Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49981.roa
File:                     AS49981.roa (raw, json)
Hash identifier:          +1riyua1ljUMTzIk0ou1eSOeHjG0j5RQ33Kl6B17pWw=
Subject key identifier:   7A:A0:DF:92:05:F9:EA:A3:21:A7:E6:76:80:91:18:5D:B7:6F:4B:90
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       6AC5E5538369B3FA64730AA701E034475FF1EC30
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49981.roa
Signing time:             Sat 25 Feb 2023 00:00:09 +0000
ROA not before:           Fri 24 Feb 2023 23:55:09 +0000
ROA not after:            Sat 24 Feb 2024 00:00:09 +0000
asID:                     49981
IP address blocks:        89.116.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c5:e5:53:83:69:b3:fa:64:73:0a:a7:01:e0:34:47:5f:f1:ec:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Feb 24 23:55:09 2023 GMT
            Not After : Feb 24 00:00:09 2024 GMT
        Subject: CN=7AA0DF9205F9EAA321A7E6768091185DB76F4B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:0c:1c:dc:52:d5:e7:21:9c:3f:bf:33:f0:
                    89:18:d1:7f:2d:bd:db:ec:ed:b5:95:ab:41:6d:5f:
                    4e:14:7e:36:79:16:5b:2c:33:88:c2:f4:1a:b3:62:
                    83:04:7a:57:af:2c:f6:26:ac:b3:73:4c:1f:1f:28:
                    17:d2:fb:a1:61:c5:6b:76:32:7f:64:ec:53:7c:d3:
                    f1:5e:96:eb:61:4a:71:a3:d8:84:22:09:d4:77:bf:
                    7c:e7:cf:32:d6:a6:08:99:11:9c:af:13:9f:de:72:
                    b7:17:0e:67:1b:eb:d5:b7:90:2c:93:64:b9:74:84:
                    ca:dd:fd:36:17:b0:9a:37:b4:e5:5d:31:b2:73:14:
                    b4:36:4b:5f:a4:86:57:a0:de:ef:26:1f:46:3d:a7:
                    20:58:79:a2:37:c2:98:c5:d7:23:ba:16:49:28:27:
                    c5:fe:32:77:7f:22:bf:35:55:c9:3d:5b:c1:3f:a4:
                    ca:45:ee:89:22:b3:7b:63:9e:96:56:1a:0f:92:9c:
                    ed:55:e8:b3:ca:24:9d:f4:39:7f:db:fb:31:50:59:
                    57:f0:b5:eb:9a:2a:69:0a:15:1b:cd:22:a9:a2:d0:
                    08:62:9b:80:5b:47:66:39:0e:c7:6d:fd:4f:e1:c0:
                    0d:bd:e8:3e:0f:50:7e:c8:bc:9c:f1:a0:ec:20:84:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A0:DF:92:05:F9:EA:A3:21:A7:E6:76:80:91:18:5D:B7:6F:4B:90
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:25:d9:95:3a:24:97:33:09:d9:15:07:d3:0a:bf:5f:29:8b:
         d0:99:2f:25:90:49:3b:40:2d:9c:26:6d:ea:70:a1:44:75:b0:
         cd:1e:ea:25:4d:9d:7d:a8:29:02:63:47:e7:9d:c8:72:73:1f:
         27:a9:a5:09:ef:6f:57:f4:7c:8f:e3:8b:bb:8b:e0:8b:11:7d:
         e2:5b:96:da:01:9c:aa:37:43:67:fd:0a:d4:37:3b:59:b1:fb:
         3a:05:8e:95:5c:1d:53:cd:0a:27:9e:b2:c2:dd:82:25:64:ec:
         e6:e7:f4:07:65:83:25:d5:0f:7c:60:f2:24:2f:14:b2:19:5f:
         11:84:9c:ee:a5:2c:a8:ce:1a:01:e9:2e:5b:3b:ba:ed:11:09:
         0b:81:ee:9c:4d:66:21:ab:d0:cd:b2:25:0b:80:11:e8:11:41:
         77:ba:42:8f:9e:fa:61:81:2e:0b:1f:2c:e3:cd:ca:de:27:0d:
         4f:b8:65:47:63:d7:e7:be:97:d9:23:de:a1:58:b9:63:df:55:
         b1:1d:54:43:28:80:32:f7:b7:6a:b2:7c:13:07:57:ba:6d:bc:
         4d:b4:30:86:fb:04:82:8e:a4:21:7d:41:a6:80:3a:ce:d3:3e:
         ab:db:48:33:9e:b4:9a:62:e3:f2:46:f4:53:e3:d5:8e:c1:8c:
         b3:76:40:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org