Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393427.roa
File:                     AS393427.roa (raw, json)
Hash identifier:          vJxd/iIrqDxXGWfXIQGC2pRrcPs/1U2uV0X9iXijP18=
Subject key identifier:   27:D9:D0:58:D8:B5:BD:4E:58:8F:41:F5:C8:0F:91:DF:DA:30:55:72
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       1DE7EC4D89E0C36DDDE19C09809EFD3F904BFA12
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393427.roa
Signing time:             Mon 17 Apr 2023 00:00:20 +0000
ROA not before:           Sun 16 Apr 2023 23:55:20 +0000
ROA not after:            Mon 15 Apr 2024 00:00:20 +0000
asID:                     393427
IP address blocks:        84.46.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e7:ec:4d:89:e0:c3:6d:dd:e1:9c:09:80:9e:fd:3f:90:4b:fa:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 16 23:55:20 2023 GMT
            Not After : Apr 15 00:00:20 2024 GMT
        Subject: CN=27D9D058D8B5BD4E588F41F5C80F91DFDA305572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:9e:64:51:38:a7:c8:ab:39:62:c0:26:63:
                    45:d4:77:f9:87:bd:64:21:16:e6:f3:49:36:b8:9e:
                    ce:2b:05:bf:6f:4f:17:ab:27:1e:bb:27:03:fd:a0:
                    fb:79:50:f8:3e:d5:66:92:d5:e2:83:e1:6d:4b:f8:
                    81:64:4e:b0:7a:58:4d:c5:83:3d:18:12:6a:df:29:
                    15:58:c1:8f:d7:fa:75:e4:2c:55:05:b3:b8:50:c7:
                    65:70:95:95:2e:18:cf:27:a1:2b:8d:18:df:cc:ae:
                    74:61:de:35:a1:1c:27:51:c8:34:5d:01:f4:08:24:
                    f3:25:c7:b1:59:a5:7b:f3:c1:5d:1a:a4:cb:1d:41:
                    a6:3a:4c:7f:f4:29:db:30:75:de:5c:84:b0:4b:e7:
                    a0:62:97:96:c9:54:8a:47:1d:c5:5a:73:f0:29:96:
                    d5:66:96:0b:c9:77:30:84:0c:d8:9f:45:64:33:43:
                    11:94:1e:68:55:da:67:13:46:ab:dd:72:81:f1:75:
                    a7:5b:8d:ee:1a:5b:8b:61:c7:f9:f2:37:f7:bd:c7:
                    49:74:73:2f:2a:b2:8b:55:f0:10:94:28:36:d2:2a:
                    bb:08:0b:05:84:68:35:df:48:62:31:bc:3c:10:b1:
                    8c:79:81:cd:56:45:f3:81:7d:31:eb:c1:cc:81:ec:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D9:D0:58:D8:B5:BD:4E:58:8F:41:F5:C8:0F:91:DF:DA:30:55:72
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.46.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:4a:05:5f:31:75:37:ff:f0:88:39:21:3c:12:e5:bd:6c:2b:
         c7:46:47:91:7e:ad:30:18:51:f6:ee:52:ce:ac:9b:9d:c7:ac:
         c9:84:6e:81:53:f7:24:45:43:f0:f5:8a:c4:76:b0:d8:3c:91:
         3f:c0:5f:0a:22:da:58:7e:3b:6f:5e:7f:1b:c9:25:c2:2d:df:
         49:dc:ae:da:d7:12:66:62:63:c0:a4:68:fb:dc:b6:49:81:b6:
         04:66:bf:20:7e:66:17:68:ab:ee:33:c9:b5:34:c4:b2:6c:78:
         48:b7:d6:32:eb:53:de:fa:3e:c1:53:b0:b9:82:3f:76:46:d3:
         6f:94:d0:fa:16:6f:23:09:05:1d:ce:b0:fd:6e:5c:7b:a7:a9:
         21:c6:26:e0:6b:d4:f2:ad:90:2a:d4:ba:3f:75:5a:84:74:f9:
         76:79:6f:31:ef:02:e3:3e:96:81:5e:80:b0:0b:aa:55:a8:91:
         87:e8:31:a5:e2:a3:80:45:e0:22:3b:99:bb:c0:15:dc:4c:41:
         8f:fa:70:63:e5:6c:e5:16:10:09:4d:99:61:95:b3:53:cf:35:
         20:53:69:4a:6f:57:19:df:2f:d3:88:8c:11:c6:32:c7:d6:cd:
         f9:f5:32:3c:86:b2:67:a8:7f:b6:3a:2a:a0:c0:ae:91:b8:e1:
         58:c3:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org