Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20383334.roa
File:                     37372e37352e3139332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          xk9qmwnpsCT1C4XKOQzGZB4kALYPixgdhYwyyVRIU4w=
Subject key identifier:   66:B6:1A:49:89:55:E7:53:9A:8A:8B:EB:3F:61:03:17:F7:9C:33:E8
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       3B7C6B262E0379D5F34DCF712CC7767E9871E98A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20383334.roa
Signing time:             Sat 04 May 2024 00:01:41 +0000
ROA not before:           Fri 03 May 2024 23:56:41 +0000
ROA not after:            Sat 03 May 2025 00:01:41 +0000
asID:                     834
IP address blocks:        77.75.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 20 May 2024 07:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7c:6b:26:2e:03:79:d5:f3:4d:cf:71:2c:c7:76:7e:98:71:e9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: May  3 23:56:41 2024 GMT
            Not After : May  3 00:01:41 2025 GMT
        Subject: CN=66B61A498955E7539A8A8BEB3F610317F79C33E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:b5:c6:3c:fa:fd:fc:82:a3:ee:68:42:a5:
                    c6:7e:84:7a:13:df:68:49:3c:63:e4:ce:6f:41:47:
                    64:6a:6a:25:8e:12:3e:1c:af:ac:b2:c7:ae:ba:4b:
                    54:6f:bc:2c:35:e2:08:9b:72:ff:74:45:1e:c9:41:
                    e1:e2:29:6e:44:82:bd:f0:06:fc:85:11:cd:c6:08:
                    23:24:5d:7f:d3:25:aa:90:6b:7b:cd:eb:71:26:c5:
                    50:94:67:d9:95:0b:61:a0:e6:3a:c7:8f:63:76:28:
                    cf:57:d5:27:1a:f5:9a:a4:44:0b:00:68:3e:cb:7e:
                    62:ac:e1:16:79:ee:c5:57:1f:c6:6a:0f:91:b6:80:
                    60:90:44:9c:55:42:77:38:a6:c6:26:bc:62:78:f3:
                    83:1a:73:2e:0a:af:ac:9c:ce:1a:ca:31:f5:14:47:
                    05:d4:fa:07:0d:1c:5d:5d:61:b1:4a:66:1a:79:69:
                    29:f2:2b:4c:26:68:18:8f:a8:ff:25:d5:97:60:b5:
                    2a:21:bd:b0:54:72:60:bd:0c:00:75:80:e9:99:5c:
                    cf:1f:f0:ac:c9:0b:e0:67:85:47:6e:19:89:23:01:
                    a3:19:88:e5:44:36:b0:b8:da:0a:65:72:bd:4f:91:
                    de:32:57:1f:a1:76:03:a1:47:99:1e:f9:5b:4b:83:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B6:1A:49:89:55:E7:53:9A:8A:8B:EB:3F:61:03:17:F7:9C:33:E8
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a8:90:ea:00:08:ca:fe:ea:05:bd:d1:d4:1c:c5:44:21:ad:
         34:7b:90:e5:3f:46:5b:25:75:32:a4:85:4e:e4:61:a0:7f:2c:
         fd:2d:1f:c7:97:26:47:b2:dc:1b:34:23:e8:23:63:8e:f6:b5:
         b1:41:f2:04:c5:ae:a4:b9:5d:a0:60:5f:ee:c2:7c:78:09:06:
         3b:ef:d4:ae:f4:20:08:86:cf:83:a7:e6:8c:42:e3:c5:5d:29:
         3d:ff:b0:c8:8d:1e:9b:1f:9e:14:54:98:04:b5:67:d8:1d:8a:
         90:40:11:ed:34:3c:dd:ba:87:60:77:8f:c1:c7:4d:cf:f2:f7:
         b9:72:fb:de:5f:52:a9:68:e9:0f:89:71:b3:d4:74:95:cd:d1:
         fd:0b:f5:60:db:46:f1:1e:91:27:ae:e3:d9:f9:d3:34:1c:dd:
         09:5d:30:cb:9c:b1:c0:a0:8c:83:c2:44:fd:f7:46:44:c9:d0:
         d2:76:c9:76:92:d3:38:ff:fc:64:a3:d7:1d:ce:56:35:fa:b1:
         d5:9f:d3:3a:c3:fb:03:33:8c:5a:0d:c7:d0:71:e5:d6:48:ba:
         89:a8:bc:e8:cc:6c:6a:f2:ce:43:fd:a0:0e:02:d2:42:76:7f:
         41:9d:d0:ff:72:f7:20:bc:83:b3:8e:e5:c1:f5:17:bc:62:6a:
         ad:26:ee:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 07:54:34 2024 by rpki-client on console-fra.rpki-client.org