Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7411.roa
File:                     AS7411.roa (raw, json)
Hash identifier:          DtWMTDJBTo6kIopT3AaMuXDKHNcaXh29zrtyJ3VlckU=
Subject key identifier:   26:3A:C6:60:F6:65:99:80:97:E0:FB:C5:3F:D5:E0:5A:06:55:EB:87
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       37C93B2D5C100FDC79EF51AA8624CB7C6E43D334
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7411.roa
Signing time:             Tue 21 Mar 2023 12:00:41 +0000
ROA not before:           Tue 21 Mar 2023 11:55:41 +0000
ROA not after:            Tue 19 Mar 2024 12:00:41 +0000
asID:                     7411
IP address blocks:        89.117.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c9:3b:2d:5c:10:0f:dc:79:ef:51:aa:86:24:cb:7c:6e:43:d3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar 21 11:55:41 2023 GMT
            Not After : Mar 19 12:00:41 2024 GMT
        Subject: CN=263AC660F665998097E0FBC53FD5E05A0655EB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:56:d6:cf:f6:43:eb:cf:f9:76:59:1f:28:
                    ea:7f:ae:61:a1:d8:72:ce:cf:78:32:3a:12:c9:24:
                    2c:13:cc:47:13:df:7c:19:41:ab:4b:2d:1a:7c:fd:
                    10:7e:a0:f1:4e:e4:72:fc:85:1c:df:c3:7b:30:ba:
                    60:e3:a6:76:43:24:58:97:6f:35:38:5e:a0:57:47:
                    52:91:e8:5e:2f:f7:50:31:12:88:74:50:ea:57:7f:
                    65:98:a5:f7:4f:6f:1e:0e:2c:c1:df:ea:3c:01:33:
                    58:c1:bc:97:ee:e4:61:24:81:d0:8a:4e:af:1c:9f:
                    eb:a1:cd:f5:ce:bc:13:96:ff:55:a7:42:0d:44:7d:
                    f9:91:d6:d5:69:ba:47:fc:99:d6:0f:21:7e:91:ec:
                    47:82:36:bd:f4:05:84:e1:19:0b:0c:54:38:9b:0b:
                    4d:66:c7:48:93:a7:c4:45:5f:7c:14:f3:18:36:57:
                    b1:fe:ee:0a:c1:5b:8c:23:e8:ad:3d:c1:13:96:e5:
                    6f:f9:0d:ca:8d:c4:da:e9:a9:57:f9:55:bc:b6:ba:
                    2c:69:38:c3:39:8e:5c:d9:18:c2:20:98:f8:01:71:
                    48:4c:66:e4:58:4e:9f:f1:81:4b:8d:c6:79:54:f5:
                    39:eb:29:71:49:24:62:49:4a:f7:42:ea:e4:3d:c7:
                    82:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3A:C6:60:F6:65:99:80:97:E0:FB:C5:3F:D5:E0:5A:06:55:EB:87
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7411.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:fa:fb:8f:b3:de:89:15:1f:c2:31:c9:18:da:46:03:d3:49:
         79:2d:a4:02:f7:96:e6:fc:c1:9c:fd:a5:ed:8c:93:5b:4b:8e:
         97:71:b7:27:50:ce:3a:b6:bc:bd:59:0c:5e:9a:ca:6b:d2:ee:
         15:0b:58:72:b8:20:b8:2c:46:ba:dd:84:ef:39:7b:04:1e:bb:
         2d:48:81:1f:e2:1b:2d:f2:89:0c:29:09:62:e3:cf:2a:da:06:
         f2:2d:be:82:87:28:14:f6:25:1c:54:e3:d2:07:17:da:ec:72:
         37:d4:13:00:44:89:0e:d9:95:b6:28:4b:35:4e:be:45:94:9e:
         e5:8c:9b:22:74:2e:53:bd:52:d7:14:19:9f:af:3b:84:f9:75:
         8c:ae:19:c4:49:71:9e:a3:19:2e:81:de:11:3a:95:78:a1:90:
         61:2b:cf:9e:5a:83:a7:19:70:5f:91:88:f9:5e:4e:0f:74:f6:
         c9:fe:62:0c:21:3c:a5:dd:2f:6e:19:e2:7b:e9:c3:c3:ea:68:
         60:ea:03:7c:55:4d:15:55:bc:cf:15:65:bc:52:22:9a:da:ec:
         e7:67:06:24:28:2a:5a:a6:82:f6:fa:5a:41:ba:05:19:f4:66:
         c6:2a:3c:22:95:27:8a:58:b3:22:13:60:02:7a:ac:17:bb:03:
         22:a3:5d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org