Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49468.roa
File:                     AS49468.roa (raw, json)
Hash identifier:          VdabJ5OOoKqKEV1stDAYzJETQHME2vNqWw4+fIljX6Y=
Subject key identifier:   8F:99:C6:3E:D7:6E:A1:E6:F3:8B:BA:0C:C4:CF:50:C9:0D:A5:00:DC
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       62C2CC42C4C8E253B665F4F7A93C4AFBF40A0320
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49468.roa
Signing time:             Wed 09 Aug 2023 18:03:07 +0000
ROA not before:           Wed 09 Aug 2023 17:58:07 +0000
ROA not after:            Wed 07 Aug 2024 18:03:07 +0000
asID:                     49468
IP address blocks:        89.116.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c2:cc:42:c4:c8:e2:53:b6:65:f4:f7:a9:3c:4a:fb:f4:0a:03:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug  9 17:58:07 2023 GMT
            Not After : Aug  7 18:03:07 2024 GMT
        Subject: CN=8F99C63ED76EA1E6F38BBA0CC4CF50C90DA500DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:5a:0f:10:0d:59:ae:4f:0c:49:69:7a:ec:
                    3d:40:48:4f:4e:b0:75:c9:35:16:f0:c8:29:14:6d:
                    e3:cd:47:64:ca:16:d7:5b:44:49:d0:36:03:24:86:
                    97:dc:ab:15:c2:13:d9:c4:c6:6d:6c:7e:2d:ec:79:
                    ba:82:20:ac:27:76:2c:1a:74:84:96:06:b3:d7:f9:
                    7a:3b:33:ba:a7:86:cf:32:0f:f8:a7:58:e1:a8:96:
                    4f:71:62:31:ac:6b:90:c0:23:fd:67:ed:79:68:4b:
                    19:b3:52:65:93:32:26:14:5c:b8:a4:34:55:2c:58:
                    06:42:53:33:ca:89:96:b9:02:1f:58:b5:c7:c0:b4:
                    de:20:28:34:30:81:1a:3d:98:fc:2b:60:f8:b7:c3:
                    86:73:d8:d1:5f:b8:76:46:d0:f5:cb:64:4b:d1:19:
                    4d:57:94:3f:cc:01:89:72:90:55:95:e2:4c:91:5e:
                    c5:71:cc:25:64:f4:a0:fd:b8:97:e4:1c:a1:42:90:
                    18:e2:e3:6a:c3:d0:36:a8:61:1f:a2:70:4a:f9:2a:
                    9c:38:d2:42:82:d5:e5:c4:c0:bc:70:39:3d:05:ab:
                    8e:53:d7:c3:3f:9c:87:2b:a0:2e:70:36:76:b3:54:
                    ca:85:4d:13:bb:36:24:95:5e:1e:04:8a:e0:81:67:
                    66:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:99:C6:3E:D7:6E:A1:E6:F3:8B:BA:0C:C4:CF:50:C9:0D:A5:00:DC
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:51:0e:15:79:a6:dc:f1:d3:db:77:ff:3e:a4:bc:5d:79:b3:
         91:00:bc:e6:c9:23:70:79:f3:6b:54:74:75:73:b1:34:43:5f:
         fc:4a:60:08:32:80:1f:84:b3:46:75:20:5f:85:45:94:61:dc:
         bf:3e:0b:d9:0c:61:d8:3f:25:6f:67:67:03:f5:2b:f4:e9:0f:
         db:81:48:50:b3:34:fa:88:d6:42:8f:eb:7a:e8:db:91:0d:8e:
         73:66:3c:ee:0b:f0:5f:c0:81:59:3e:35:47:cb:0d:5d:9b:76:
         6d:52:91:93:f1:40:c9:30:91:8b:3c:8d:2b:dd:30:22:4d:b4:
         97:aa:42:c8:3b:0e:44:bc:6a:a3:b4:3b:9e:b8:ab:82:4d:4b:
         30:e1:55:00:d3:ba:fa:f6:ef:83:14:b4:96:bb:03:f6:2e:33:
         43:17:b8:88:89:9a:c7:0a:0e:1b:a4:35:37:9d:e3:9d:59:f1:
         e6:2d:23:b7:c0:9c:f8:95:8f:a6:91:02:2f:e4:a7:18:71:e2:
         f2:16:ae:80:6c:0f:eb:df:ae:24:4c:74:9a:7e:f3:8e:9a:c5:
         cc:7d:03:15:c4:28:6e:d7:5a:58:b7:ad:e0:a7:95:ab:13:7b:
         b4:c4:0c:3f:95:d1:67:51:d6:f3:99:c0:f4:dc:7b:21:7f:85:
         bd:05:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 00:28:32 2023 by rpki-client on console-fra.rpki-client.org