Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203539383935.roa
File:                     33372e3233302e34382e302f32342d3234203d3e203539383935.roa (raw, json)
Hash identifier:          DPnZCLzWQyg/oPdr8ENzfpX0lnrG2dhXnTfbIhzwbj0=
Subject key identifier:   80:E3:AE:F4:97:51:44:18:AE:B1:0F:36:C2:EC:A6:34:3C:DE:DD:CD
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       3B2F66D703C057FDBABAE0D47F61AC694B3E2936
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203539383935.roa
Signing time:             Wed 17 Jan 2024 18:51:49 +0000
ROA not before:           Wed 17 Jan 2024 18:46:49 +0000
ROA not after:            Wed 15 Jan 2025 18:51:49 +0000
asID:                     59895
IP address blocks:        37.230.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 17 Mar 2024 00:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2f:66:d7:03:c0:57:fd:ba:ba:e0:d4:7f:61:ac:69:4b:3e:29:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jan 17 18:46:49 2024 GMT
            Not After : Jan 15 18:51:49 2025 GMT
        Subject: CN=80E3AEF497514418AEB10F36C2ECA6343CDEDDCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:33:b0:68:25:fc:d0:20:b6:87:7a:a2:6f:39:
                    24:8f:16:8d:f1:90:f1:b5:44:89:4f:3a:d6:1c:56:
                    ef:c6:2f:36:8b:13:35:a5:4a:26:b5:c5:29:eb:b2:
                    a5:31:f7:9c:4e:29:bb:3d:cc:9e:ef:3f:2c:e8:02:
                    fa:9f:b9:2d:05:b4:21:56:4c:89:82:8d:21:75:e5:
                    f6:d8:52:d3:fb:f0:9b:cb:c4:a5:26:1b:d2:9b:70:
                    96:f0:2b:49:43:93:d4:ed:37:de:16:24:d0:92:d8:
                    3c:5e:5e:b1:07:41:64:1a:fc:b1:89:3c:d6:52:80:
                    2d:09:89:48:df:ad:26:b1:3d:af:48:71:ec:83:22:
                    ef:bc:d7:77:ac:d2:cb:ac:74:7a:c8:f6:88:d8:b4:
                    ea:b6:c8:83:0a:19:5f:48:b6:12:54:e6:81:32:29:
                    f4:72:67:82:4f:7b:bb:63:b1:1d:5b:bd:49:3a:61:
                    43:0b:96:02:dd:61:d2:cd:8f:5b:3c:70:b4:c4:c2:
                    9a:2b:88:15:9c:30:34:dd:e1:35:b4:99:a3:3e:ed:
                    aa:bf:e6:8c:9d:01:b0:89:72:98:ac:c8:cf:95:de:
                    33:97:3f:36:b0:c2:29:90:f5:b8:d3:9c:da:95:df:
                    26:c0:b6:9a:b5:b0:9d:41:73:81:94:63:47:e5:ea:
                    67:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E3:AE:F4:97:51:44:18:AE:B1:0F:36:C2:EC:A6:34:3C:DE:DD:CD
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203539383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:15:8e:d0:40:31:b6:a8:93:a3:bf:d4:d4:46:4a:4d:3e:bb:
         f8:3a:ca:9f:f2:56:e2:6b:32:77:cc:06:51:c0:f2:67:0e:91:
         42:9f:80:48:3c:d0:94:9b:63:48:3b:d3:1b:85:8f:9b:e2:43:
         30:3c:3a:f6:91:aa:24:ab:3d:23:18:3d:dd:01:e0:a1:35:ce:
         30:72:b1:ca:27:ab:46:21:1d:e6:95:2d:13:e2:6d:a6:56:fb:
         74:df:1b:17:d0:ab:4a:a0:6b:83:5d:9d:62:b4:60:82:52:df:
         56:b2:83:49:e4:54:2b:0a:3e:68:ac:86:ec:ca:e0:86:b0:6b:
         24:9a:6e:52:ae:c9:2d:1b:50:42:b2:bd:6a:6a:1b:62:e6:43:
         39:2c:b9:11:ee:b9:30:35:24:44:dd:06:09:dd:14:c6:74:d8:
         25:74:5e:21:42:59:86:f7:c0:e8:b2:b5:11:62:64:fe:b9:d8:
         3a:74:e1:2d:81:b7:5d:6b:4e:6f:44:49:c3:96:da:1a:93:1c:
         ea:d7:14:02:a8:6b:b6:d1:9f:e9:80:ed:9c:d9:7c:49:45:2b:
         26:9d:e1:bc:64:b3:9f:8d:b0:5d:0d:d5:7f:6c:59:72:fd:87:
         30:26:f2:96:48:30:57:cf:24:1c:fc:38:e4:8c:24:62:23:48:
         25:f4:27:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 02:05:17 2024 by rpki-client on console-ams.rpki-client.org