Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212235.roa
File:                     AS212235.roa (raw, json)
Hash identifier:          K5NwElTCdmxsDYoXV+4fvzK+3Uf0rITkFZ2iG4D/oUo=
Subject key identifier:   E7:FD:53:69:69:80:DD:5A:26:E5:FC:4B:55:7C:4D:2A:CB:64:10:66
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       78E935CE3C5523158BF3213006E8AC9305FEEA1E
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212235.roa
Signing time:             Thu 24 Aug 2023 17:24:34 +0000
ROA not before:           Thu 24 Aug 2023 17:19:34 +0000
ROA not after:            Thu 22 Aug 2024 17:24:34 +0000
asID:                     212235
IP address blocks:        82.140.182.0/24 maxlen: 24
                          84.46.171.0/24 maxlen: 24
                          84.46.237.0/24 maxlen: 24
                          84.46.238.0/24 maxlen: 24
                          86.38.5.0/24 maxlen: 24
                          86.38.180.0/24 maxlen: 24
                          86.38.181.0/24 maxlen: 24
                          86.38.219.0/24 maxlen: 24
                          89.116.65.0/24 maxlen: 24
                          89.116.66.0/24 maxlen: 24
                          89.116.67.0/24 maxlen: 24
                          89.116.73.0/24 maxlen: 24
                          89.116.74.0/24 maxlen: 24
                          89.116.75.0/24 maxlen: 24
                          89.116.168.0/24 maxlen: 24
                          89.116.169.0/24 maxlen: 24
                          89.116.182.0/24 maxlen: 24
                          89.116.183.0/24 maxlen: 24
                          89.116.255.0/24 maxlen: 24
                          89.117.13.0/24 maxlen: 24
                          89.117.95.0/24 maxlen: 24
                          89.117.97.0/24 maxlen: 24
                          89.117.98.0/24 maxlen: 24
                          89.117.99.0/24 maxlen: 24
                          89.117.111.0/24 maxlen: 24
                          89.117.121.0/24 maxlen: 24
                          89.117.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e9:35:ce:3c:55:23:15:8b:f3:21:30:06:e8:ac:93:05:fe:ea:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug 24 17:19:34 2023 GMT
            Not After : Aug 22 17:24:34 2024 GMT
        Subject: CN=E7FD53696980DD5A26E5FC4B557C4D2ACB641066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:c1:ca:71:b7:47:61:82:23:a4:b7:47:94:
                    12:88:ae:c0:9e:57:16:20:68:8d:d4:31:5d:85:9d:
                    2e:18:38:00:e8:99:20:ae:f8:8f:f9:41:70:c1:9d:
                    b3:f7:7f:a2:b5:83:cb:9c:b8:d9:0f:86:cd:d8:b0:
                    77:da:56:01:74:a2:4a:f8:f9:49:4e:cc:dd:e0:d1:
                    dc:25:b8:7c:c3:7d:3b:04:ec:c4:8e:24:61:4c:5d:
                    ad:0c:cf:3a:b1:3d:0c:44:fd:95:24:d6:57:70:b7:
                    ea:9c:f0:d7:4f:a0:70:89:11:ea:96:3a:15:f9:79:
                    3b:fc:77:c9:a6:5e:bc:77:14:30:e8:da:12:f4:39:
                    b9:db:5a:ef:25:87:c3:39:18:c5:be:b1:73:1a:91:
                    1f:7d:1e:83:3d:8e:a3:5d:12:46:73:01:fe:7d:de:
                    45:67:d0:4b:0b:2a:4f:37:77:56:14:78:7a:44:c6:
                    ae:9f:75:da:19:b0:32:08:0c:7d:fa:f2:3a:20:14:
                    0c:6c:90:ab:4f:ca:ad:d8:f4:5d:64:78:7d:64:01:
                    21:0c:08:a9:f0:9f:d5:cf:c4:81:65:e1:4b:45:44:
