Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3232203d3e20323730303532.roa
File:                     33372e3233302e35362e302f32322d3232203d3e20323730303532.roa (raw, json)
Hash identifier:          +aII207uzotfnoGbrBPRCVpFti+hZeIlBPwotm2+IQk=
Subject key identifier:   D1:8E:E6:F0:29:44:67:9A:75:4F:43:2A:FD:33:C7:9D:87:7C:70:27
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       794A9B64837003E01441B344524906000C1BBCEC
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3232203d3e20323730303532.roa
Signing time:             Thu 18 Apr 2024 17:45:12 +0000
ROA not before:           Thu 18 Apr 2024 17:40:12 +0000
ROA not after:            Thu 17 Apr 2025 17:45:12 +0000
asID:                     270052
IP address blocks:        37.230.56.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 12:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4a:9b:64:83:70:03:e0:14:41:b3:44:52:49:06:00:0c:1b:bc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr 18 17:40:12 2024 GMT
            Not After : Apr 17 17:45:12 2025 GMT
        Subject: CN=D18EE6F02944679A754F432AFD33C79D877C7027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:b2:e7:47:c5:e4:bc:5a:b7:12:1b:14:38:
                    e1:b4:6d:1c:5c:7b:84:3b:26:68:f9:74:1c:4a:fa:
                    ef:27:d3:94:cb:cd:ed:79:c1:24:3b:00:34:f1:f2:
                    3b:f7:37:5a:fa:8d:db:35:f7:17:fb:57:cb:82:2e:
                    6e:21:5a:c0:94:77:f9:8b:97:73:ae:f1:c2:b7:22:
                    06:e2:c1:f3:6c:66:8c:86:c3:44:2a:13:2e:40:32:
                    c8:25:10:67:55:24:48:c9:1a:b1:e9:ea:60:d3:98:
                    ff:62:56:a0:1c:0b:9a:2c:bf:f7:16:47:66:eb:99:
                    3b:c3:45:f5:27:95:e6:36:ec:f5:bb:06:bf:59:95:
                    d3:98:9b:c1:c8:94:cd:a5:12:1c:10:22:a9:0f:4b:
                    60:dc:9a:5a:1b:88:26:0d:5d:4e:36:16:52:7c:8f:
                    74:8c:1f:cf:c1:51:29:29:4e:b1:7c:e5:bb:28:01:
                    c9:0b:e6:cf:29:ab:0a:b1:a8:ee:b1:b6:da:06:58:
                    30:d9:f5:71:6f:b3:43:a1:94:39:02:d5:09:db:73:
                    38:a0:b0:19:48:d5:a2:03:c7:94:77:98:0a:24:89:
                    64:be:dd:25:90:24:02:d1:c3:0f:e3:7e:3d:f4:4a:
                    85:f2:a8:79:95:35:51:45:0d:df:61:c1:52:de:64:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8E:E6:F0:29:44:67:9A:75:4F:43:2A:FD:33:C7:9D:87:7C:70:27
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3232203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:a0:5d:00:c8:7f:0f:9a:2c:f4:b0:ba:58:90:64:a8:5e:
         aa:e5:fe:7e:20:c8:e8:48:ba:a6:2b:93:fc:f3:68:09:5d:34:
         07:42:43:0b:ab:d1:eb:f3:3e:f8:ce:98:ec:b9:11:dc:29:f3:
         df:6e:ee:b7:3e:96:f6:4a:d6:ef:0b:68:6e:93:be:6b:f7:39:
         26:02:8b:42:34:b1:96:5a:8d:eb:76:6e:c0:ee:b8:64:c1:db:
         12:7e:a3:85:34:f3:db:be:37:20:43:11:96:53:ba:d6:70:15:
         4c:ef:41:b9:41:9f:1d:ae:fe:dc:2d:93:a4:da:e6:e7:c1:61:
         82:62:0b:3e:1c:73:7a:f0:1a:ce:1f:9f:13:d5:ae:ba:f0:01:
         fe:cd:85:17:7c:3c:f7:c5:8c:a8:87:7b:de:d2:5d:46:b8:ec:
         6a:55:6e:eb:d2:50:62:17:2c:a8:40:89:63:b7:37:a3:15:98:
         00:46:4b:78:af:84:c8:00:7f:33:2a:cb:57:51:8d:58:60:85:
         fb:4d:c8:97:6f:53:63:0e:43:4e:a3:28:fb:32:74:4e:18:37:
         f3:6d:e5:69:c6:8a:a0:1f:ba:ac:25:9f:a7:2b:e1:70:c7:00:
         90:84:ad:d8:19:65:5d:35:62:ed:4e:ff:07:e0:9a:7c:f0:ae:
         24:02:f7:ed
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUeUqbZINwA+AUQbNEUkkGAAwbvOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDA0MTgxNzQwMTJaFw0yNTA0MTcxNzQ1MTJaMDMxMTAvBgNV
BAMTKEQxOEVFNkYwMjk0NDY3OUE3NTRGNDMyQUZEMzNDNzlEODc3QzcwMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RrLnR8XkvFq3EhsUOOG0bRxc
e4Q7Jmj5dBxK+u8n05TLze15wSQ7ADTx8jv3N1r6jds19xf7V8uCLm4hWsCUd/mL
l3Ou8cK3IgbiwfNsZoyGw0QqEy5AMsglEGdVJEjJGrHp6mDTmP9iVqAcC5osv/cW
R2brmTvDRfUnleY27PW7Br9ZldOYm8HIlM2lEhwQIqkPS2DcmlobiCYNXU42FlJ8
j3SMH8/BUSkpTrF85bsoAckL5s8pqwqxqO6xttoGWDDZ9XFvs0OhlDkC1Qnbczig
sBlI1aIDx5R3mAokiWS+3SWQJALRww/jfj30SoXyqHmVNVFFDd9hwVLeZKslAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQU0Y7m8ClEZ5p1T0Mq/TPHnYd8cCcwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzNjJlMzAyZjMyMzIy
ZDMyMzIyMDNkM2UyMDMyMzczMDMwMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiXmODANBgkqhkiG
9w0BAQsFAAOCAQEAOpmgXQDIfw+aLPSwuliQZKhequX+fiDI6Ei6piuT/PNoCV00
B0JDC6vR6/M++M6Y7LkR3Cnz327utz6W9krW7wtobpO+a/c5JgKLQjSxllqN63Zu
wO64ZMHbEn6jhTTz2743IEMRllO61nAVTO9BuUGfHa7+3C2TpNrm58FhgmILPhxz
evAazh+fE9WuuvAB/s2FF3w898WMqId73tJdRrjsalVu69JQYhcsqECJY7c3oxWY
AEZLeK+EyAB/MyrLV1GNWGCF+03Il29TYw5DTqMo+zJ0Thg3823lacaKoB+6rCWf
pyvhcMcAkISt2BllXTVi7U7/B+CafPCuJAL37Q==
-----END CERTIFICATE-----