Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          DjyYv2sqKy1TH/04LktAQhIO/GJNx4sGu/vsphBNI3c=
Subject key identifier:   C1:8B:67:AF:54:B3:77:E1:71:BF:C0:1E:82:28:98:C8:AF:27:03:A2
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0B2316F7B4AAD7F57FBC8FF58EE1665AE017737C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS53356.roa
Signing time:             Fri 09 Dec 2022 14:57:08 +0000
ROA not before:           Fri 09 Dec 2022 14:52:08 +0000
ROA not after:            Fri 08 Dec 2023 14:57:08 +0000
asID:                     53356
IP address blocks:        89.116.45.0/24 maxlen: 24
                          89.117.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:23:16:f7:b4:aa:d7:f5:7f:bc:8f:f5:8e:e1:66:5a:e0:17:73:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec  9 14:52:08 2022 GMT
            Not After : Dec  8 14:57:08 2023 GMT
        Subject: CN=C18B67AF54B377E171BFC01E822898C8AF2703A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:ad:2c:27:8d:8e:c3:23:df:26:f3:53:f4:
                    a2:5e:d7:a4:cf:5a:c8:de:80:bd:e0:78:73:88:c1:
                    35:69:17:2f:64:3f:34:79:2a:31:48:fd:46:f0:47:
                    fe:c7:18:d9:e1:12:d2:32:48:61:f4:25:04:3e:1c:
                    6f:b7:c1:c9:fe:ff:36:1d:6c:09:38:42:85:0b:f2:
                    40:b7:2e:92:e2:29:44:0d:a2:7e:2a:8c:08:fe:94:
                    f4:db:ea:2c:61:aa:c5:15:bc:2d:da:a7:17:2e:9e:
                    ea:18:3b:d0:d9:39:37:e1:11:ba:e8:d5:59:8f:e6:
                    b0:0d:ac:c6:f3:9c:f6:f5:ac:02:ee:e7:9d:26:9c:
                    60:03:d1:cf:1a:15:b7:97:df:69:47:2c:45:f7:78:
                    f2:f0:0b:2a:97:20:6a:e2:86:53:7d:5a:e1:1a:90:
                    48:28:06:02:bf:94:50:11:07:46:1a:5f:8f:68:1a:
                    bf:cf:d5:96:1b:37:8e:c4:5b:ca:af:c6:5b:90:c0:
                    4d:49:9a:c3:bd:44:75:8e:fc:dc:e4:d8:4c:92:69:
                    6e:cb:50:cf:a8:79:c5:60:8a:39:bb:83:5b:98:0d:
                    63:e9:33:70:3c:e8:82:39:9d:e5:23:9b:c6:b3:2c:
                    13:04:46:ce:0a:0e:e4:2e:fc:68:53:a6:04:9d:a1:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8B:67:AF:54:B3:77:E1:71:BF:C0:1E:82:28:98:C8:AF:27:03:A2
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.45.0/24
                  89.117.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6d:76:84:a6:8d:c3:2c:8d:b8:3d:12:e3:82:35:71:0c:14:
         c3:cd:bd:7e:d6:80:d5:15:bd:c2:bd:77:9a:fd:c1:94:c5:f4:
         e4:2b:64:a7:c2:42:c9:e8:2e:a5:33:3e:fe:58:e1:6d:4d:60:
         08:d1:a9:ba:a4:1a:3f:b8:7f:2d:80:c3:da:84:23:ec:5c:e7:
         89:f1:32:bc:77:e7:bc:5e:c9:1f:0b:a3:0b:96:80:61:7b:45:
         a2:39:17:91:04:31:e9:e3:a4:b9:1e:6a:cc:50:af:c4:e9:66:
         c4:2a:27:d1:ba:11:96:c0:06:e2:e7:eb:11:4f:aa:d6:d3:2a:
         35:eb:59:71:ae:69:8a:03:6e:87:dc:17:13:fe:a3:b2:61:e0:
         22:82:47:d6:af:14:e3:22:c1:3a:3b:b0:ec:73:07:02:7e:c3:
         a1:2d:89:a3:d3:08:a5:cf:2e:6f:a3:99:48:61:8c:c8:b3:eb:
         3b:e3:10:fa:6a:94:62:06:9c:84:98:a6:db:87:31:3f:d5:7f:
         a2:eb:08:12:84:06:1c:ed:b3:25:97:95:34:77:f1:fe:e8:1b:
         77:0c:ff:cc:1e:ca:48:a6:ad:2f:69:8d:88:39:39:ca:df:fe:
         40:5f:33:7f:67:cd:fa:85:60:72:db:bc:a5:4e:ef:94:ba:fa:
         15:ae:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org