Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46573.roa
File:                     AS46573.roa (raw, json)
Hash identifier:          vB1aalQNQ7Vkj/dYnEpdtpYuWDZls4JJ1MmRPlZOXqs=
Subject key identifier:   62:D2:E5:86:3B:A1:9F:52:A6:F5:F2:97:BD:8E:98:C9:9D:8E:6D:EA
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       347A6EB0A3A8254D212C15E53A37060920A38DA2
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46573.roa
Signing time:             Fri 27 Oct 2023 20:01:34 +0000
ROA not before:           Fri 27 Oct 2023 19:56:34 +0000
ROA not after:            Fri 25 Oct 2024 20:01:34 +0000
asID:                     46573
IP address blocks:        89.116.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7a:6e:b0:a3:a8:25:4d:21:2c:15:e5:3a:37:06:09:20:a3:8d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct 27 19:56:34 2023 GMT
            Not After : Oct 25 20:01:34 2024 GMT
        Subject: CN=62D2E5863BA19F52A6F5F297BD8E98C99D8E6DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:41:2a:22:f4:95:8b:76:e7:06:42:74:68:5d:
                    3b:5f:2d:44:ad:06:e7:77:3a:78:a1:f1:09:cd:2e:
                    ca:72:89:2a:45:d6:8c:6b:68:9f:86:31:78:32:56:
                    7d:3f:1a:67:b8:26:3b:90:35:be:70:cd:df:42:9e:
                    b2:e2:27:81:b4:60:9f:bc:f8:f6:30:0f:26:fc:a8:
                    b2:94:40:72:d7:01:d4:e4:c6:eb:00:e6:13:85:79:
                    ed:b2:1b:87:61:57:66:5a:c3:53:a3:c1:56:42:7b:
                    93:84:71:9f:b9:69:15:6f:77:13:9c:3c:ea:c2:6a:
                    3f:b3:37:80:12:ce:b9:dc:9e:47:e7:d0:8e:25:87:
                    64:1f:22:3d:e1:39:6e:1d:1e:f6:49:15:5e:d0:ea:
                    81:44:3c:22:11:56:61:3e:d7:ef:d6:c1:58:c7:34:
                    2d:50:b3:9a:67:9d:54:fc:da:48:36:06:0a:e8:53:
                    3a:90:20:ed:04:40:ca:f7:cf:cd:5c:0f:11:10:f5:
                    29:0f:52:86:3c:c5:1b:fa:ec:6d:e1:8b:36:85:15:
                    fc:41:a4:57:7e:da:71:9f:3f:d0:fb:b3:58:20:4d:
                    87:ac:c8:b9:da:97:4e:e7:94:ea:0c:8f:5a:6f:ba:
                    d8:6c:e9:8a:c7:a8:f8:af:b4:2c:5b:54:73:bd:8a:
                    12:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D2:E5:86:3B:A1:9F:52:A6:F5:F2:97:BD:8E:98:C9:9D:8E:6D:EA
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46573.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:ad:2a:a0:b2:15:db:78:40:67:0b:61:47:5f:73:5c:a6:cf:
         3c:41:b6:0f:93:0e:31:d2:83:e9:d2:e0:b7:a8:fe:9c:e9:d2:
         84:b6:70:ad:aa:24:71:98:77:ff:5e:f7:55:09:d3:07:93:67:
         ae:31:04:3f:6b:25:28:ca:b9:f9:dd:45:50:bd:e1:31:91:c5:
         cd:f4:02:da:12:e0:5e:34:88:2f:4d:84:f7:29:1b:61:e0:4f:
         ae:7d:45:f1:3d:13:3e:44:90:8c:71:4b:fa:99:3c:97:aa:2e:
         df:ef:a5:79:8f:11:31:e9:39:d4:76:bb:0f:a8:e5:e8:84:52:
         b2:9d:0a:80:99:e3:f2:3b:a1:eb:57:ae:65:26:42:6d:2b:f1:
         f3:51:a4:09:f7:ed:fa:d1:38:14:3d:b7:2b:a2:c5:4c:2e:85:
         1e:b3:b5:01:e8:88:cd:10:34:95:ad:7c:1a:0e:d8:29:af:80:
         5a:fa:06:3a:3c:38:25:94:96:72:e0:a0:c1:cb:2c:a4:99:19:
         e3:19:95:7c:8f:03:89:10:6d:62:90:bf:50:c8:f7:74:e8:79:
         f7:d4:0d:6b:0c:38:97:a1:5b:a6:6e:f1:b3:75:d7:1d:24:85:
         10:df:d2:05:6a:e9:51:07:71:b7:d1:93:de:93:f6:c1:19:eb:
         db:ba:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 11:39:34 2023 by rpki-client on console-fra.rpki-client.org