Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212219.roa
File:                     AS212219.roa (raw, json)
Hash identifier:          MK5IxaDpjFkoum2CQ8L/0cWYY10YKX3gZwSneu/gPd4=
Subject key identifier:   02:0E:87:E0:EF:01:53:6C:C1:35:F9:06:32:57:48:4D:06:79:38:5C
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7F32FAC757D6EB306DB90CA3C8605C93E1C0B770
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212219.roa
Signing time:             Tue 11 Apr 2023 11:34:00 +0000
ROA not before:           Tue 11 Apr 2023 11:29:00 +0000
ROA not after:            Tue 09 Apr 2024 11:34:00 +0000
asID:                     212219
IP address blocks:        86.38.156.0/24 maxlen: 24
                          89.116.132.0/24 maxlen: 24
                          89.116.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:32:fa:c7:57:d6:eb:30:6d:b9:0c:a3:c8:60:5c:93:e1:c0:b7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 11 11:29:00 2023 GMT
            Not After : Apr  9 11:34:00 2024 GMT
        Subject: CN=020E87E0EF01536CC135F9063257484D0679385C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:1e:4f:5f:08:38:a0:da:96:fd:57:d3:36:
                    a5:76:b9:a3:57:2c:92:09:1f:f0:f1:74:44:70:fb:
                    f5:5c:5a:69:b1:dd:70:47:c9:ee:a0:8b:82:34:ae:
                    72:7e:07:2d:ef:93:78:ea:ba:fd:93:3c:04:1f:54:
                    e8:99:89:5d:5f:64:dc:77:bc:17:16:d7:b3:2d:bc:
                    af:6a:2c:67:5f:5b:c8:26:cd:1e:3f:b0:64:e4:e6:
                    d6:c8:92:45:1d:0a:89:1b:66:fb:e9:58:5e:e3:fc:
                    e3:b2:de:37:20:76:c1:0e:2a:b4:5b:54:ac:6d:31:
                    9c:4b:56:2e:28:64:78:1b:71:cc:88:1a:d4:8b:12:
                    fc:64:4d:cd:5d:c7:b8:70:2f:4b:ec:9a:2e:19:06:
                    ee:3f:2d:71:52:f2:b6:3a:37:a6:13:52:ac:a7:96:
                    22:a2:f5:ba:75:73:25:0e:bc:d5:b5:a3:50:79:6b:
                    bc:a7:3f:1b:4d:18:10:24:96:8d:e0:2b:42:97:56:
                    a8:df:83:5b:b0:6c:49:8a:dd:79:9e:e9:75:b2:f8:
                    cb:5c:ec:1a:28:f9:ea:56:77:56:35:5f:45:40:1c:
                    42:09:6e:41:ce:25:d5:05:a8:ba:cc:e1:b0:5b:2f:
                    65:56:dc:9b:dd:ae:e2:c1:a2:33:fc:e9:dd:e3:a0:
                    75:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0E:87:E0:EF:01:53:6C:C1:35:F9:06:32:57:48:4D:06:79:38:5C
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212219.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.156.0/24
                  89.116.132.0/24
                  89.116.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:ef:0b:78:2a:61:4f:94:e4:ad:1d:22:21:e3:8d:20:90:b7:
         98:c7:dc:83:4e:e6:c3:c8:cb:33:46:ea:12:4f:18:9d:e2:32:
         62:29:e2:35:e9:36:3a:a8:e0:0e:26:21:81:b5:37:50:5e:32:
         15:ad:b4:43:2b:3a:c5:2b:9e:47:ee:ea:64:43:dc:95:ae:ac:
         1d:66:25:4c:10:ef:58:f4:09:9f:4a:0a:ad:c3:8a:09:40:f0:
         5b:b1:63:45:c5:3e:01:75:15:df:68:62:39:d3:21:35:cb:08:
         fd:92:cf:cd:cf:1e:4b:14:16:f4:00:02:da:8b:a5:c2:44:8b:
         db:42:c7:7a:48:78:ae:3c:8c:cb:c7:1f:33:1b:92:f1:26:02:
         db:87:36:bc:24:76:2f:d0:0d:58:60:5e:7c:31:45:3c:29:08:
         61:db:a4:2e:5a:b6:22:66:39:05:40:4e:e1:1c:f7:e2:75:fc:
         5e:ab:35:f8:e5:70:29:05:42:9b:ae:ab:d2:47:31:16:29:d6:
         b8:73:d8:26:6a:2b:c9:7b:04:74:e1:1e:e3:2d:a4:29:eb:ea:
         55:37:54:e4:43:f8:8e:c9:a6:18:75:c8:27:96:c9:e8:7f:dd:
         76:2a:9d:d5:80:16:07:c3:73:9a:ee:e9:2d:57:8c:65:6b:21:
         a5:2f:de:79
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUfzL6x1fW6zBtuQyjyGBck+HAt3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzA0MTExMTI5MDBaFw0yNDA0MDkxMTM0MDBaMDMxMTAvBgNV
BAMTKDAyMEU4N0UwRUYwMTUzNkNDMTM1RjkwNjMyNTc0ODREMDY3OTM4NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjgR5PXwg4oNqW/VfTNqV2uaNX
LJIJH/DxdERw+/VcWmmx3XBHye6gi4I0rnJ+By3vk3jquv2TPAQfVOiZiV1fZNx3
vBcW17MtvK9qLGdfW8gmzR4/sGTk5tbIkkUdCokbZvvpWF7j/OOy3jcgdsEOKrRb
VKxtMZxLVi4oZHgbccyIGtSLEvxkTc1dx7hwL0vsmi4ZBu4/LXFS8rY6N6YTUqyn
liKi9bp1cyUOvNW1o1B5a7ynPxtNGBAklo3gK0KXVqjfg1uwbEmK3Xme6XWy+Mtc
7Boo+epWd1Y1X0VAHEIJbkHOJdUFqLrM4bBbL2VW3JvdruLBojP86d3joHV7AgMB
AAGjggISMIICDjAdBgNVHQ4EFgQUAg6H4O8BU2zBNfkGMldITQZ5OFwwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y
ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5
OTQ4RUYyNzlDLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i
ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVMyMTIyMTkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABWJpwDBABZ
dIQDBABZdKYwDQYJKoZIhvcNAQELBQADggEBAMbvC3gqYU+U5K0dIiHjjSCQt5jH
3INO5sPIyzNG6hJPGJ3iMmIp4jXpNjqo4A4mIYG1N1BeMhWttEMrOsUrnkfu6mRD
3JWurB1mJUwQ71j0CZ9KCq3DiglA8FuxY0XFPgF1Fd9oYjnTITXLCP2Sz83PHksU
FvQAAtqLpcJEi9tCx3pIeK48jMvHHzMbkvEmAtuHNrwkdi/QDVhgXnwxRTwpCGHb
pC5atiJmOQVATuEc9+J1/F6rNfjlcCkFQpuuq9JHMRYp1rhz2CZqK8l7BHThHuMt
pCnr6lU3VORD+I7Jphh1yCeWyeh/3XYqndWAFgfDc5ru6S1XjGVrIaUv3nk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org