Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32312d3231203d3e20383334.roa
File:                     33372e3233302e34382e302f32312d3231203d3e20383334.roa (raw, json)
Hash identifier:          XlaXbnHvjcNKXoE+LNXOldugF4+LylKsHWYDBqwJQvc=
Subject key identifier:   B0:45:4F:57:89:13:8C:F8:04:5A:47:4A:A2:6C:75:40:6E:20:74:31
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       22B95E1F3E356F3FD225072EBEB0D2B180CCC3DB
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32312d3231203d3e20383334.roa
Signing time:             Tue 07 Nov 2023 11:42:48 +0000
ROA not before:           Tue 07 Nov 2023 11:37:48 +0000
ROA not after:            Tue 05 Nov 2024 11:42:48 +0000
asID:                     834
IP address blocks:        37.230.48.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b9:5e:1f:3e:35:6f:3f:d2:25:07:2e:be:b0:d2:b1:80:cc:c3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov  7 11:37:48 2023 GMT
            Not After : Nov  5 11:42:48 2024 GMT
        Subject: CN=B0454F5789138CF8045A474AA26C75406E207431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:d0:5f:6f:9e:70:f6:06:01:5d:c5:ef:5d:
                    92:2b:6e:d7:c6:e1:39:77:32:e5:a3:15:1c:d6:27:
                    53:d6:34:67:22:d6:c3:a1:0d:e5:c7:ec:c4:27:50:
                    ce:c5:15:c2:0a:c3:57:d7:45:b8:15:6e:0e:50:cd:
                    72:7c:d5:b0:38:97:c0:ad:ae:c5:9c:00:19:e5:e6:
                    e5:84:a9:82:df:a3:7b:2a:db:b9:89:0c:cd:ef:68:
                    51:e1:2b:52:d7:ca:d4:b6:ed:8e:1d:e9:7c:a9:84:
                    9b:60:d8:2e:25:92:45:e2:a9:09:31:bb:ba:16:74:
                    43:c9:ae:6e:76:4b:b3:d2:df:ce:a5:06:4c:1e:19:
                    9a:6c:d0:9b:77:7f:f0:4b:ad:5b:99:9c:9e:4a:93:
                    95:ed:c9:46:70:7a:50:c0:94:40:be:c2:84:ea:14:
                    d9:07:aa:0f:e7:e1:0a:8b:ef:98:7c:66:74:32:23:
                    e4:0c:99:d3:c4:94:8a:b9:0c:a9:a6:43:fa:eb:c0:
                    a0:7a:7d:42:30:03:51:64:b9:0e:75:c8:8a:9f:5f:
                    da:ea:d2:b7:73:9d:a5:a4:0c:c2:58:3e:a5:36:be:
                    5c:8b:32:77:6b:7b:25:bb:1a:7c:61:fa:6b:d8:ac:
                    90:78:25:18:47:e9:57:dd:66:78:8e:2b:4c:c4:cf:
                    fe:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:45:4F:57:89:13:8C:F8:04:5A:47:4A:A2:6C:75:40:6E:20:74:31
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32312d3231203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:c7:ba:e6:00:d5:47:08:22:67:67:a7:e1:6b:cd:17:2c:
         db:c8:3f:31:c9:c6:9f:c5:9d:a8:11:24:8f:2f:0d:9b:27:39:
         d9:c2:d5:05:a0:cf:54:de:5d:0b:97:94:c9:0f:e8:47:a0:2a:
         52:98:bb:9a:8f:a6:56:30:ce:e4:0b:28:45:0e:12:ba:28:f9:
         2d:4b:4e:cc:28:10:ef:98:a4:cb:b6:49:97:1f:c4:63:50:73:
         be:ba:08:99:81:c3:5b:0c:13:57:68:09:cb:cf:dc:20:72:49:
         78:11:99:65:b9:21:c9:4d:8b:05:a8:38:e2:0c:79:a0:07:e5:
         0c:09:42:63:87:d8:b6:19:91:82:c1:74:48:4a:ce:2a:0d:50:
         f4:71:b5:aa:09:10:31:05:0c:90:f1:a3:67:0c:47:00:f6:c3:
         df:fc:a8:79:57:0c:47:f5:e7:1f:d4:51:f2:15:a8:2a:83:53:
         25:c9:c8:3b:81:fd:fc:e2:af:94:bc:2f:c1:a3:e7:04:7f:3a:
         03:39:7f:3b:af:58:ff:24:d6:bf:b1:da:ca:5b:1b:7b:cc:62:
         ec:2d:0f:f7:db:fe:57:d3:98:22:52:80:d7:20:f5:82:08:40:
         f8:81:df:9f:39:1a:f9:57:58:d1:03:cc:68:5c:fa:80:d4:24:
         b7:bb:be:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----