Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e203233343730.roa
File:                     33372e3233302e34392e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          xTWZxvtSFYYHoT5JBdTGVTOjgJeAwI/tv8voZuO14zM=
Subject key identifier:   34:F6:AF:D4:EE:3E:2D:80:46:A9:BD:9B:4C:AF:60:7A:EF:80:9F:42
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       6C023A5ED9AB03EAF84B8ACF9B8A63BAFB33B5E4
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e203233343730.roa
Signing time:             Sat 18 Nov 2023 13:09:14 +0000
ROA not before:           Sat 18 Nov 2023 13:04:14 +0000
ROA not after:            Sat 16 Nov 2024 13:09:14 +0000
asID:                     23470
IP address blocks:        37.230.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:02:3a:5e:d9:ab:03:ea:f8:4b:8a:cf:9b:8a:63:ba:fb:33:b5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 18 13:04:14 2023 GMT
            Not After : Nov 16 13:09:14 2024 GMT
        Subject: CN=34F6AFD4EE3E2D8046A9BD9B4CAF607AEF809F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:8d:b7:7c:43:bb:6a:2a:c2:e3:3b:6a:17:
                    e9:dc:d0:69:0e:c8:d1:0b:9d:87:99:67:95:56:ae:
                    52:c0:4b:8a:76:d1:78:dd:07:98:56:c8:3c:f3:47:
                    01:b5:5a:8d:01:51:6d:51:dd:4b:62:b4:e1:ee:ed:
                    b4:2a:65:44:5d:77:a6:81:f3:0a:bd:05:e5:f6:8a:
                    8f:a4:94:7e:90:a0:92:7a:7e:fa:41:69:40:19:27:
                    c9:ca:67:10:3d:fa:12:67:7d:2a:8e:75:61:ab:a4:
                    37:ef:6a:b4:58:70:cc:89:41:f6:44:8f:97:7b:fd:
                    62:f4:28:70:1c:3e:86:0a:ed:14:d3:fc:c7:c3:f6:
                    af:57:73:5f:75:2f:50:21:53:04:43:dd:fa:88:23:
                    c1:67:12:12:e1:83:80:6c:ab:0d:65:fc:da:e0:64:
                    91:8d:4b:9e:97:8d:31:8d:6c:85:cc:55:97:f3:4b:
                    40:51:d3:ca:f8:7a:21:07:7c:80:92:26:ff:aa:5e:
                    97:f8:16:b1:ca:69:32:0b:ca:59:43:d8:b7:01:0f:
                    2c:93:6f:06:43:53:cb:d9:49:8b:85:f0:30:b5:0b:
                    b7:d7:aa:9f:90:df:6c:54:7a:c8:11:dc:20:13:33:
                    71:00:5d:70:78:f2:aa:6f:b4:81:16:33:0e:fe:1f:
                    43:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F6:AF:D4:EE:3E:2D:80:46:A9:BD:9B:4C:AF:60:7A:EF:80:9F:42
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:0f:9b:98:a2:a0:e2:66:a5:cf:ad:42:bd:28:9c:83:1d:3d:
         71:d3:8e:55:70:6c:95:97:0f:1d:6f:66:dc:d1:12:d6:34:d1:
         8d:23:4b:67:41:2f:40:da:b5:39:a8:a1:74:bc:8a:52:e2:f4:
         81:14:b5:c8:f9:c4:ed:f2:a6:83:ee:07:e1:51:16:fe:52:bf:
         4a:c2:cd:34:38:ef:28:86:00:f7:62:07:f6:d2:12:50:c0:b5:
         87:ca:62:f7:8f:7d:aa:24:0e:66:38:5f:7b:9a:4c:ce:de:0b:
         33:cd:96:d5:ec:6b:93:c1:99:93:df:f7:e7:d5:64:f2:8a:89:
         c7:2b:20:f0:e8:c8:43:6d:7a:43:fb:33:6f:e5:d3:e4:bb:e9:
         0a:5e:9f:11:e7:62:28:b4:97:a4:68:65:94:4f:27:60:15:3e:
         8f:92:b0:f4:aa:24:9e:39:d8:d2:f4:b0:15:87:6f:f8:13:a9:
         bf:fd:85:a1:07:17:a7:b4:00:83:9c:cb:a5:a7:15:9c:52:aa:
         3f:2e:b9:37:99:53:1c:9a:fb:ee:c4:a4:74:2a:db:72:37:eb:
         17:d4:28:20:d7:0f:97:48:29:75:17:17:f9:af:8f:0c:2a:5b:
         83:ad:68:6c:d2:1f:e1:41:3d:86:35:6e:e7:68:99:96:c7:28:
         d0:d6:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 00:32:52 2023 by rpki-client on console-ams.rpki-client.org