Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3234203d3e20383334.roa
File:                     33372e3233302e35362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          wd5n9BQwPHfLWG0ZqWu9k1LpmS2INpGwXgXvnk2sMxs=
Subject key identifier:   99:7E:27:75:C7:03:4A:A6:14:DD:F9:A6:A8:C3:2F:4F:73:0A:F7:9D
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       757FED3B6C02F25C5DB8D2A2539B9BDE937F294F
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3234203d3e20383334.roa
Signing time:             Sun 31 Mar 2024 00:03:25 +0000
ROA not before:           Sat 30 Mar 2024 23:58:25 +0000
ROA not after:            Sun 30 Mar 2025 00:03:25 +0000
asID:                     834
IP address blocks:        37.230.56.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 17:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7f:ed:3b:6c:02:f2:5c:5d:b8:d2:a2:53:9b:9b:de:93:7f:29:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Mar 30 23:58:25 2024 GMT
            Not After : Mar 30 00:03:25 2025 GMT
        Subject: CN=997E2775C7034AA614DDF9A6A8C32F4F730AF79D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:4f:c3:ad:6d:78:fb:aa:2d:e2:c3:b6:17:
                    2c:58:c7:e7:e1:51:85:1d:ba:8a:ca:29:54:c9:89:
                    3e:d1:7f:2b:ce:1b:d6:e8:fe:50:fe:31:b5:61:af:
                    0a:78:9e:cc:7d:68:75:5d:25:c4:00:30:3e:cd:d9:
                    46:64:50:aa:c6:dd:b4:01:f4:ef:84:34:fd:ca:c8:
                    47:e5:60:b5:0f:74:a1:f5:07:33:54:1c:c9:77:2a:
                    b1:64:e4:9c:86:12:4e:99:17:17:09:49:04:6d:84:
                    e3:ce:e4:7b:23:bd:35:ec:f3:1c:6f:94:05:d5:de:
                    f3:2d:40:30:54:fb:9a:4f:cf:a7:64:f3:2e:0f:59:
                    cb:aa:35:2c:60:99:0a:7a:ff:db:4f:1b:84:24:f0:
                    c9:96:2b:96:34:68:e8:68:15:30:0e:e9:be:21:1d:
                    40:97:7d:e2:a0:4e:9c:12:ff:4f:36:4f:08:7d:80:
                    5a:9b:fc:6d:f4:e8:0d:46:e3:94:67:ee:ca:9d:aa:
                    77:65:be:60:27:73:e3:f8:9c:9d:bf:04:68:fc:9f:
                    29:a3:62:e3:2d:f7:6f:f7:ad:9f:93:2a:a0:ad:1d:
                    23:2f:de:a2:9d:d7:ff:f7:ad:d8:ba:23:1d:cb:4e:
                    10:bc:e0:e0:61:e7:e0:25:55:bd:71:5c:ab:a6:46:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7E:27:75:C7:03:4A:A6:14:DD:F9:A6:A8:C3:2F:4F:73:0A:F7:9D
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:21:93:69:0c:1e:3c:33:3d:4f:54:86:01:a2:51:fe:fd:23:
         09:d2:e4:62:a9:b1:b7:d0:b8:56:bb:c3:48:8c:fa:5f:04:69:
         9f:01:70:9b:c4:e2:c8:ce:93:cb:2d:fe:d3:50:c6:18:b9:47:
         58:38:aa:57:33:72:03:14:08:f3:0e:88:60:f7:56:af:48:09:
         d2:7a:9b:66:26:a2:9d:9a:01:b5:9a:80:7d:a9:83:3e:34:7f:
         2f:b2:90:23:ed:68:f2:fb:f8:44:43:e2:88:24:97:74:13:6b:
         ee:89:d5:a8:25:f4:c9:0f:a0:07:b9:dd:dd:5a:57:55:d2:4e:
         7d:2e:c9:a9:f6:f0:8f:a6:5a:c4:0f:b1:ed:c8:21:39:c3:41:
         3d:c7:09:65:fe:fa:0e:03:e7:3d:69:93:16:01:bd:b9:54:fc:
         2b:f4:39:e5:e9:ee:ce:63:7c:31:42:ea:61:c3:ad:e4:7c:61:
         d2:4e:04:8b:3b:01:3f:f1:30:83:1d:4c:c7:8c:6b:b2:ce:13:
         75:41:eb:82:3a:dd:d1:bc:61:df:ce:52:3d:2d:01:1b:39:8a:
         0d:fc:dc:6f:76:76:57:d0:2b:0f:06:a7:04:7a:4e:34:b9:01:
         ae:86:10:2d:db:12:65:68:40:21:3b:7d:c2:35:04:8b:2a:c3:
         d1:db:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 22:26:57 2024 by rpki-client on console-ams.rpki-client.org