Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49581.roa
File:                     AS49581.roa (raw, json)
Hash identifier:          3kK0OUJIsGt6tV+ZjodCrImdYTtSEzF1gA/tDzpgIuU=
Subject key identifier:   E7:25:B7:7D:65:8F:00:4E:BB:CF:67:63:F4:2E:30:87:72:0D:88:52
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3261710A2A406E34CF6304527DB9C699BD004B7C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49581.roa
Signing time:             Tue 29 Nov 2022 17:38:24 +0000
ROA not before:           Tue 29 Nov 2022 17:33:24 +0000
ROA not after:            Tue 28 Nov 2023 17:38:24 +0000
asID:                     49581
IP address blocks:        86.38.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:61:71:0a:2a:40:6e:34:cf:63:04:52:7d:b9:c6:99:bd:00:4b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 29 17:33:24 2022 GMT
            Not After : Nov 28 17:38:24 2023 GMT
        Subject: CN=E725B77D658F004EBBCF6763F42E3087720D8852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:03:06:bb:27:ce:78:9e:9c:66:d5:5f:74:
                    aa:b8:5d:a8:9b:3b:d6:87:8d:2d:5a:6a:a0:4d:07:
                    b9:1f:e2:2e:dc:62:78:84:a3:60:b3:2e:0a:75:e5:
                    2c:cd:cb:20:fe:6e:84:9e:d5:f6:b9:c7:33:62:22:
                    55:9d:a3:b4:31:48:3b:6d:03:08:03:c5:2d:de:9a:
                    56:76:85:0c:e0:34:bd:34:62:7c:e2:85:26:74:5f:
                    84:26:79:cb:6a:a6:37:67:97:15:82:ca:24:b1:d1:
                    4c:98:af:f5:9c:a0:7c:d5:4d:64:fa:3d:8c:03:0a:
                    e5:7c:c0:e3:e2:c9:79:99:e8:a0:25:ea:90:1c:84:
                    eb:b7:ee:b8:73:3a:6a:f9:a8:b7:9d:27:f7:37:78:
                    00:b7:5a:23:b1:3e:89:e8:d0:20:b0:2d:a9:05:01:
                    96:81:8e:d1:5b:46:8b:f1:62:1b:f3:6a:20:2e:5f:
                    ec:54:42:9c:34:f5:41:11:d0:dc:db:c2:4f:d8:d3:
                    5c:01:3c:b4:ba:65:4f:71:a5:bb:27:cb:46:86:3f:
                    9f:fa:9c:77:4b:49:a4:b0:54:88:88:75:e3:81:ad:
                    af:74:84:55:8a:41:41:66:96:c2:e1:b8:20:81:0e:
                    aa:2f:c0:f7:1d:16:d9:6c:24:61:db:4a:8a:7b:91:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:25:B7:7D:65:8F:00:4E:BB:CF:67:63:F4:2E:30:87:72:0D:88:52
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:af:6e:e0:25:de:b4:fa:ef:29:07:9b:9e:61:4c:2a:94:f1:
         6c:28:b6:de:bf:2c:63:f1:99:5a:a2:11:25:38:b7:f6:d0:76:
         05:4e:57:54:24:1d:63:ef:bd:d2:ac:72:fa:e8:19:b6:c2:8b:
         67:b7:d7:96:8d:1e:79:fb:01:96:fd:2c:d7:95:ce:af:31:da:
         cc:ba:d3:9f:7b:39:9c:c5:99:1d:8e:0d:8f:3a:de:3b:36:20:
         25:dc:e9:7e:ba:fd:46:88:dc:ee:b3:6b:ee:89:f9:eb:be:5d:
         76:76:44:ff:0f:55:63:21:f5:96:20:1f:44:73:b3:34:2d:16:
         12:38:42:dd:ff:23:7f:e6:48:86:c8:20:e3:05:82:96:69:55:
         42:aa:ba:f5:ac:3a:5a:9e:ce:8a:5b:e4:58:20:fd:74:7a:23:
         4e:b2:32:7f:80:cb:6e:85:d2:72:ed:61:1e:4d:04:3d:39:4c:
         81:54:4c:50:38:9e:41:e5:06:36:98:15:66:4f:ad:46:3d:29:
         48:eb:81:53:57:ab:17:24:8b:9a:5d:23:2a:35:4c:ac:a2:a9:
         c5:f5:45:18:76:f8:6b:76:ff:e8:c7:58:a5:6c:ce:83:6a:09:
         5a:2d:c9:f8:b8:0f:ff:fa:23:09:39:f3:5c:ec:4d:8c:0d:7f:
         d2:ec:f5:e7
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUMmFxCipAbjTPYwRSfbnGmb0AS3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMjExMjkxNzMzMjRaFw0yMzExMjgxNzM4MjRaMDMxMTAvBgNV
BAMTKEU3MjVCNzdENjU4RjAwNEVCQkNGNjc2M0Y0MkUzMDg3NzIwRDg4NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQwMGuyfOeJ6cZtVfdKq4Xaib
O9aHjS1aaqBNB7kf4i7cYniEo2CzLgp15SzNyyD+boSe1fa5xzNiIlWdo7QxSDtt
AwgDxS3emlZ2hQzgNL00YnzihSZ0X4QmectqpjdnlxWCyiSx0UyYr/WcoHzVTWT6
PYwDCuV8wOPiyXmZ6KAl6pAchOu37rhzOmr5qLedJ/c3eAC3WiOxPono0CCwLakF
AZaBjtFbRovxYhvzaiAuX+xUQpw09UER0Nzbwk/Y01wBPLS6ZU9xpbsny0aGP5/6
nHdLSaSwVIiIdeOBra90hFWKQUFmlsLhuCCBDqovwPcdFtlsJGHbSop7kS7dAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQU5yW3fWWPAE67z2dj9C4wh3INiFIwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y
ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5
OTQ4RUYyNzlDLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i
ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVM0OTU4MS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYm3TANBgkq
hkiG9w0BAQsFAAOCAQEAm69u4CXetPrvKQebnmFMKpTxbCi23r8sY/GZWqIRJTi3
9tB2BU5XVCQdY++90qxy+ugZtsKLZ7fXlo0eefsBlv0s15XOrzHazLrTn3s5nMWZ
HY4NjzreOzYgJdzpfrr9Rojc7rNr7on5675ddnZE/w9VYyH1liAfRHOzNC0WEjhC
3f8jf+ZIhsgg4wWClmlVQqq69aw6Wp7OilvkWCD9dHojTrIyf4DLboXScu1hHk0E
PTlMgVRMUDieQeUGNpgVZk+tRj0pSOuBU1erFySLml0jKjVMrKKpxfVFGHb4a3b/
6MdYpWzOg2oJWi3J+LgP//ojCTnzXOxNjA1/0uz15w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org