Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35372e302f32342d3234203d3e20383334.roa
File:                     33372e3233302e35372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          JT3jErFhAb8nrcOBGXUSZPeYhUwTJZg6l0swFz5C4tM=
Subject key identifier:   5D:1B:7C:C4:D7:19:8F:BD:50:02:02:9A:D3:3B:F5:F3:20:9A:BA:91
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4C5374AB103A58D436C8922BFD1071C2982B3DA2
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35372e302f32342d3234203d3e20383334.roa
Signing time:             Sun 28 Jan 2024 00:00:07 +0000
ROA not before:           Sat 27 Jan 2024 23:55:07 +0000
ROA not after:            Sun 26 Jan 2025 00:00:07 +0000
asID:                     834
IP address blocks:        37.230.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 04:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:53:74:ab:10:3a:58:d4:36:c8:92:2b:fd:10:71:c2:98:2b:3d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jan 27 23:55:07 2024 GMT
            Not After : Jan 26 00:00:07 2025 GMT
        Subject: CN=5D1B7CC4D7198FBD5002029AD33BF5F3209ABA91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:37:b2:5f:a9:58:f9:72:72:70:99:67:5a:
                    bd:44:36:6c:40:c9:1c:f1:b0:21:97:15:1e:b3:a7:
                    17:3d:18:d0:76:1c:73:c0:ca:88:68:52:f8:b6:b1:
                    3f:e5:0d:0a:17:1e:71:7e:92:90:3a:ef:1e:3b:01:
                    f6:fb:4a:24:5d:26:b3:43:28:e3:f5:b4:b9:cc:d3:
                    3d:39:3b:b8:88:be:63:64:e5:22:bd:6c:85:ae:1f:
                    8c:b9:a1:2e:ab:04:68:e2:09:ca:ca:b3:68:fd:d0:
                    01:b0:4a:56:09:bc:0d:ce:80:79:10:f1:5f:f7:41:
                    9b:38:6a:7a:76:08:94:41:44:0b:93:8b:ca:7c:85:
                    af:20:ab:e1:3a:ad:c0:ae:58:b3:6d:fe:8b:f4:3e:
                    e2:eb:fc:2a:f9:bf:6d:45:86:0e:b9:8b:d0:16:d7:
                    e5:86:65:cb:bd:7b:9b:99:9b:06:78:38:fa:ab:51:
                    5c:ad:75:41:eb:c8:22:af:28:80:61:93:d8:27:15:
                    df:a1:43:12:99:0b:bf:af:b4:28:9c:10:42:ef:eb:
                    b9:ca:91:68:be:0d:49:9b:d6:10:c0:02:74:d8:86:
                    59:64:a9:1a:fc:06:f4:bd:98:0e:5a:f7:7d:3b:b3:
                    92:31:db:3c:0d:2b:c5:eb:66:2d:b7:dd:a1:8d:dd:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1B:7C:C4:D7:19:8F:BD:50:02:02:9A:D3:3B:F5:F3:20:9A:BA:91
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:bd:2b:a4:e8:a4:2a:0c:41:13:6c:e2:56:ce:43:67:a7:d9:
         0a:24:d0:94:8b:12:be:3f:e1:a5:85:38:22:f3:a3:4c:66:db:
         be:b3:10:31:57:73:ce:00:9f:8e:1d:b2:87:6f:93:38:a0:c1:
         4b:ab:3c:75:35:3a:b8:4d:31:56:34:1f:ea:5a:77:7d:36:9c:
         d7:d4:cb:1b:57:7d:f6:f9:57:b3:4d:50:82:82:16:7b:c8:d9:
         40:53:e9:4e:38:40:71:c5:8f:73:74:03:83:59:7d:7e:38:e2:
         b8:cf:1d:db:d0:51:f5:d5:7e:05:aa:43:1e:ab:96:fa:5a:21:
         df:cc:e4:5b:88:3a:04:ab:31:e5:5a:71:80:29:6a:a3:a0:39:
         7c:2d:e0:1b:48:c2:b8:0d:1d:78:2a:37:e7:c7:6d:3d:6b:43:
         4e:41:cf:72:c7:62:82:88:2a:15:79:b6:94:15:ba:c8:f2:a4:
         a3:d1:bb:c1:26:ee:e9:2b:7f:51:ca:09:26:33:ad:41:e0:36:
         3b:db:6b:76:75:a0:ed:0d:f2:be:4c:12:66:e9:f5:5d:68:59:
         22:07:b5:d9:3d:83:19:32:4a:85:75:62:fc:af:39:dd:42:1f:
         0a:ae:d0:d5:a6:cc:af:02:f1:0c:60:91:d4:9c:b9:57:b0:6d:
         91:52:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org