                    96:ae:48:69:1c:67:95:76:12:23:87:42:79:82:5a:
                    74:2c:71:6e:6a:8b:46:3e:7d:d8:86:bb:b6:7c:a0:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FD:53:69:69:80:DD:5A:26:E5:FC:4B:55:7C:4D:2A:CB:64:10:66
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.182.0/24
                  84.46.171.0/24
                  84.46.237.0-84.46.238.255
                  86.38.5.0/24
                  86.38.180.0/23
                  86.38.219.0/24
                  89.116.65.0-89.116.67.255
                  89.116.73.0-89.116.75.255
                  89.116.168.0/23
                  89.116.182.0/23
                  89.116.255.0/24
                  89.117.13.0/24
                  89.117.95.0/24
                  89.117.97.0-89.117.99.255
                  89.117.111.0/24
                  89.117.121.0-89.117.122.255

    Signature Algorithm: sha256WithRSAEncryption
         28:76:42:ab:4e:41:1c:02:a9:7e:3b:00:61:d1:43:8e:c8:4d:
         b2:0f:9f:7f:59:2f:b6:d2:1c:b9:7b:e7:3c:5d:3c:dc:f9:28:
         e7:3c:5a:36:58:9c:04:a7:86:d7:e1:1d:a7:ae:61:bf:03:34:
         2e:35:3a:05:54:54:55:8d:93:d7:31:52:b3:4d:45:54:e7:38:
         61:b8:b5:eb:50:54:8f:08:9d:ef:72:40:32:95:2a:08:ef:10:
         d1:69:54:31:80:5d:55:02:ac:8f:db:62:14:c0:f5:b4:4d:27:
         da:81:28:2f:e3:b0:a0:db:18:1c:c1:e7:60:6b:eb:d3:16:29:
         8d:aa:e2:f7:5d:63:8b:f3:0c:be:42:11:83:11:6c:e2:96:fa:
         27:27:06:63:a3:b6:0f:60:8c:1a:d9:52:08:97:f6:fa:e6:e0:
         bd:3e:47:bc:69:43:0d:b1:aa:fa:94:9b:da:91:5a:d8:93:26:
         1b:10:e4:db:b7:fa:62:5c:c3:8f:f3:5b:50:1f:8d:b9:b5:32:
         9f:a8:52:27:11:ee:9e:28:22:3d:17:18:38:15:1a:ba:93:aa:
         a9:7c:6c:74:66:85:04:3b:bc:86:08:68:e8:75:c8:87:8c:3e:
         6c:ff:f1:95:a0:cc:60:54:30:12:71:00:f4:68:f9:83:b2:b9:
         d0:7b:30:f7
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIUeOk1zjxVIxWL8yEwBuiskwX+6h4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzA4MjQxNzE5MzRaFw0yNDA4MjIxNzI0MzRaMDMxMTAvBgNV
BAMTKEU3RkQ1MzY5Njk4MERENUEyNkU1RkM0QjU1N0M0RDJBQ0I2NDEwNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1sHKcbdHYYIjpLdHlBKIrsCe
VxYgaI3UMV2FnS4YOADomSCu+I/5QXDBnbP3f6K1g8ucuNkPhs3YsHfaVgF0okr4
+UlOzN3g0dwluHzDfTsE7MSOJGFMXa0MzzqxPQxE/ZUk1ldwt+qc8NdPoHCJEeqW
OhX5eTv8d8mmXrx3FDDo2hL0ObnbWu8lh8M5GMW+sXMakR99HoM9jqNdEkZzAf59
3kVn0EsLKk83d1YUeHpExq6fddoZsDIIDH368jogFAxskKtPyq3Y9F1keH1kASEM
CKnwn9XPxIFl4UtFRJauSGkcZ5V2EiOHQnmCWnQscW5qi0Y+fdiGu7Z8oJ8rAgMB
AAGjggK2MIICsjAdBgNVHQ4EFgQU5/1TaWmA3Vom5fxLVXxNKstkEGYwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIxMjIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjCBpQYIKwYBBQUHAQcBAf8EgZUwgZIwgY8EAgABMIGIAwQAUoy2AwQAVC6r
MAwDBABULu0DBABULu4DBABWJgUDBAFWJrQDBABWJtswDAMEAFl0QQMEAll0QDAM
AwQAWXRJAwQCWXRIAwQBWXSoAwQBWXS2AwQAWXT/AwQAWXUNAwQAWXVfMAwDBABZ
dWEDBAJZdWADBABZdW8wDAMEAFl1eQMEAFl1ejANBgkqhkiG9w0BAQsFAAOCAQEA
KHZCq05BHAKpfjsAYdFDjshNsg+ff1kvttIcuXvnPF083Pko5zxaNlicBKeG1+Ed
p65hvwM0LjU6BVRUVY2T1zFSs01FVOc4Ybi161BUjwid73JAMpUqCO8Q0WlUMYBd
VQKsj9tiFMD1tE0n2oEoL+OwoNsYHMHnYGvr0xYpjari911ji/MMvkIRgxFs4pb6
JycGY6O2D2CMGtlSCJf2+ubgvT5HvGlDDbGq+pSb2pFa2JMmGxDk27f6YlzDj/Nb
UB+NubUyn6hSJxHunigiPRcYOBUaupOqqXxsdGaFBDu8hgho6HXIh4w+bP/xlaDM
YFQwEnEA9Gj5g7K50Hsw9w==
-----END CERTIFICATE-----
Generated at Tue Aug 29 08:59:25 2023 by rpki-client on console-ams.rpki-client.org