Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215287.roa
File:                     AS215287.roa (raw, json)
Hash identifier:          n8Pe32NgwohqbAlJk+967c03lzPwoh4SlUdo0UIMKWI=
Subject key identifier:   0A:83:6F:70:A3:3B:01:7F:95:06:9B:7F:DE:6C:F0:18:12:E0:18:00
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       2F7FF3FAD62BAA26EE3CBAC2F7C65045A3223330
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215287.roa
Signing time:             Wed 26 Jun 2024 14:30:23 +0000
ROA not before:           Wed 26 Jun 2024 14:25:23 +0000
ROA not after:            Wed 25 Jun 2025 14:30:23 +0000
asID:                     215287
IP address blocks:        89.116.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 00:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7f:f3:fa:d6:2b:aa:26:ee:3c:ba:c2:f7:c6:50:45:a3:22:33:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun 26 14:25:23 2024 GMT
            Not After : Jun 25 14:30:23 2025 GMT
        Subject: CN=0A836F70A33B017F95069B7FDE6CF01812E01800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:84:28:fc:a0:a9:f0:f5:e4:f2:f2:df:dd:
                    7d:e4:ff:04:ec:c6:82:6e:f9:98:61:03:4b:e7:f2:
                    41:cb:ce:90:5a:fd:a5:c0:91:01:c3:25:62:7f:e2:
                    2a:38:36:61:d5:6b:42:cc:7e:0f:0d:2a:8e:de:2e:
                    a2:e0:60:00:85:2d:34:9f:c8:dd:a5:10:eb:77:3d:
                    4c:43:82:d0:f2:47:d9:8a:f5:e3:82:1a:6b:6b:37:
                    6d:15:f4:ea:81:89:36:70:de:ef:89:d3:4a:f7:16:
                    a7:14:cc:49:b6:9b:19:a3:fc:0a:22:55:dd:d6:47:
                    52:5d:57:ea:40:22:1e:13:5b:a9:80:38:51:0c:15:
                    96:e3:7f:f6:32:d7:a0:4f:bf:49:a4:ce:b8:74:31:
                    bb:d3:02:16:08:5c:f7:86:06:4d:fe:a2:7b:d6:16:
                    e4:50:6d:ef:16:7b:66:8c:70:1b:2f:41:7c:73:05:
                    db:6d:aa:65:bc:c1:84:e1:00:18:35:57:53:bc:53:
                    7c:8f:f8:a4:91:94:52:17:ef:48:4b:de:d2:2f:13:
                    68:4c:90:81:31:4c:02:b9:20:86:dc:1f:42:cc:3d:
                    40:38:51:57:d9:36:11:2c:53:73:64:1f:3a:0c:dd:
                    f7:9b:e4:96:13:6d:ad:86:69:70:df:51:58:af:2b:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:83:6F:70:A3:3B:01:7F:95:06:9B:7F:DE:6C:F0:18:12:E0:18:00
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:28:0b:4d:1c:b7:ae:c3:18:02:bd:ee:71:f2:93:85:50:a7:
         d2:a1:ae:dd:27:09:8d:90:dd:5e:5f:c7:8b:58:bd:45:c6:22:
         35:63:a3:69:0f:17:07:d6:49:f0:37:36:b6:4c:99:62:f8:99:
         43:b1:f8:9f:5e:36:00:fa:78:93:28:6e:54:7e:45:d4:e0:55:
         9c:0f:f2:73:4b:b0:ac:f0:12:73:e4:9d:69:9d:d8:4a:be:28:
         48:63:63:81:56:ca:b9:9f:02:87:12:61:82:98:c0:ae:37:7d:
         74:00:f4:89:1d:11:75:83:8b:6c:89:1f:69:d8:81:d3:3d:db:
         f6:fd:21:c1:1e:41:31:34:d5:74:30:ba:35:ed:5d:2d:57:86:
         6b:4f:17:a4:a8:fd:f0:ff:e6:3b:cd:92:db:0e:ce:63:97:2e:
         89:55:53:51:9b:37:33:9d:59:10:d9:e2:aa:65:74:ab:d7:2a:
         8b:ad:bd:38:b8:63:3c:25:6f:54:d7:26:d3:87:15:e8:a7:24:
         a8:ed:44:bc:78:e0:2c:e6:78:d0:b0:2d:fa:a1:ce:91:02:0c:
         b5:47:58:85:9b:5b:f9:8d:97:fe:51:53:a7:01:92:5b:fe:4a:
         51:bf:a3:fa:2b:12:7f:89:88:f9:3b:a2:2f:cb:aa:68:c3:3d:
         c4:82:2f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 02:41:12 2024 by rpki-client on console-ams.rpki-client.org