Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50225.roa
File:                     AS50225.roa (raw, json)
Hash identifier:          oECacG30X7isyg+e6ZJ37+gERbWIe4cienhILCxg3Xs=
Subject key identifier:   A4:7F:EA:D6:02:06:41:33:26:C1:C2:F2:65:10:DA:96:7D:EB:38:8D
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       24B5DEA592C7B298D91DD0353FED0DF398BD5650
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50225.roa
Signing time:             Thu 13 Apr 2023 18:30:04 +0000
ROA not before:           Thu 13 Apr 2023 18:25:04 +0000
ROA not after:            Thu 11 Apr 2024 18:30:04 +0000
asID:                     50225
IP address blocks:        86.38.183.0/24 maxlen: 24
                          89.116.131.0/24 maxlen: 24
                          89.116.242.0/24 maxlen: 24
                          89.117.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b5:de:a5:92:c7:b2:98:d9:1d:d0:35:3f:ed:0d:f3:98:bd:56:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 13 18:25:04 2023 GMT
            Not After : Apr 11 18:30:04 2024 GMT
        Subject: CN=A47FEAD60206413326C1C2F26510DA967DEB388D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f5:2e:a0:39:49:09:99:1b:a3:ed:4d:89:ae:
                    78:6f:23:26:3c:4a:bd:81:8f:4f:ea:6c:bd:86:07:
                    8f:69:18:dd:31:5f:79:cf:8d:14:9e:8c:5d:ad:40:
                    e5:af:98:4a:8a:be:ac:69:98:81:d1:33:43:8a:3e:
                    29:10:c5:38:16:12:97:8c:86:2f:0f:14:40:63:cd:
                    44:cb:a5:7f:f4:8a:97:08:b2:a9:d2:a2:80:07:93:
                    1b:91:c2:bf:71:eb:61:80:f3:71:82:11:b6:b0:fa:
                    e8:29:81:e6:2b:d5:79:1f:f2:b0:9a:63:d8:46:8c:
                    e3:0a:90:d8:dd:90:3f:74:0b:03:06:91:dc:95:99:
                    7f:9b:2a:8e:35:94:88:6a:2a:50:72:a6:b7:11:00:
                    80:9a:88:5c:26:97:a6:1d:b7:5b:2e:f7:a3:52:0d:
                    f2:ce:e4:60:44:c3:fe:46:ef:b3:62:6e:b1:0e:14:
                    07:f1:8e:46:93:bc:59:32:36:dd:b6:ad:27:59:85:
                    c2:dc:4f:9d:d9:2f:e3:b2:20:71:24:36:cc:0e:cc:
                    8c:6d:c1:ce:96:1a:ef:7b:53:49:34:5b:36:92:0a:
                    4e:a2:97:3d:fd:36:27:b4:60:e7:40:2e:84:4e:ae:
                    df:64:3e:d9:36:c1:18:53:87:07:48:84:a4:c9:2b:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7F:EA:D6:02:06:41:33:26:C1:C2:F2:65:10:DA:96:7D:EB:38:8D
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50225.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.183.0/24
                  89.116.131.0/24
                  89.116.242.0/24
                  89.117.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:5d:59:dd:c9:83:d8:08:57:3c:98:30:ad:fc:4f:91:2e:4c:
         a0:3f:10:dd:e9:72:be:9a:b0:95:33:57:26:f4:7e:1c:63:34:
         53:06:75:d3:d3:90:29:9f:05:f0:fa:50:c0:29:18:f5:72:fa:
         fb:6b:ee:e3:37:d3:b3:00:ec:32:ff:e5:78:af:97:4d:39:bc:
         a2:50:76:61:e1:ea:0f:02:27:71:bd:80:7c:f3:1a:58:36:24:
         c6:c9:75:8d:c2:c2:5c:30:78:a0:9d:00:3d:4a:71:f7:e4:d3:
         ae:24:20:f4:1d:a5:7a:5b:b8:35:94:9b:3e:f2:b8:fb:ca:ae:
         1e:a1:0b:d6:fa:be:94:63:31:0e:2a:9d:af:37:ff:0b:f7:ad:
         60:32:85:37:75:42:23:c1:9c:26:3a:55:0c:d2:13:87:bd:51:
         58:54:55:7e:40:94:f4:1a:0b:83:9e:d8:61:64:73:94:b0:de:
         c2:97:a2:f0:a8:32:ea:c5:c1:e6:50:79:8e:8e:2b:8d:b4:8b:
         a7:d3:5d:c8:af:75:3b:42:b9:5e:a4:6c:c3:fa:ce:1e:2f:02:
         2d:f9:de:39:17:dd:6e:e3:6a:5c:33:c4:8b:6e:3d:01:30:2d:
         39:1d:44:7c:5b:67:55:65:1a:88:91:93:f0:62:04:b6:fb:4e:
         d8:4d:a1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org