Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20343030383636.roa
File:                     33372e3233302e34382e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier:          mPqJuyOOH6uOB3XBcqVCLdd5rPfofnqmCxM6Nc2vtlg=
Subject key identifier:   C1:FD:D1:CB:D0:6C:25:7F:BC:21:0C:B5:F3:6E:EB:E8:71:D1:A6:76
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       27DA42A594BC486F31FAC8BB563D3D109138658C
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20343030383636.roa
Signing time:             Mon 20 May 2024 07:13:45 +0000
ROA not before:           Mon 20 May 2024 07:08:45 +0000
ROA not after:            Mon 19 May 2025 07:13:45 +0000
asID:                     400866
IP address blocks:        37.230.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 20 Jul 2024 00:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:da:42:a5:94:bc:48:6f:31:fa:c8:bb:56:3d:3d:10:91:38:65:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: May 20 07:08:45 2024 GMT
            Not After : May 19 07:13:45 2025 GMT
        Subject: CN=C1FDD1CBD06C257FBC210CB5F36EEBE871D1A676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:5e:fe:e3:fb:4e:52:ac:c6:cd:29:c8:2b:
                    58:e8:8a:d2:d2:f0:dd:3e:88:57:76:2d:0c:e5:39:
                    c3:79:bf:4d:1d:26:85:5b:a9:13:35:1c:1f:01:b3:
                    98:a8:b8:9d:f0:46:51:a7:af:5a:fb:3f:92:bb:80:
                    d2:e6:5f:10:82:3e:9e:22:c3:43:1e:80:d6:5f:3f:
                    a6:a9:9e:60:04:18:79:b6:9f:ac:3a:34:dd:6c:80:
                    b3:4e:39:2e:14:34:37:fc:c4:2f:08:16:12:b2:5a:
                    cf:45:88:07:a6:3d:22:c5:1d:dc:a9:1d:eb:ef:35:
                    9e:6b:c2:58:93:cf:5f:ff:7c:70:a6:63:7e:fb:9a:
                    e7:a3:31:dd:68:69:2a:07:20:25:4f:ab:5e:86:c5:
                    6f:ad:09:d3:64:64:d1:d4:6d:59:a2:7f:0f:13:a5:
                    e0:7d:d9:8b:e9:27:13:f4:77:fd:32:6f:61:73:2c:
                    70:f6:7f:c8:f1:82:86:ad:cb:a4:51:84:e4:02:7d:
                    21:b7:0c:cd:4d:ee:cf:98:07:6b:86:9d:5c:5e:3e:
                    c4:2c:3e:34:16:1b:60:86:8e:ec:2b:8c:58:a9:f3:
                    bd:db:e1:be:16:b7:fb:7a:c7:9e:18:4c:80:6d:ea:
                    25:6b:c5:cb:a0:23:a8:c4:73:d2:34:0c:8e:4f:b5:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FD:D1:CB:D0:6C:25:7F:BC:21:0C:B5:F3:6E:EB:E8:71:D1:A6:76
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20343030383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:b4:e1:44:9e:69:cf:8f:02:f0:df:09:dd:f5:48:36:6f:7e:
         5f:9f:51:e3:16:2a:49:12:5f:21:b1:a0:ba:e6:e2:14:55:2b:
         c6:c0:50:30:33:3c:11:fb:60:8e:3f:27:0f:46:98:4a:10:99:
         e7:52:3e:59:72:22:95:64:02:5b:c8:e7:74:a8:b8:21:c4:9d:
         16:00:db:b1:a1:9e:6a:8d:44:5e:6d:51:e4:fe:98:1f:4a:1b:
         5c:c2:23:2f:8d:cd:d1:a3:ee:12:6c:b4:dc:d6:ba:af:2d:18:
         3b:70:10:20:34:ce:85:2a:c6:9e:a3:f3:a9:9a:a3:55:e9:11:
         95:be:f0:12:9f:be:76:4e:b6:10:df:dc:6f:71:c7:19:f6:2a:
         0d:b2:c6:54:10:e7:a1:81:a3:8a:aa:26:cf:a1:ae:8b:3f:9e:
         5e:db:88:59:89:5a:fa:03:f1:48:5f:be:d2:dd:21:82:95:1d:
         4f:2b:8f:2d:27:13:55:e1:f7:12:1b:de:3d:e0:19:eb:e8:50:
         18:32:51:3e:2e:d0:d9:9a:2b:b8:42:61:fc:05:2f:43:9d:34:
         6e:bc:9f:e0:ae:d2:7d:c8:39:a3:7e:09:f4:03:ee:e0:df:ce:
         46:21:c7:fb:80:8a:85:d1:84:9b:c4:a9:50:b3:25:fe:90:8d:
         26:aa:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----