Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS44547.roa
File:                     AS44547.roa (raw, json)
Hash identifier:          io2Qf2jY1dFOVCIyxRn1u9BXxy9s4yNtkGxBm9ePWKA=
Subject key identifier:   14:E3:1C:EC:D7:30:94:0B:97:69:A9:C2:3F:9F:88:A6:3D:F1:C9:06
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       37C02D49891CE0A6832DB1A58D2608E4CC54E5E4
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS44547.roa
Signing time:             Tue 11 Apr 2023 07:03:57 +0000
ROA not before:           Tue 11 Apr 2023 06:58:57 +0000
ROA not after:            Tue 09 Apr 2024 07:03:57 +0000
asID:                     44547
IP address blocks:        84.46.236.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c0:2d:49:89:1c:e0:a6:83:2d:b1:a5:8d:26:08:e4:cc:54:e5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 11 06:58:57 2023 GMT
            Not After : Apr  9 07:03:57 2024 GMT
        Subject: CN=14E31CECD730940B9769A9C23F9F88A63DF1C906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:47:e2:5a:81:bb:ec:d9:72:00:c0:63:da:
                    49:cd:03:94:38:5a:56:e5:75:91:52:12:17:08:b2:
                    b9:f4:49:fb:af:ca:12:58:ee:b6:b0:e0:ed:5d:73:
                    5d:28:79:75:fe:62:f0:d3:31:64:fb:6b:a2:f2:a7:
                    a3:69:3c:67:be:0c:39:43:56:bc:19:ed:44:86:68:
                    b0:30:e1:25:45:39:50:fb:e2:01:f8:0d:21:29:f0:
                    27:63:2c:b5:06:d7:b7:9e:89:a8:c5:6c:c7:23:2f:
                    51:f2:c7:a0:e7:4e:a3:b7:b0:15:b0:42:20:a0:b7:
                    12:f2:cd:5c:a0:93:60:c5:b6:8f:60:bb:2e:8b:a3:
                    91:e9:28:5e:08:48:4b:71:dc:51:1c:92:7c:d7:f5:
                    cd:d3:14:ae:e7:ed:d3:c6:ac:bd:ed:8c:cd:68:35:
                    99:ae:b6:d6:64:4e:42:7d:b7:69:3b:71:f5:84:93:
                    e9:1f:d8:8d:1f:99:94:fe:22:72:a7:d6:8f:06:fc:
                    b6:c9:1c:6c:f4:cd:5f:9a:3b:95:e1:c6:44:05:e1:
                    81:dc:0f:0b:71:26:88:1d:65:ac:b0:ed:6b:6f:c3:
                    cb:22:6b:e6:45:de:89:9c:30:ec:b3:13:de:1c:24:
                    b7:aa:a8:aa:c1:dc:47:8b:bc:70:f0:f5:8a:97:ae:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E3:1C:EC:D7:30:94:0B:97:69:A9:C2:3F:9F:88:A6:3D:F1:C9:06
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS44547.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.46.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:f4:34:6e:ec:94:67:e0:f5:24:20:04:26:93:d2:7f:68:58:
         3c:e3:0b:32:31:6d:0c:9f:aa:eb:ea:94:ba:62:cc:ca:1e:f0:
         26:24:49:86:28:b7:ba:85:df:8b:b1:a1:bd:8b:87:88:6a:5c:
         33:78:43:21:1a:c9:33:f7:34:6b:ef:00:ef:0f:83:a7:cc:8d:
         09:3f:54:19:83:5a:3a:5d:5e:35:3c:4a:7f:8b:24:8c:fe:73:
         74:4a:e6:16:c0:1f:7e:c5:0e:a9:18:0a:d5:85:16:c0:a8:f2:
         0c:4c:0b:54:14:52:9c:15:e2:08:85:2e:30:67:94:b8:e5:d8:
         79:30:47:89:b8:6c:4c:8c:48:8b:01:08:b1:fc:fb:28:ce:64:
         c5:33:4b:08:fa:17:2b:87:0e:7c:b1:90:57:4a:dc:eb:c1:4a:
         bb:41:26:49:b2:6b:56:14:30:aa:e2:38:8b:eb:03:04:d2:4c:
         de:2b:e4:ca:58:31:cc:32:d4:b6:b6:fd:9f:27:ae:f3:cb:7c:
         3b:4f:4e:cb:07:72:d9:b3:4d:b3:c1:00:ce:ff:90:2d:b0:fc:
         a5:dd:69:2b:36:8b:21:57:bd:a6:d3:4d:11:01:dd:0d:0f:e7:
         64:f4:5f:65:b0:57:03:d6:a8:a5:bb:22:12:63:7f:04:c3:dc:
         9d:1f:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org