Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          6is0W2KQjWkG+01BvoRMXh43Ep1xz3rCA0PAaE6xpoU=
Subject key identifier:   32:75:74:A6:32:5B:15:C7:1E:79:2C:98:0F:31:90:F2:73:20:B3:38
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       473FBE58C5FFDCA294E23F5BFE4FC703928D5973
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS62240.roa
Signing time:             Wed 15 Nov 2023 00:00:06 +0000
ROA not before:           Tue 14 Nov 2023 23:55:06 +0000
ROA not after:            Wed 13 Nov 2024 00:00:06 +0000
asID:                     62240
IP address blocks:        86.38.204.0/23 maxlen: 24
                          89.116.32.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3f:be:58:c5:ff:dc:a2:94:e2:3f:5b:fe:4f:c7:03:92:8d:59:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 14 23:55:06 2023 GMT
            Not After : Nov 13 00:00:06 2024 GMT
        Subject: CN=327574A6325B15C71E792C980F3190F27320B338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:02:fa:78:96:5d:ad:8a:0a:9f:65:16:a7:
                    43:07:26:0a:50:4b:90:8e:ba:fb:87:67:9f:9e:64:
                    1c:fd:c9:88:dc:e1:31:95:b1:d3:d7:d6:12:ba:99:
                    71:23:9e:26:45:9c:60:f9:6b:80:8b:ba:11:4f:b8:
                    e8:55:c4:2a:b6:85:15:83:4d:6f:34:45:b5:db:d5:
                    c7:1b:d7:54:da:9e:12:6a:5f:3b:91:93:fc:75:e0:
                    2c:b1:e4:9a:83:89:96:64:05:5e:87:6b:d1:de:79:
                    b2:29:71:17:97:81:55:45:24:6e:18:0a:6f:f9:47:
                    9f:32:16:95:ba:37:45:61:a0:70:d6:c6:f2:d7:90:
                    9b:60:75:1d:56:a0:41:66:26:1b:c1:c9:be:8d:49:
                    48:7d:6e:33:52:ba:82:39:ea:0a:5b:3e:c1:21:d9:
                    07:da:c9:3f:bf:f5:a6:ac:db:19:5d:f0:88:69:55:
                    1f:1a:1c:cd:00:1b:01:90:c3:0f:59:e0:b4:83:c8:
                    b4:77:1c:8f:35:6c:34:8e:eb:b8:38:14:ac:69:d3:
                    ef:2d:5e:36:e5:51:1e:d7:c5:09:75:3e:6c:65:ab:
                    67:0b:7c:59:6b:80:29:08:5c:98:83:8a:62:23:0f:
                    cb:da:e7:11:35:75:4f:af:6a:1e:09:5f:8e:4a:45:
                    28:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:75:74:A6:32:5B:15:C7:1E:79:2C:98:0F:31:90:F2:73:20:B3:38
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.204.0/23
                  89.116.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:28:43:9b:74:8f:1d:5a:07:68:8d:f7:6c:33:6a:66:3e:96:
         4b:14:24:00:87:03:fe:11:ee:e7:c1:40:2b:e4:f4:ec:49:7d:
         85:fa:92:6d:87:f4:94:89:8c:1c:8d:40:00:0d:8e:35:46:f1:
         4b:e3:7f:2b:42:45:39:a1:1a:4f:b2:13:7f:a0:6a:fc:2e:7e:
         1a:8c:87:48:a8:e7:a7:50:a1:e7:83:ed:e0:da:01:8e:da:a9:
         27:bc:a5:ed:39:83:fa:24:6a:f3:b0:7c:60:c5:ce:e0:e2:e0:
         c4:7c:df:d9:b3:f2:a1:76:75:46:3f:37:2b:63:d4:0a:e1:ee:
         d4:a6:38:5f:71:00:25:d0:2d:19:cf:b1:3a:96:61:ca:8b:c4:
         73:f0:b4:a9:ff:1f:11:d4:8f:2c:ba:0d:7a:18:ad:b0:1d:b8:
         11:e3:9a:dc:47:e3:41:70:cd:18:91:10:a3:2d:24:13:6c:19:
         08:c8:60:81:c7:89:4b:d4:ba:14:99:b7:40:c7:17:9d:31:8c:
         a5:70:59:7b:45:cf:b9:47:05:4b:e7:22:fd:1d:fe:ce:2e:98:
         ac:fa:83:05:dc:cc:b6:39:bb:7a:ca:b7:a8:36:9b:f4:3e:5d:
         17:63:06:46:82:8c:a5:c9:8d:36:e4:40:ef:34:5d:95:5b:33:
         02:6f:5f:b4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURz++WMX/3KKU4j9b/k/HA5KNWXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzExMTQyMzU1MDZaFw0yNDExMTMwMDAwMDZaMDMxMTAvBgNV
BAMTKDMyNzU3NEE2MzI1QjE1QzcxRTc5MkM5ODBGMzE5MEYyNzMyMEIzMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CQL6eJZdrYoKn2UWp0MHJgpQ
S5COuvuHZ5+eZBz9yYjc4TGVsdPX1hK6mXEjniZFnGD5a4CLuhFPuOhVxCq2hRWD
TW80RbXb1ccb11TanhJqXzuRk/x14Cyx5JqDiZZkBV6Ha9HeebIpcReXgVVFJG4Y
Cm/5R58yFpW6N0VhoHDWxvLXkJtgdR1WoEFmJhvByb6NSUh9bjNSuoI56gpbPsEh
2QfayT+/9aas2xld8IhpVR8aHM0AGwGQww9Z4LSDyLR3HI81bDSO67g4FKxp0+8t
XjblUR7XxQl1Pmxlq2cLfFlrgCkIXJiDimIjD8va5xE1dU+vah4JX45KRSiZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUMnV0pjJbFcceeSyYDzGQ8nMgszgwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzYyMjQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVibMAwQDWXQgMA0GCSqG
SIb3DQEBCwUAA4IBAQCTKEObdI8dWgdojfdsM2pmPpZLFCQAhwP+Ee7nwUAr5PTs
SX2F+pJth/SUiYwcjUAADY41RvFL438rQkU5oRpPshN/oGr8Ln4ajIdIqOenUKHn
g+3g2gGO2qknvKXtOYP6JGrzsHxgxc7g4uDEfN/Zs/KhdnVGPzcrY9QK4e7Upjhf
cQAl0C0Zz7E6lmHKi8Rz8LSp/x8R1I8sug16GK2wHbgR45rcR+NBcM0YkRCjLSQT
bBkIyGCBx4lL1LoUmbdAxxedMYylcFl7Rc+5RwVL5yL9Hf7OLpis+oMF3My2Obt6
yreoNpv0Pl0XYwZGgoylyY025EDvNF2VWzMCb1+0
-----END CERTIFICATE-----
Generated at Mon Nov 27 00:27:18 2023 by rpki-client on console-ams.rpki-client.org