Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35372e302f32342d3234203d3e2033333230.roa
File:                     33372e3233302e35372e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier:          jxSzdEV7RA32IssD9U6PvrEjBmAyNuN9AwS+WIhf0aY=
Subject key identifier:   62:B8:DE:B5:DF:39:F7:F8:4F:DF:9E:AE:85:EA:84:00:F7:D8:17:E9
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4010F0DA519D9978F520C3F6AC2D37C1BCF3623E
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35372e302f32342d3234203d3e2033333230.roa
Signing time:             Tue 28 Nov 2023 23:11:12 +0000
ROA not before:           Tue 28 Nov 2023 23:06:12 +0000
ROA not after:            Tue 26 Nov 2024 23:11:12 +0000
asID:                     3320
IP address blocks:        37.230.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 28 Jan 2024 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:10:f0:da:51:9d:99:78:f5:20:c3:f6:ac:2d:37:c1:bc:f3:62:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 28 23:06:12 2023 GMT
            Not After : Nov 26 23:11:12 2024 GMT
        Subject: CN=62B8DEB5DF39F7F84FDF9EAE85EA8400F7D817E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:69:5b:d3:7b:b6:b8:0a:a8:5e:8d:d2:4d:
                    a8:f6:e3:74:6e:33:29:ea:8c:17:d9:9f:9c:b7:01:
                    33:2f:87:81:2f:65:f5:6d:0f:3d:cb:08:c3:19:33:
                    1c:cd:74:c4:66:38:65:d5:58:9c:d0:b2:3a:90:47:
                    98:85:2b:f3:ae:ca:2c:14:01:53:70:19:8c:2f:34:
                    46:67:2f:6d:6d:f7:06:6e:4d:7f:76:75:ae:04:e6:
                    df:ed:18:3f:ee:39:70:91:11:e8:e3:99:65:4e:2a:
                    c8:c3:20:72:63:dd:aa:11:1e:cc:1a:4e:ab:c9:e2:
                    e9:23:dc:7a:0b:1c:c4:9f:81:09:51:c6:18:85:ea:
                    cf:30:bb:e0:55:4c:3b:61:49:ae:8a:12:dd:7e:2a:
                    a5:af:41:cd:cb:cf:8e:91:f2:6b:f5:01:aa:c6:10:
                    98:3f:d3:3d:44:0d:b3:0e:f2:20:db:32:eb:d7:c0:
                    da:64:fa:e8:89:e4:55:77:5b:94:ab:37:36:2d:7c:
                    71:d6:6c:7f:16:a0:f8:a7:8b:ee:5d:6c:e4:32:76:
                    69:67:94:a3:7b:1e:46:23:cd:b4:33:00:cf:01:74:
                    22:b3:e4:46:53:c9:0e:16:d2:15:f4:02:b1:17:07:
                    7d:cd:cf:17:28:09:69:d5:04:88:fb:d8:6f:15:45:
                    9f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B8:DE:B5:DF:39:F7:F8:4F:DF:9E:AE:85:EA:84:00:F7:D8:17:E9
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35372e302f32342d3234203d3e2033333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:04:5f:12:5a:47:16:fb:9d:a8:b4:0b:63:1d:31:53:4b:
         71:71:b8:28:1d:87:f1:0e:0e:83:4f:5b:01:e8:2b:f5:2c:77:
         6e:2a:10:0f:16:d9:44:dc:84:bf:d3:51:89:8f:f2:c2:73:e6:
         84:0e:ee:46:d6:c1:76:64:58:da:5b:a8:1d:68:53:28:e4:9c:
         97:da:5e:01:fe:1b:d7:c7:bb:13:1c:5d:8e:76:32:70:0c:a3:
         e9:14:1c:a8:5c:50:a1:55:39:55:19:23:19:61:53:c7:17:b8:
         65:75:26:25:75:c2:29:22:6e:4c:a6:b3:8a:88:3e:59:bb:0c:
         d0:4a:c9:5d:66:72:c7:61:9d:a2:ff:fb:9a:aa:ce:0d:ae:10:
         87:4f:72:25:64:b5:df:27:d2:1c:54:fb:00:8d:dd:9c:7b:81:
         f4:59:47:9b:fe:1f:05:24:28:1f:7b:db:28:89:78:e1:a0:87:
         57:5b:fd:cf:8e:4d:ed:67:ec:4b:a8:12:54:76:0f:c9:a3:6b:
         c2:11:b6:66:5d:da:85:bf:8c:89:2c:7a:5f:4f:a0:8a:c5:35:
         67:30:f7:fe:c7:7c:ff:8b:ae:2e:90:70:ee:3e:d5:c4:ae:68:
         52:bc:52:b5:35:7d:f1:4f:1b:48:e8:3a:6a:14:f6:d4:35:22:
         07:dd:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----