Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23470.roa
File:                     AS23470.roa (raw, json)
Hash identifier:          V278A1Oe+91iPwxE2VIKR7ffftWshY/F9lyco2lfE+k=
Subject key identifier:   30:1D:D9:4E:86:A6:7E:2C:3F:D9:26:EF:0F:E5:80:84:BD:F9:B9:DF
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       54A44779BD35DB31C101B8FAA92C28E3B0B1BE72
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23470.roa
Signing time:             Tue 25 Apr 2023 08:21:17 +0000
ROA not before:           Tue 25 Apr 2023 08:16:17 +0000
ROA not after:            Tue 23 Apr 2024 08:21:17 +0000
asID:                     23470
IP address blocks:        89.116.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a4:47:79:bd:35:db:31:c1:01:b8:fa:a9:2c:28:e3:b0:b1:be:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 25 08:16:17 2023 GMT
            Not After : Apr 23 08:21:17 2024 GMT
        Subject: CN=301DD94E86A67E2C3FD926EF0FE58084BDF9B9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:c6:b3:21:c5:bf:c2:07:22:6f:44:3c:0c:
                    05:e9:eb:04:41:61:03:a2:bf:5c:a5:6a:42:5d:93:
                    46:25:02:56:f3:d0:e2:e8:17:b5:d7:df:56:32:d0:
                    2d:9d:d1:56:a0:fc:39:0f:5e:40:b5:68:87:12:b3:
                    b2:8a:74:ba:44:ff:6d:49:da:36:1c:99:fc:cd:20:
                    8b:47:83:46:4f:50:8b:60:94:aa:a4:38:4b:e8:82:
                    9c:81:28:76:2c:29:cc:ab:39:81:6e:92:a6:35:4e:
                    5e:59:06:1e:2b:a5:c9:f3:ee:60:c9:94:99:ef:f9:
                    8c:e7:01:03:0a:e8:e4:14:67:4d:de:a1:93:a3:54:
                    78:fc:da:6a:f1:c4:07:f0:21:9d:96:53:ad:7b:2b:
                    5d:84:27:58:7a:94:52:5c:d3:83:a8:b1:e5:9d:2a:
                    f5:ee:d5:d0:da:a8:24:d9:9e:2d:09:a7:c8:9c:22:
                    d0:75:94:09:41:d0:bb:14:29:a0:33:fe:85:ae:68:
                    4f:d9:23:ed:eb:18:40:86:7a:63:76:58:f5:a9:27:
                    f9:6b:1c:a7:ef:8e:1b:28:dc:2d:ce:d5:4d:35:0b:
                    ba:05:50:74:03:93:d0:74:50:34:d2:75:d2:f9:a4:
                    65:5d:ee:c4:86:80:2a:2d:8b:0d:9e:47:5d:61:0e:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1D:D9:4E:86:A6:7E:2C:3F:D9:26:EF:0F:E5:80:84:BD:F9:B9:DF
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:25:14:8a:35:4a:46:5c:c0:1a:c7:2f:08:30:7c:3d:a1:5c:
         76:86:ef:9a:37:d5:22:a5:3a:cb:5a:64:02:e9:d1:88:8e:15:
         db:67:ae:ec:c1:b4:54:c6:29:55:df:37:00:ac:cf:64:da:f2:
         7b:27:ad:34:21:06:e5:4d:7c:73:4d:65:4d:6d:b9:4f:eb:62:
         13:38:67:89:78:a5:51:a5:50:9c:d1:c1:0b:75:9c:11:b3:c4:
         3a:66:ac:42:5d:b6:2e:60:43:37:39:e3:5b:1b:f1:c2:6c:73:
         0a:3b:6e:cd:47:5d:e5:81:4b:a9:f8:93:93:98:40:7e:4c:03:
         6e:e7:ef:aa:ba:d1:d0:84:32:1a:24:f4:d2:97:86:67:29:93:
         ea:24:99:bb:15:39:0d:86:ba:5f:23:f3:4e:c2:4d:31:9d:c1:
         92:f1:6f:92:44:14:9d:cf:cc:43:b4:fe:2a:dd:21:3a:d9:33:
         3a:08:fe:ff:a1:97:f3:7c:48:77:74:cb:82:61:34:f9:2e:84:
         92:da:2e:d6:3d:df:02:86:b4:9d:82:38:7f:aa:ab:f5:38:31:
         6d:28:67:ed:6e:08:ee:21:8d:1b:90:94:1c:0a:f7:fb:4c:b6:
         cb:a6:3e:88:52:40:fe:e1:5b:f2:1e:9c:c6:db:ee:0f:09:f8:
         85:7f:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org