Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32332d3234203d3e20383334.roa
File:                     33372e3233302e34382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          24/qzVzM21nVSZUAU+KnZqw+6N8AH01ARYpoT9ttk40=
Subject key identifier:   8D:9F:54:C4:22:41:BA:F7:4D:8A:58:FE:88:B4:08:58:8B:ED:AF:BF
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       69496967A4A796A4B434C0A8031E59EFE1031D5C
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32332d3234203d3e20383334.roa
Signing time:             Sun 17 Mar 2024 00:02:31 +0000
ROA not before:           Sat 16 Mar 2024 23:57:31 +0000
ROA not after:            Sun 16 Mar 2025 00:02:31 +0000
asID:                     834
IP address blocks:        37.230.48.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 07:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:49:69:67:a4:a7:96:a4:b4:34:c0:a8:03:1e:59:ef:e1:03:1d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Mar 16 23:57:31 2024 GMT
            Not After : Mar 16 00:02:31 2025 GMT
        Subject: CN=8D9F54C42241BAF74D8A58FE88B408588BEDAFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:cc:97:16:69:2c:07:d1:9c:5e:58:b0:fc:
                    fd:1c:43:73:60:09:4a:49:81:73:03:6a:45:b5:d8:
                    99:75:70:7f:53:eb:92:2a:c5:21:49:31:4c:81:7f:
                    58:58:9e:28:24:5f:2d:1e:03:a4:5a:f1:9a:c2:13:
                    7d:36:30:7f:1c:7d:06:bd:e1:17:d5:d2:dc:80:7d:
                    ff:3b:35:b1:36:a6:03:00:da:05:e6:9f:f5:ee:ec:
                    67:c7:f0:44:f3:82:4c:a4:49:cd:3d:e9:27:4f:a5:
                    46:7e:ac:7c:c7:a4:b4:4a:df:8c:01:a0:58:bd:15:
                    55:6d:db:91:45:e3:b9:d4:98:b3:24:47:ff:e1:52:
                    5d:26:c2:42:e8:9c:cb:a8:b7:37:18:96:4d:f9:49:
                    c4:74:0f:a6:ee:b1:a4:9b:cf:6b:56:79:63:92:d0:
                    86:0c:f8:88:71:68:a0:13:a4:8c:58:bc:ad:d6:fc:
                    47:15:ab:6a:bc:83:fb:36:75:39:e2:88:ed:ed:f6:
                    55:09:47:2d:11:3e:c2:d8:f6:17:f0:74:f3:a9:05:
                    5a:1e:a3:96:99:1c:71:33:2b:f0:db:21:5c:ff:81:
                    2a:e0:a4:42:16:e1:3d:fe:b5:15:cd:48:25:01:c3:
                    2b:d4:19:57:bf:9f:8f:ab:2d:39:4d:e0:13:e5:f6:
                    ae:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9F:54:C4:22:41:BA:F7:4D:8A:58:FE:88:B4:08:58:8B:ED:AF:BF
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:60:a0:37:06:81:d0:ab:32:ac:7e:f9:0b:3d:81:ff:f7:f4:
         6b:24:8f:73:82:77:85:23:01:27:82:cf:f0:33:33:ff:32:db:
         44:8d:2b:80:e4:c7:67:7e:1a:68:00:92:25:82:a0:91:d4:0a:
         e5:1e:4c:3d:65:7a:c1:6d:c8:03:33:e5:af:41:d8:28:02:3f:
         d4:ab:53:73:27:da:93:e5:94:1a:7c:98:c6:b8:f2:67:1a:c7:
         24:d4:6f:a8:73:5b:82:59:0b:86:61:02:ea:60:3a:a6:98:97:
         a3:61:f9:71:36:7a:f4:f2:14:da:99:d5:ee:8d:6a:f2:13:ca:
         15:19:68:d4:e8:54:04:de:6b:fc:c4:17:92:93:1e:2d:91:f5:
         91:6a:ae:0a:83:9e:da:cd:70:87:f4:8c:75:2a:8e:27:75:b6:
         a0:04:0b:80:03:ef:e3:12:d2:f7:2b:d6:e7:77:d2:95:8f:8a:
         28:ef:8c:d9:ad:68:fa:1f:e9:54:09:ec:33:35:2a:7b:03:52:
         36:fd:75:a6:b3:ed:27:ec:e9:fb:32:55:3f:63:93:d7:b4:4d:
         3f:8a:06:34:60:67:51:d8:05:dc:0e:1c:3a:fd:da:3d:40:c5:
         cf:e2:2c:fd:00:51:11:48:1b:51:da:fa:e9:3d:b6:f5:4a:44:
         3d:fc:71:37
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUaUlpZ6SnlqS0NMCoAx5Z7+EDHVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDAzMTYyMzU3MzFaFw0yNTAzMTYwMDAyMzFaMDMxMTAvBgNV
BAMTKDhEOUY1NEM0MjI0MUJBRjc0RDhBNThGRTg4QjQwODU4OEJFREFGQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgbsyXFmksB9GcXliw/P0cQ3Ng
CUpJgXMDakW12Jl1cH9T65IqxSFJMUyBf1hYnigkXy0eA6Ra8ZrCE302MH8cfQa9
4RfV0tyAff87NbE2pgMA2gXmn/Xu7GfH8ETzgkykSc096SdPpUZ+rHzHpLRK34wB
oFi9FVVt25FF47nUmLMkR//hUl0mwkLonMuotzcYlk35ScR0D6busaSbz2tWeWOS
0IYM+IhxaKATpIxYvK3W/EcVq2q8g/s2dTniiO3t9lUJRy0RPsLY9hfwdPOpBVoe
o5aZHHEzK/DbIVz/gSrgpEIW4T3+tRXNSCUBwyvUGVe/n4+rLTlN4BPl9q6/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUjZ9UxCJBuvdNilj+iLQIWIvtr78wHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzIzMzMwMmUzNDM4MmUzMDJmMzIzMzJk
MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJeYwMA0GCSqGSIb3DQEBCwUA
A4IBAQB+YKA3BoHQqzKsfvkLPYH/9/RrJI9zgneFIwEngs/wMzP/MttEjSuA5Mdn
fhpoAJIlgqCR1ArlHkw9ZXrBbcgDM+WvQdgoAj/Uq1NzJ9qT5ZQafJjGuPJnGsck
1G+oc1uCWQuGYQLqYDqmmJejYflxNnr08hTamdXujWryE8oVGWjU6FQE3mv8xBeS
kx4tkfWRaq4Kg57azXCH9Ix1Ko4ndbagBAuAA+/jEtL3K9bnd9KVj4oo74zZrWj6
H+lUCewzNSp7A1I2/XWms+0n7On7MlU/Y5PXtE0/igY0YGdR2AXcDhw6/do9QMXP
4iz9AFERSBtR2vrpPbb1SkQ9/HE3
-----END CERTIFICATE-----