Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS22822.roa
File:                     AS22822.roa (raw, json)
Hash identifier:          0vmmNWKYznnamFtty7+gfId28K2zsgzDa0iFMMW9epg=
Subject key identifier:   EF:17:72:E2:A1:B9:A2:BC:90:44:3E:30:F9:77:74:B9:63:31:02:4C
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       28B3856C45641EA93E61ADA17B0809AB90A7804A
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS22822.roa
Signing time:             Fri 25 Nov 2022 19:53:35 +0000
ROA not before:           Fri 25 Nov 2022 19:48:35 +0000
ROA not after:            Fri 24 Nov 2023 19:53:35 +0000
asID:                     22822
IP address blocks:        86.38.24.0/24 maxlen: 24
                          86.38.182.0/24 maxlen: 24
                          86.38.183.0/24 maxlen: 24
                          86.38.216.0/24 maxlen: 24
                          86.38.219.0/24 maxlen: 24
                          86.38.220.0/24 maxlen: 24
                          89.116.48.0/24 maxlen: 24
                          89.116.128.0/24 maxlen: 24
                          89.116.149.0/24 maxlen: 24
                          89.116.164.0/24 maxlen: 24
                          89.116.173.0/24 maxlen: 24
                          89.116.186.0/24 maxlen: 24
                          89.116.210.0/24 maxlen: 24
                          89.116.242.0/24 maxlen: 24
                          89.116.247.0/24 maxlen: 24
                          89.117.112.0/24 maxlen: 24
                          89.117.115.0/24 maxlen: 24
                          89.117.121.0/24 maxlen: 24
                          89.117.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b3:85:6c:45:64:1e:a9:3e:61:ad:a1:7b:08:09:ab:90:a7:80:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 25 19:48:35 2022 GMT
            Not After : Nov 24 19:53:35 2023 GMT
        Subject: CN=EF1772E2A1B9A2BC90443E30F97774B96331024C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:32:82:d3:de:59:18:ba:7c:5a:d8:51:80:bd:
                    3e:29:c5:22:a6:ed:9b:0b:eb:a9:9a:d1:de:00:b1:
                    1c:ba:18:89:eb:ba:d0:9f:35:3e:f2:70:5f:4b:88:
                    86:b9:4e:a9:d0:63:97:34:af:b5:e3:41:99:fc:72:
                    79:72:55:11:a7:ac:46:d0:6e:69:7a:0a:e0:14:45:
                    17:3b:e2:e6:b1:47:64:97:47:65:44:b7:50:c4:3e:
                    89:76:a1:7b:5c:75:40:35:69:bf:5d:90:f7:f7:8c:
                    f3:17:d6:d4:81:0d:f8:bd:d7:08:e6:78:e8:25:b6:
                    3b:53:20:c7:69:fe:bc:64:7d:8a:5f:09:8d:7c:af:
                    e2:a8:12:73:14:69:d3:6c:d4:f6:03:16:9b:79:06:
                    ec:e1:b4:c5:48:60:d6:40:5a:8f:18:eb:07:b5:c6:
                    7f:3d:49:49:0f:1f:3d:5f:c1:63:20:dd:2e:4b:16:
                    56:02:a7:0f:b8:e3:b8:94:5e:e0:8d:fa:f7:2e:45:
                    d3:37:d9:25:9c:27:41:b2:8a:5e:97:27:f7:d3:1c:
                    4d:32:23:37:3e:1f:9d:a3:68:6f:e4:a5:0d:53:6a:
                    d2:e1:f8:4a:e8:86:d4:e8:7b:09:96:17:e0:4c:04:
                    dc:c5:09:26:a9:35:cd:7b:57:18:16:f5:64:53:bd:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:17:72:E2:A1:B9:A2:BC:90:44:3E:30:F9:77:74:B9:63:31:02:4C
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS22822.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.24.0/24
                  86.38.182.0/23
                  86.38.216.0/24
                  86.38.219.0-86.38.220.255
                  89.116.48.0/24
                  89.116.128.0/24
                  89.116.149.0/24
                  89.116.164.0/24
                  89.116.173.0/24
                  89.116.186.0/24
                  89.116.210.0/24
                  89.116.242.0/24
                  89.116.247.0/24
                  89.117.112.0/24
                  89.117.115.0/24
                  89.117.121.0/24
                  89.117.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:21:1e:db:26:f3:38:39:18:69:db:25:00:da:54:9b:22:f6:
         70:26:38:0a:f4:4d:3e:b4:9d:53:6b:06:64:6f:b6:a6:7d:7e:
         fd:fe:43:6c:00:c5:05:f0:e0:40:4d:ed:1d:58:34:d7:ea:39:
         26:22:cf:90:8f:a9:61:d5:6c:c7:a4:3e:11:ad:78:37:03:29:
         ba:27:69:94:01:72:ca:dd:1a:96:97:e2:47:b7:6f:b1:39:2d:
         c9:8f:5b:6b:7c:03:26:d2:c7:51:26:3e:97:6b:43:9a:62:3e:
         56:63:29:0a:97:0f:78:0c:54:f0:da:ab:3d:f0:18:b3:84:78:
         ee:9c:e4:70:ec:c2:3c:be:c3:04:7c:cc:47:0d:f8:2c:a0:92:
         30:4a:54:c1:46:85:03:82:3c:87:e5:59:f2:d3:e0:0b:4c:22:
         73:58:e6:b4:76:f2:25:cd:e1:80:b8:54:6c:d2:c3:f7:73:3d:
         56:54:ae:1c:14:73:49:38:09:d8:d8:f4:dd:73:75:c7:8c:12:
         1a:6a:57:7f:e6:f8:d0:f8:1a:8f:e3:02:5b:21:05:c9:75:16:
         6a:c1:3b:0e:ba:49:e0:0a:2f:1c:6b:29:e8:86:48:d0:6d:57:
         ad:d2:54:cc:0c:07:21:bd:3c:33:2d:8e:82:71:35:b8:db:a8:
         b1:a6:bf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org