Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212953.roa
File:                     AS212953.roa (raw, json)
Hash identifier:          ht6uD0+4BWjr0R+9dGJbePygxz+CYQWNguxJmfG4yKU=
Subject key identifier:   2D:4E:D3:C0:B0:51:89:B7:F3:DF:E9:83:1E:8F:80:1E:E3:A7:3A:FA
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       21CDB584345047564225C3515314C5CDA65C03EC
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212953.roa
Signing time:             Fri 10 Mar 2023 15:59:03 +0000
ROA not before:           Fri 10 Mar 2023 15:54:03 +0000
ROA not after:            Fri 08 Mar 2024 15:59:03 +0000
asID:                     212953
IP address blocks:        89.116.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:cd:b5:84:34:50:47:56:42:25:c3:51:53:14:c5:cd:a6:5c:03:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar 10 15:54:03 2023 GMT
            Not After : Mar  8 15:59:03 2024 GMT
        Subject: CN=2D4ED3C0B05189B7F3DFE9831E8F801EE3A73AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:3a:2a:70:12:e4:62:06:49:b3:6c:77:ef:
                    e0:33:50:a5:3c:55:00:b3:06:ae:b2:07:fe:6c:e7:
                    d9:6b:c4:68:53:d2:f7:87:c2:3a:1f:74:3c:72:f7:
                    b9:47:dd:21:e7:9e:26:98:ea:45:36:c7:8c:b1:30:
                    2a:b6:25:92:db:6c:08:51:1f:5b:d8:0f:5d:6a:e7:
                    73:26:21:17:80:06:93:90:6e:99:05:4b:4c:05:97:
                    4b:bd:94:87:de:49:1f:9d:09:d5:16:a0:05:24:4c:
                    cf:3a:e8:8c:be:ca:84:db:f3:66:1a:62:12:b5:c1:
                    70:f4:38:b0:3d:25:fc:55:c9:a3:0b:a2:66:07:a4:
                    0b:11:25:b5:d6:f1:74:22:c8:03:cf:e8:c5:e4:63:
                    14:9b:85:67:de:be:2a:48:44:c0:86:49:0d:a8:91:
                    cb:a2:6b:c9:de:65:91:cc:9f:f8:c0:09:76:14:aa:
                    18:32:a6:07:3b:d9:31:da:bb:a6:c8:69:72:1d:d4:
                    75:b5:d1:94:22:1b:39:38:ee:f8:49:0a:13:15:c8:
                    01:9c:b6:c0:b8:fb:71:9a:cb:69:de:2b:39:76:40:
                    6d:ee:98:8c:17:2b:a8:8e:a8:86:71:6a:ad:7d:38:
                    b6:66:a5:80:f5:77:17:6f:70:ef:b8:8a:ff:32:9e:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4E:D3:C0:B0:51:89:B7:F3:DF:E9:83:1E:8F:80:1E:E3:A7:3A:FA
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212953.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:9e:75:83:ca:a7:be:5c:ba:c2:13:8c:6c:67:b8:7d:4e:7b:
         14:4d:cd:15:04:a0:1e:b1:19:9a:d0:d9:4e:ed:d0:0f:6b:f7:
         78:5e:35:79:bd:cc:9c:57:63:6c:94:3e:f1:18:75:8f:e7:f2:
         22:e4:37:07:97:10:f3:62:d0:97:36:e4:eb:4d:3f:ba:fc:64:
         c8:15:95:59:fb:1e:8b:b2:f1:77:b7:46:d3:bd:01:6b:4f:25:
         13:4b:e3:1b:f1:ac:6f:54:a8:3c:b0:e9:26:31:79:2c:a8:61:
         4e:bc:93:7e:82:b0:cb:04:90:60:0c:ee:ce:83:6f:4e:a9:03:
         20:fd:dd:db:c7:94:74:ff:e6:98:d8:77:28:23:aa:2c:9f:dc:
         2c:90:34:a0:4f:6e:04:25:e3:61:2a:35:26:65:ea:c8:8d:b1:
         22:d5:e4:2b:4b:a3:95:4d:05:ef:fc:92:f3:73:7b:3f:e8:f0:
         95:33:b7:78:3f:ac:d6:8f:60:8b:1b:38:14:9e:f8:99:2a:93:
         a9:9c:bf:3a:89:6c:f4:47:75:0b:ee:64:0b:70:45:3e:35:c9:
         c8:1e:4d:57:c6:d8:b8:c8:1d:36:89:56:40:e0:35:00:d1:b6:
         64:e7:bb:95:9a:6a:41:74:81:9e:30:df:97:6f:0e:73:cf:1e:
         6f:b0:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org