Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS30058.roa
File:                     AS30058.roa (raw, json)
Hash identifier:          tOI/mwOW9dU4kyy/96JcnvxvMFSIB3BmXsCeSBJ292M=
Subject key identifier:   71:86:9F:B7:D1:21:3C:BE:84:44:86:D1:B9:A2:FC:F8:4C:9D:30:2C
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3B246E31570F569E1D9D80DFF03BD708315D2300
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS30058.roa
Signing time:             Thu 27 Apr 2023 11:49:04 +0000
ROA not before:           Thu 27 Apr 2023 11:44:04 +0000
ROA not after:            Thu 25 Apr 2024 11:49:04 +0000
asID:                     30058
IP address blocks:        89.116.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:24:6e:31:57:0f:56:9e:1d:9d:80:df:f0:3b:d7:08:31:5d:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 27 11:44:04 2023 GMT
            Not After : Apr 25 11:49:04 2024 GMT
        Subject: CN=71869FB7D1213CBE844486D1B9A2FCF84C9D302C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:b0:52:ea:d6:f2:4a:99:eb:16:28:d5:6a:
                    cf:46:e7:b7:4c:0a:1e:fd:28:ae:05:b5:cd:89:ff:
                    33:b2:6a:42:39:7c:df:5e:67:ff:2e:83:ed:af:47:
                    15:37:e9:00:13:d8:00:c6:dd:3f:ab:e6:69:8f:cf:
                    28:ce:27:f9:0f:d0:3f:df:1e:48:c5:28:13:24:c8:
                    0b:1f:75:85:75:7a:7d:f9:5f:86:a7:5c:e1:48:b7:
                    7b:4e:2a:3e:6f:a2:95:8d:16:0c:26:ba:e5:eb:9f:
                    20:d9:99:d3:4d:b3:ef:61:93:6b:d1:5c:f4:64:8f:
                    4c:82:ba:0a:81:9a:a7:a5:db:4a:ae:28:24:bd:44:
                    bc:7a:e7:9e:f2:c7:40:5c:90:4d:be:34:28:6b:84:
                    05:fc:df:ad:dc:fb:eb:9e:c4:ac:e3:10:e0:e0:8b:
                    56:7c:75:2a:4c:65:eb:fd:8f:23:2c:40:19:ed:ba:
                    13:dd:e6:2c:4a:ab:2d:22:cf:c5:03:ed:5c:14:1b:
                    b0:1e:c2:5e:f8:20:eb:b6:3d:7e:ce:98:7d:e3:48:
                    49:8d:7b:df:6f:d1:f1:b2:fc:b0:1d:08:d1:f7:2e:
                    53:52:e8:81:6d:d8:44:85:53:21:4b:50:61:bf:e7:
                    c1:a2:68:27:2a:19:e2:dc:57:34:aa:4e:ae:34:f9:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:86:9F:B7:D1:21:3C:BE:84:44:86:D1:B9:A2:FC:F8:4C:9D:30:2C
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS30058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:4e:f7:82:65:ab:1c:67:77:71:b3:27:b4:9f:48:15:a3:c2:
         a8:62:e9:67:62:28:11:73:f4:7e:f6:64:5c:6c:65:69:69:6f:
         12:1a:39:14:4c:ab:2e:14:84:40:48:e8:e3:4e:3b:3d:89:f8:
         78:7e:0c:b9:7e:8d:07:1e:f8:95:fe:1a:4e:b1:66:7a:02:d0:
         38:9a:16:3e:0e:0b:b7:b4:b4:06:83:93:6f:85:38:0b:4e:d1:
         63:a5:a5:e3:27:ef:df:f8:bd:9d:dc:ba:33:ea:3d:8b:f4:5e:
         1c:d1:10:cc:5b:42:4a:95:53:40:8b:20:13:d8:35:84:15:1a:
         30:4f:72:3f:03:d4:16:cf:4b:11:f8:91:89:53:cf:e5:59:0a:
         59:09:d6:f7:fa:f6:1b:2f:aa:cc:08:0a:0d:02:60:0c:4d:ac:
         6a:64:7c:1d:62:d1:32:0c:4a:17:a1:8a:51:75:70:76:c4:64:
         5d:0f:a1:71:5e:da:1d:a2:86:c6:81:fb:00:e2:d0:a2:25:14:
         47:eb:ac:ee:38:98:2f:a0:01:1c:d9:ab:27:8c:76:be:44:4c:
         6a:dd:c9:59:23:a6:ed:9a:c2:2d:5c:09:e3:40:50:f7:f8:d6:
         89:40:52:9b:0d:24:8c:96:2a:56:c8:5d:1e:9b:99:56:f5:e9:
         7d:e4:b0:bd
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUOyRuMVcPVp4dnYDf8DvXCDFdIwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzA0MjcxMTQ0MDRaFw0yNDA0MjUxMTQ5MDRaMDMxMTAvBgNV
BAMTKDcxODY5RkI3RDEyMTNDQkU4NDQ0ODZEMUI5QTJGQ0Y4NEM5RDMwMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh17BS6tbySpnrFijVas9G57dM
Ch79KK4Ftc2J/zOyakI5fN9eZ/8ug+2vRxU36QAT2ADG3T+r5mmPzyjOJ/kP0D/f
HkjFKBMkyAsfdYV1en35X4anXOFIt3tOKj5vopWNFgwmuuXrnyDZmdNNs+9hk2vR
XPRkj0yCugqBmqel20quKCS9RLx6557yx0BckE2+NChrhAX8363c++uexKzjEODg
i1Z8dSpMZev9jyMsQBntuhPd5ixKqy0iz8UD7VwUG7Aewl74IOu2PX7OmH3jSEmN
e99v0fGy/LAdCNH3LlNS6IFt2ESFUyFLUGG/58GiaCcqGeLcVzSqTq40+a8dAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUcYaft9EhPL6ERIbRuaL8+EydMCwwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y
ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5
OTQ4RUYyNzlDLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i
ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVMzMDA1OC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0ljANBgkq
hkiG9w0BAQsFAAOCAQEAXE73gmWrHGd3cbMntJ9IFaPCqGLpZ2IoEXP0fvZkXGxl
aWlvEho5FEyrLhSEQEjo4047PYn4eH4MuX6NBx74lf4aTrFmegLQOJoWPg4Lt7S0
BoOTb4U4C07RY6Wl4yfv3/i9ndy6M+o9i/ReHNEQzFtCSpVTQIsgE9g1hBUaME9y
PwPUFs9LEfiRiVPP5VkKWQnW9/r2Gy+qzAgKDQJgDE2samR8HWLRMgxKF6GKUXVw
dsRkXQ+hcV7aHaKGxoH7AOLQoiUUR+us7jiYL6ABHNmrJ4x2vkRMat3JWSOm7ZrC
LVwJ40BQ9/jWiUBSmw0kjJYqVshdHpuZVvXpfeSwvQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org