Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS38337.roa
File:                     AS38337.roa (raw, json)
Hash identifier:          eTHzAr2mEE3mLjMtCZEG1aI2Ew+gTCrtuBv5dXGkDw4=
Subject key identifier:   AC:EF:5A:1D:60:F9:93:11:D8:D6:93:12:D9:D5:BF:FC:C5:C6:6D:A0
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       1188EE5A43A25E2743D140DDF742D58E734389E1
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS38337.roa
Signing time:             Tue 21 Mar 2023 12:00:40 +0000
ROA not before:           Tue 21 Mar 2023 11:55:40 +0000
ROA not after:            Tue 19 Mar 2024 12:00:40 +0000
asID:                     38337
IP address blocks:        86.38.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:88:ee:5a:43:a2:5e:27:43:d1:40:dd:f7:42:d5:8e:73:43:89:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar 21 11:55:40 2023 GMT
            Not After : Mar 19 12:00:40 2024 GMT
        Subject: CN=ACEF5A1D60F99311D8D69312D9D5BFFCC5C66DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:49:b7:2a:19:33:8a:52:e2:73:67:c0:82:40:
                    ed:c0:af:8e:ba:17:06:23:aa:a1:e6:15:3f:22:ec:
                    c6:0f:cb:15:84:61:65:f1:d9:fc:c3:3a:8a:31:1d:
                    cc:c0:9f:9c:75:6c:25:72:e2:21:1b:74:d8:a5:cf:
                    cb:90:c1:f5:c2:c4:0b:3a:ec:71:38:74:0b:e6:72:
                    e4:61:18:00:72:6d:dd:ea:3c:39:17:6e:90:43:ae:
                    5a:04:75:09:a5:64:ab:a6:7d:7a:ad:22:0d:18:bc:
                    67:11:13:fa:a2:de:3d:9d:98:c5:af:09:ed:30:fb:
                    99:78:0d:e1:3f:22:b5:75:a8:2f:ca:75:eb:f0:bd:
                    1e:18:d8:e1:23:ac:ba:dd:32:49:6f:d8:c7:d5:d1:
                    00:72:ae:53:e6:a2:6b:bf:35:97:15:04:5d:36:b4:
                    8e:d1:5f:a3:55:8a:d0:c9:b6:3d:1c:66:e6:12:61:
                    00:79:76:4e:88:da:99:63:4e:7d:00:39:a0:28:fe:
                    37:f1:a6:32:a3:b0:97:fa:cb:a0:d1:31:6d:8b:2a:
                    dc:29:56:2a:82:32:0d:47:4f:63:cb:1b:4f:95:3c:
                    c5:df:c0:a1:82:36:6f:54:d0:2c:58:fa:59:01:6a:
                    ba:ba:30:ff:80:41:96:61:b2:3d:f0:24:f9:96:e6:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EF:5A:1D:60:F9:93:11:D8:D6:93:12:D9:D5:BF:FC:C5:C6:6D:A0
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS38337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c0:30:44:01:94:26:76:c3:77:ff:e4:b0:c0:02:30:18:5a:
         2c:2c:af:21:75:ea:db:93:1b:79:54:86:da:bf:d0:11:dd:59:
         3d:bf:04:21:cd:dd:40:61:30:30:6a:c2:c6:77:43:7f:13:b5:
         60:3d:7a:92:2b:44:99:e8:bb:55:92:16:b1:52:21:a3:5d:b7:
         f8:fe:02:42:02:e1:f4:03:2e:57:e3:9d:a6:42:a8:6f:02:77:
         43:46:87:87:a2:db:b5:b8:ce:f0:58:ff:b9:a4:a2:7b:d6:e6:
         90:8b:93:87:4e:4f:82:0c:68:74:48:bf:62:2e:5e:6b:8d:8f:
         e1:d6:05:7b:70:e1:c7:61:0b:b0:1e:c3:3f:08:b8:8c:72:8f:
         08:82:b5:43:71:a7:e0:06:20:3f:3e:5d:1a:75:fe:18:84:db:
         cf:ad:7e:d1:23:d4:91:85:9d:42:27:be:2f:ae:6b:27:cc:3a:
         a6:49:f3:c3:aa:87:4b:1b:77:c8:94:7a:b5:96:a4:21:7f:d4:
         17:93:c1:fd:12:75:70:fe:99:d9:f3:c0:71:15:0b:18:13:43:
         95:0c:54:6a:7d:dc:a5:18:0a:4c:01:a6:75:ec:88:f1:fd:bc:
         a8:1b:39:5b:54:d5:07:6c:1c:e4:8e:fe:6e:0b:22:d9:58:84:
         92:0a:75:8a
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUEYjuWkOiXidD0UDd90LVjnNDieEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzAzMjExMTU1NDBaFw0yNDAzMTkxMjAwNDBaMDMxMTAvBgNV
BAMTKEFDRUY1QTFENjBGOTkzMTFEOEQ2OTMxMkQ5RDVCRkZDQzVDNjZEQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsSbcqGTOKUuJzZ8CCQO3Ar466
FwYjqqHmFT8i7MYPyxWEYWXx2fzDOooxHczAn5x1bCVy4iEbdNilz8uQwfXCxAs6
7HE4dAvmcuRhGABybd3qPDkXbpBDrloEdQmlZKumfXqtIg0YvGcRE/qi3j2dmMWv
Ce0w+5l4DeE/IrV1qC/KdevwvR4Y2OEjrLrdMklv2MfV0QByrlPmomu/NZcVBF02
tI7RX6NVitDJtj0cZuYSYQB5dk6I2pljTn0AOaAo/jfxpjKjsJf6y6DRMW2LKtwp
ViqCMg1HT2PLG0+VPMXfwKGCNm9U0CxY+lkBarq6MP+AQZZhsj3wJPmW5lejAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUrO9aHWD5kxHY1pMS2dW//MXGbaAwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y
ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5
OTQ4RUYyNzlDLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i
ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVMzODMzNy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYm8TANBgkq
hkiG9w0BAQsFAAOCAQEAicAwRAGUJnbDd//ksMACMBhaLCyvIXXq25MbeVSG2r/Q
Ed1ZPb8EIc3dQGEwMGrCxndDfxO1YD16kitEmei7VZIWsVIho123+P4CQgLh9AMu
V+OdpkKobwJ3Q0aHh6LbtbjO8Fj/uaSie9bmkIuTh05PggxodEi/Yi5ea42P4dYF
e3Dhx2ELsB7DPwi4jHKPCIK1Q3Gn4AYgPz5dGnX+GITbz61+0SPUkYWdQie+L65r
J8w6pknzw6qHSxt3yJR6tZakIX/UF5PB/RJ1cP6Z2fPAcRULGBNDlQxUan3cpRgK
TAGmdeyI8f28qBs5W1TVB2wc5I7+bgsi2ViEkgp1ig==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org