Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS36351.roa
File:                     AS36351.roa (raw, json)
Hash identifier:          0MOEpUu1lXpBm/i7X/0VwgIw8aD0cy7T7agRhWOsKhM=
Subject key identifier:   6B:27:37:E5:96:B4:66:B8:AC:59:13:6F:10:BC:A3:F9:4F:91:84:04
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3D276EA86ED5F4B6CED968BC8E215410B43BF079
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS36351.roa
Signing time:             Thu 05 Oct 2023 13:47:09 +0000
ROA not before:           Thu 05 Oct 2023 13:42:09 +0000
ROA not after:            Thu 03 Oct 2024 13:47:09 +0000
asID:                     36351
IP address blocks:        89.116.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Oct 2023 12:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:27:6e:a8:6e:d5:f4:b6:ce:d9:68:bc:8e:21:54:10:b4:3b:f0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct  5 13:42:09 2023 GMT
            Not After : Oct  3 13:47:09 2024 GMT
        Subject: CN=6B2737E596B466B8AC59136F10BCA3F94F918404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:c4:53:b4:42:47:d6:fd:e1:f9:b5:b2:12:
                    c6:1c:96:61:a9:3f:10:16:75:97:79:c6:77:fc:d5:
                    bd:ee:77:43:31:22:7c:9e:fb:97:f1:14:9f:2a:3a:
                    cf:46:2d:a5:08:5e:bd:2b:66:fd:6b:bb:8f:45:74:
                    a6:5f:09:e1:2f:c0:fa:77:b3:9a:7a:8f:56:36:a7:
                    a6:46:40:96:32:d8:8f:0e:29:5f:43:d6:04:1d:ca:
                    64:a5:e2:43:06:6d:e1:fb:97:ab:54:5a:29:e8:79:
                    94:63:10:60:3f:b9:0c:16:8c:66:1a:1b:14:f8:99:
                    ea:41:18:f3:c0:fc:25:c7:37:0d:b8:44:7a:d3:93:
                    16:13:0d:35:6d:a2:87:93:3f:da:ae:1b:61:73:6e:
                    f5:22:9d:3a:0a:83:10:62:3a:b8:c9:9f:a9:06:9a:
                    1f:14:53:01:31:b4:64:83:52:fd:72:ad:d5:67:7e:
                    d8:5e:2c:7f:a5:88:ab:fa:3b:1f:0b:06:1a:37:03:
                    b9:10:c0:15:93:48:ed:84:c5:e1:8b:73:43:ae:1c:
                    05:e9:8c:72:d6:c0:cf:a6:b2:2f:03:1a:ad:c0:6a:
                    7e:6f:35:f0:27:61:95:19:69:56:12:0d:cd:c0:65:
                    68:97:dc:93:fb:3a:40:92:83:d6:a6:5e:a8:97:9a:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:27:37:E5:96:B4:66:B8:AC:59:13:6F:10:BC:A3:F9:4F:91:84:04
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS36351.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:96:75:28:88:e7:8a:27:94:3c:42:24:d2:7b:75:36:a1:8a:
         0b:89:ac:45:ee:8f:39:0d:a4:ab:a9:19:ce:d5:b4:dc:e3:06:
         a4:c9:ac:a7:64:90:6c:15:55:c4:13:4e:47:57:e7:8e:b2:76:
         26:ad:c5:e5:80:33:cc:a0:6a:0f:c8:dc:74:76:2a:33:7b:26:
         e0:39:22:21:d0:7a:bd:6b:1c:e7:10:64:b5:50:ab:64:41:f3:
         2c:5d:0d:39:0f:b1:7d:26:1f:1c:88:86:1b:30:f4:a4:7d:23:
         3c:d5:a0:df:42:b3:07:7a:05:62:56:d9:e1:c3:36:66:77:b8:
         d9:39:33:c7:dd:61:e0:4e:d6:3c:28:e3:ba:ac:28:27:55:9d:
         16:f0:27:f6:93:89:ff:5e:9b:27:c5:f8:5d:61:c5:78:82:79:
         66:cf:c9:21:65:04:03:86:0b:4a:6f:26:e0:b2:75:35:e2:c6:
         93:b1:aa:00:96:5b:a0:65:64:d4:3e:86:de:29:9b:35:d4:1a:
         6a:ad:d4:c2:55:24:26:0b:46:0c:f7:42:f4:dd:44:63:65:b0:
         11:aa:14:d3:7b:08:14:ad:07:d7:cf:76:79:c5:19:7e:d5:73:
         34:3f:49:2b:8f:fa:cf:bb:98:69:b5:fa:26:1e:a2:41:c8:45:
         8f:44:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org