Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS44592.roa
File:                     AS44592.roa (raw, json)
Hash identifier:          143nrs/sYYWUV4JP9dPqefR+43pE0mBk9BHnXoZEZMk=
Subject key identifier:   CF:AD:0C:B9:6E:3C:25:9D:98:84:5D:3D:82:00:12:6E:3F:CD:9E:88
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3A31EA15A43ACDD882DA5298A24F3E97B23A0882
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS44592.roa
Signing time:             Tue 04 Apr 2023 14:51:32 +0000
ROA not before:           Tue 04 Apr 2023 14:46:32 +0000
ROA not after:            Tue 02 Apr 2024 14:51:32 +0000
asID:                     44592
IP address blocks:        89.117.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:31:ea:15:a4:3a:cd:d8:82:da:52:98:a2:4f:3e:97:b2:3a:08:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr  4 14:46:32 2023 GMT
            Not After : Apr  2 14:51:32 2024 GMT
        Subject: CN=CFAD0CB96E3C259D98845D3D8200126E3FCD9E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:48:7f:b2:a8:b0:4d:88:71:79:86:2a:d9:
                    fe:78:02:ba:30:18:18:ca:df:5f:34:0d:09:a7:34:
                    d0:85:bc:3b:b4:da:6f:98:f2:29:7f:71:3c:08:9b:
                    f7:22:c7:89:cd:b6:d7:0f:6c:f3:87:56:6c:73:12:
                    fa:92:f6:0c:4a:ec:06:ea:a2:14:44:78:e8:a1:77:
                    cc:c5:e1:ed:4c:4f:69:3f:c1:ff:c5:cc:ab:62:96:
                    66:f5:f2:c3:99:80:52:07:ef:13:6f:00:8e:d4:9e:
                    3a:aa:10:46:e4:81:33:d8:c8:48:e3:b1:8e:94:53:
                    4e:13:9b:ea:62:c7:ae:f1:7a:1b:2e:d5:f8:90:18:
                    33:46:a2:fb:7a:4b:e9:8b:d2:af:25:ab:5c:1f:26:
                    99:65:d2:d9:7f:a0:fb:e7:7a:b9:75:03:45:42:f4:
                    51:6b:80:42:f6:84:b6:ce:4e:42:38:24:0e:d9:b7:
                    7f:ea:77:57:ab:c3:ce:f8:f3:c0:e9:54:8c:04:91:
                    33:df:66:61:06:a3:14:e6:bb:83:71:05:cc:c8:7b:
                    dc:f6:da:9a:59:9f:44:37:4c:f0:85:c3:c3:68:41:
                    92:11:bd:dd:11:af:d7:11:6e:42:3e:0e:fa:a6:f0:
                    4e:3f:b6:7d:86:46:75:77:bd:bc:ed:b9:2b:ee:93:
                    8f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AD:0C:B9:6E:3C:25:9D:98:84:5D:3D:82:00:12:6E:3F:CD:9E:88
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS44592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:15:49:00:05:c2:5e:a8:97:0e:d1:30:7a:6c:48:c8:f6:61:
         b4:e0:fe:4b:09:1f:7c:3c:ea:40:c7:e0:74:2d:9d:93:f9:ff:
         06:1f:e4:82:e8:08:e9:6a:6a:2e:d9:ac:80:55:29:d9:82:7f:
         63:3c:6a:f8:0c:5d:e3:61:9c:ba:4f:f5:96:fc:06:95:27:21:
         5e:76:ea:6b:2f:9e:b8:cf:2d:23:56:9c:75:0c:22:88:a6:f7:
         ee:13:c6:d0:ea:25:e2:0b:0a:10:d8:0d:55:ad:07:da:00:1b:
         0a:76:3b:ce:dc:23:e8:7d:94:b5:7b:18:77:3d:c5:d7:c3:ef:
         ff:09:af:a9:02:0c:79:6c:d9:3d:d7:34:62:82:65:2a:0c:48:
         5c:ce:91:3c:3f:81:30:ed:04:bf:d9:fd:7a:c7:d2:41:08:dc:
         e7:1d:57:be:cf:19:63:5c:14:de:69:2c:ce:c1:61:de:99:d1:
         a8:12:fe:40:84:db:e9:3f:9e:3d:8a:70:c1:63:f5:92:e5:11:
         bd:2f:bb:f0:41:7d:65:45:13:02:40:f6:45:cc:8f:7d:d1:b1:
         57:b4:f2:34:ec:58:45:8a:44:bf:99:f3:d6:01:9b:ba:70:25:
         d4:71:2d:44:e3:a9:11:fe:04:c3:ec:38:e0:17:1f:47:c6:fc:
         ce:43:32:dd
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUOjHqFaQ6zdiC2lKYok8+l7I6CIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzA0MDQxNDQ2MzJaFw0yNDA0MDIxNDUxMzJaMDMxMTAvBgNV
BAMTKENGQUQwQ0I5NkUzQzI1OUQ5ODg0NUQzRDgyMDAxMjZFM0ZDRDlFODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCitkh/sqiwTYhxeYYq2f54Arow
GBjK3180DQmnNNCFvDu02m+Y8il/cTwIm/cix4nNttcPbPOHVmxzEvqS9gxK7Abq
ohREeOihd8zF4e1MT2k/wf/FzKtilmb18sOZgFIH7xNvAI7UnjqqEEbkgTPYyEjj
sY6UU04Tm+pix67xehsu1fiQGDNGovt6S+mL0q8lq1wfJpll0tl/oPvnerl1A0VC
9FFrgEL2hLbOTkI4JA7Zt3/qd1erw87488DpVIwEkTPfZmEGoxTmu4NxBczIe9z2
2ppZn0Q3TPCFw8NoQZIRvd0Rr9cRbkI+Dvqm8E4/tn2GRnV3vbztuSvuk4+1AgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUz60MuW48JZ2YhF09ggASbj/NnogwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y
ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5
OTQ4RUYyNzlDLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i
ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVM0NDU5Mi5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl12DANBgkq
hkiG9w0BAQsFAAOCAQEAvhVJAAXCXqiXDtEwemxIyPZhtOD+SwkffDzqQMfgdC2d
k/n/Bh/kgugI6WpqLtmsgFUp2YJ/Yzxq+Axd42Gcuk/1lvwGlSchXnbqay+euM8t
I1acdQwiiKb37hPG0Ool4gsKENgNVa0H2gAbCnY7ztwj6H2UtXsYdz3F18Pv/wmv
qQIMeWzZPdc0YoJlKgxIXM6RPD+BMO0Ev9n9esfSQQjc5x1Xvs8ZY1wU3mkszsFh
3pnRqBL+QITb6T+ePYpwwWP1kuURvS+78EF9ZUUTAkD2RcyPfdGxV7TyNOxYRYpE
v5nz1gGbunAl1HEtROOpEf4Ew+w44BcfR8b8zkMy3Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org