:9d:a2:bd:94:fd:e6:fe:
         09:1a:9f:f9:dd:98:de:e2:7e:6d:ec:93:1c:dd:0f:22:cf:a3:
         e8:29:3e:a9:36:8b:ba:9c:ca:4a:d7:cb:f4:b3:79:3b:be:53:
         ac:ad:14:a2:db:77:aa:09:52:ac:a4:3a:de:c9:8f:cb:fc:3e:
         0b:5e:52:c5:bb:3d:b9:5a:ee:f9:50:e4:d3:63:6f:86:95:7f:
         9f:88:80:8f:f5:25:cd:da:c4:22:08:e7:83:ec:cf:bd:63:ea:
         31:2e:71:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org