Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35409.roa
File:                     AS35409.roa (raw, json)
Hash identifier:          4CKSZJsboPvUhLJaZWBeHohsB4Ey7P7TMYPvd7LuBqs=
Subject key identifier:   97:75:3F:90:66:DF:F5:57:A2:4F:5A:5F:E2:9B:57:BD:4C:16:85:1A
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5A9458C785D5E87EB83CD1C0C31DF2C6FC1A0F7B
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35409.roa
Signing time:             Fri 21 Jul 2023 00:00:05 +0000
ROA not before:           Thu 20 Jul 2023 23:55:05 +0000
ROA not after:            Fri 19 Jul 2024 00:00:05 +0000
asID:                     35409
IP address blocks:        89.116.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:94:58:c7:85:d5:e8:7e:b8:3c:d1:c0:c3:1d:f2:c6:fc:1a:0f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul 20 23:55:05 2023 GMT
            Not After : Jul 19 00:00:05 2024 GMT
        Subject: CN=97753F9066DFF557A24F5A5FE29B57BD4C16851A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:35:56:5f:c6:e4:27:6d:42:56:f2:43:22:
                    32:eb:9f:83:c3:10:f2:cd:35:56:8d:69:6e:90:2a:
                    45:3e:53:b6:4d:11:0f:d4:b2:4e:35:1f:13:0d:f5:
                    aa:bf:3f:e3:00:26:3e:11:75:6a:8a:d2:6e:88:24:
                    bf:82:84:b1:a7:36:2d:98:21:07:82:35:d7:02:f4:
                    57:a3:56:aa:7a:ae:9c:60:9b:43:c0:9e:a9:16:78:
                    da:7e:fc:96:6f:fc:fb:29:9a:cb:02:9e:92:a8:05:
                    6f:73:44:20:2a:01:40:9d:ba:f3:01:0c:20:16:9a:
                    a5:68:bf:d5:f8:24:0d:d1:b0:a2:3c:00:4a:21:39:
                    b8:6c:c8:35:ad:ec:3c:d0:79:30:5e:3a:38:6f:66:
                    de:15:71:3b:ec:96:dc:72:98:48:fb:14:23:2c:7a:
                    83:30:7d:27:ce:5e:10:8d:ec:dc:4e:e2:51:07:0f:
                    39:01:38:e2:21:40:b4:32:b1:52:f5:3f:68:f7:68:
                    da:3c:6f:f8:f4:1d:cc:f6:56:8e:78:66:21:3c:8f:
                    ce:ef:98:58:68:65:df:0a:01:e2:54:92:2c:28:5e:
                    45:b4:46:95:e4:3b:3e:62:67:53:dc:bd:75:3b:81:
                    7d:69:2b:4c:16:c9:c3:a4:a8:0b:6c:be:15:d4:6d:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:75:3F:90:66:DF:F5:57:A2:4F:5A:5F:E2:9B:57:BD:4C:16:85:1A
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35409.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:11:35:1f:99:9a:06:cf:51:31:57:77:52:b1:82:89:5d:a7:
         1a:8f:ce:fb:e7:4d:05:b1:61:dc:9d:1c:e0:cc:41:39:85:0b:
         90:ff:6b:c5:d7:c8:d2:0a:5a:2d:79:19:cb:b9:57:21:b4:66:
         ad:8f:6e:b3:53:09:88:96:1e:68:68:31:4a:ee:9f:8c:4d:26:
         e6:63:d3:45:bd:9b:90:ec:d0:d4:56:12:6b:df:8a:f0:e4:b6:
         ac:4f:85:cc:c6:63:83:20:4a:45:62:15:fd:05:fd:1c:a4:8e:
         22:49:35:1e:a5:b3:f4:3b:8a:af:a6:81:22:ec:50:b2:46:1f:
         cb:d2:16:37:2b:1e:b8:fb:5e:5a:5e:12:3a:cd:26:fd:5e:38:
         7f:35:33:17:f0:e2:ad:c2:b1:23:3f:1b:7b:90:f7:d4:1b:f3:
         c5:54:66:2e:f4:5c:87:f3:9c:b0:02:86:ee:5e:6e:32:a8:c4:
         df:8a:4e:50:91:0d:77:c2:3e:6a:f1:f2:a9:39:cc:1c:12:19:
         b7:8b:e0:92:4b:f4:fd:8d:ae:86:40:fc:cf:60:1a:a0:be:69:
         35:0f:f3:1b:b4:3c:83:c1:28:7e:9b:47:e9:7b:28:fc:84:64:
         81:59:12:b1:c2:1a:79:2a:11:c0:61:f4:22:ec:65:32:18:30:
         4a:a6:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 00:26:28 2023 by rpki-client on console-ams.rpki-client.org