Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59642.roa
File:                     AS59642.roa (raw, json)
Hash identifier:          YTRca+zjihEgSZErR8TtVLV5Z0ObZfnpuyzfJj65RU4=
Subject key identifier:   8E:CA:0E:E0:8F:14:F4:BD:82:31:1D:E2:04:18:C4:E3:3C:36:49:E0
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3748B049144BF10DF245E8A4787A9B6D6600692E
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59642.roa
Signing time:             Tue 14 Feb 2023 13:53:23 +0000
ROA not before:           Tue 14 Feb 2023 13:48:23 +0000
ROA not after:            Tue 13 Feb 2024 13:53:23 +0000
asID:                     59642
IP address blocks:        89.117.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:48:b0:49:14:4b:f1:0d:f2:45:e8:a4:78:7a:9b:6d:66:00:69:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Feb 14 13:48:23 2023 GMT
            Not After : Feb 13 13:53:23 2024 GMT
        Subject: CN=8ECA0EE08F14F4BD82311DE20418C4E33C3649E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6a:11:51:05:4b:36:19:fd:64:6f:2c:67:51:
                    77:62:b3:9e:87:8f:35:ed:bb:a1:83:d2:67:d8:01:
                    b7:d4:4c:d6:fe:26:59:b3:d8:21:9f:8e:25:1c:a2:
                    fd:5b:d0:37:c9:04:48:50:df:82:58:da:74:c6:3f:
                    8f:c9:37:16:0e:27:cc:a3:f2:3a:3d:ee:c9:6f:bc:
                    f2:f6:d5:ac:f8:4c:fd:b3:8e:b5:42:87:4e:b2:79:
                    3b:8e:60:ac:cd:fd:18:06:dc:ab:2f:09:64:35:8f:
                    c7:28:c3:60:6e:eb:09:bb:17:c3:dc:ec:1a:31:eb:
                    b3:a3:7d:75:a8:4c:8d:a6:35:1c:cd:aa:ea:4b:0d:
                    8c:fb:3a:a0:68:08:01:d3:4b:ac:2d:60:ad:ec:fd:
                    8b:98:ae:05:08:68:8f:93:b5:af:0a:2b:83:de:7d:
                    bf:5a:55:1b:c4:69:ac:ae:f3:05:5e:9b:9b:79:c5:
                    00:b5:55:43:84:96:66:de:dc:6b:52:95:da:55:50:
                    ed:95:9e:37:57:f7:62:47:5d:96:dc:00:1d:b6:bd:
                    a1:3b:30:07:09:16:61:4c:35:5b:d3:ff:1b:f4:62:
                    4e:2f:ec:09:f6:9f:ea:11:e0:b7:c6:f6:92:53:db:
                    e1:21:2f:49:c6:ad:08:0d:29:bf:cb:78:3d:37:3c:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CA:0E:E0:8F:14:F4:BD:82:31:1D:E2:04:18:C4:E3:3C:36:49:E0
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59642.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a4:b0:53:7d:85:89:2a:1d:ad:3b:b8:cd:c0:d0:07:b9:4f:
         f1:ff:40:5f:61:aa:96:8e:26:1b:f7:9a:3e:01:b7:c4:b8:5b:
         b6:37:b3:9f:f1:0d:6e:25:3b:99:92:be:2d:58:5b:a9:d6:54:
         77:b0:71:28:90:0d:42:6e:19:0d:f8:95:54:d6:d5:f6:94:36:
         46:5d:52:1c:b5:4c:2a:39:06:7e:bd:11:bb:e3:12:d5:0a:16:
         00:84:e7:6a:53:a9:71:95:8f:8e:04:e3:86:49:b0:fb:ee:52:
         3b:a0:9d:c7:d2:63:53:01:00:fe:fa:51:cf:e0:29:88:26:b7:
         d3:6b:c7:f9:6d:71:b8:03:15:85:23:5c:91:6a:65:72:70:47:
         da:a7:a2:41:18:aa:4b:1f:e0:73:1d:86:97:14:82:d2:5f:8e:
         87:b5:8f:cb:02:1f:17:e4:04:6a:25:80:07:1b:d1:42:a7:2a:
         58:ed:61:31:cf:cd:77:19:f7:f4:55:26:9d:30:8b:b0:43:9f:
         4b:fb:fb:83:9d:0b:ed:ed:b9:19:e4:78:91:7b:01:f0:de:b5:
         a1:36:dd:13:2e:16:6c:00:f8:5b:cd:41:c8:bc:16:c9:d8:7d:
         aa:6d:33:3a:47:ef:f0:c6:59:31:ad:d6:f4:db:2f:d2:da:02:
         12:fc:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org