Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203433363431.roa
File:                     33372e3233302e35312e302f32342d3234203d3e203433363431.roa (raw, json)
Hash identifier:          Qr4vmBaS7jD6Hbt9gBTSgm6lMgmHUtD2vBoIXoYDPGA=
Subject key identifier:   E7:BC:A5:03:D9:A0:B2:2A:46:CC:72:86:06:23:6A:3F:29:C0:E7:7F
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4435E71CE0C09E0E06488418852B82AC6B117895
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203433363431.roa
Signing time:             Fri 17 Nov 2023 14:42:03 +0000
ROA not before:           Fri 17 Nov 2023 14:37:03 +0000
ROA not after:            Fri 15 Nov 2024 14:42:03 +0000
asID:                     43641
IP address blocks:        37.230.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 06:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:35:e7:1c:e0:c0:9e:0e:06:48:84:18:85:2b:82:ac:6b:11:78:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 17 14:37:03 2023 GMT
            Not After : Nov 15 14:42:03 2024 GMT
        Subject: CN=E7BCA503D9A0B22A46CC728606236A3F29C0E77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:bd:be:d1:9d:b8:4e:07:52:92:bc:8c:3a:
                    e7:e4:21:e3:43:6e:f4:3d:eb:cc:40:8d:ea:39:82:
                    7e:62:77:68:b3:33:d3:87:e9:d3:1d:36:5b:40:2e:
                    77:37:b1:cd:cd:d8:63:03:18:76:f1:e3:59:1e:cf:
                    5a:c2:26:18:9f:b1:81:b4:66:84:44:1d:6c:88:e0:
                    2c:c6:5e:e2:5f:67:e7:80:20:51:85:bc:7f:f8:83:
                    58:37:27:f0:46:71:40:9c:07:b8:c5:e0:53:67:1b:
                    d4:d6:5f:cf:f9:99:9d:ff:94:de:e0:38:71:ea:d0:
                    77:cc:85:e1:2b:db:d9:5b:e9:5d:0f:cd:09:4e:ea:
                    18:af:81:89:7b:a9:a8:35:42:d2:ad:73:10:4b:87:
                    65:06:8d:49:6a:90:13:13:c1:04:df:22:f0:2d:90:
                    4e:a6:4b:c9:cd:2b:75:97:5e:42:42:7d:b1:48:28:
                    ff:7e:f8:ea:ab:fd:64:26:e5:3f:b4:62:f6:c7:66:
                    b1:52:8b:5c:34:f3:4c:fb:3a:21:b4:db:74:e1:e6:
                    50:f2:fd:4b:d9:a7:87:41:45:de:90:92:ed:f3:47:
                    23:9c:99:7a:b0:68:6f:97:25:68:a7:54:d5:29:85:
                    15:12:22:79:a3:1d:47:be:1e:94:e6:48:4f:be:6b:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BC:A5:03:D9:A0:B2:2A:46:CC:72:86:06:23:6A:3F:29:C0:E7:7F
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203433363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:78:f0:7e:f4:85:f7:5b:4d:74:85:d6:a3:24:e1:50:f1:8b:
         61:e9:db:7f:a3:9f:5d:56:39:86:5e:7c:22:a5:66:23:26:7f:
         35:04:2b:d1:30:a7:b5:01:62:37:bb:f5:2e:cf:8c:cd:62:0a:
         0a:af:5a:87:e2:4e:53:ce:99:1e:5e:8e:39:c2:1c:cf:19:b3:
         34:1e:b4:de:e9:e7:4a:ff:31:d7:a9:f0:b2:21:c1:f9:c8:77:
         f4:1c:d8:e3:b6:ce:1a:8e:31:d4:14:c5:56:65:de:62:c7:e5:
         4f:d4:a4:3b:84:bf:c3:d5:3f:aa:5e:c1:e2:17:5a:6b:23:4f:
         86:bc:a8:3e:02:b9:f5:96:d9:30:6f:fd:59:7c:74:47:18:ae:
         4b:55:1c:27:e7:05:c9:30:92:19:56:bd:d3:62:c4:e3:f2:28:
         06:04:bb:44:67:5a:35:1d:f1:72:55:a5:b8:f8:0a:55:a2:f4:
         cf:dc:70:28:f5:a0:30:57:7f:03:2e:be:f3:b5:5d:fe:a1:37:
         5f:e9:7c:cd:4b:f4:48:e9:14:91:b2:7b:1f:80:40:f9:90:4c:
         ad:55:07:57:bd:7a:fc:e1:10:f9:72:d4:b0:e1:36:a1:30:63:
         33:81:8c:78:8e:9b:80:3b:2a:b8:2e:17:02:10:c1:c0:65:d6:
         c0:0c:53:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org