Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32332d3234203d3e20383334.roa
File:                     33372e3233302e36302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          Hqi8rWvCSx78GLReHJ/uawL4s+H/BCZBrlY6q0192Z4=
Subject key identifier:   ED:9E:51:E2:7E:1E:74:A0:6F:F9:80:8C:08:FD:BA:8C:C2:52:7C:FC
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       52258F57761E596C779C1EE0D47CABDE480900A0
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32332d3234203d3e20383334.roa
Signing time:             Wed 11 Sep 2024 00:00:30 +0000
ROA not before:           Tue 10 Sep 2024 23:55:30 +0000
ROA not after:            Wed 10 Sep 2025 00:00:30 +0000
asID:                     834
IP address blocks:        37.230.60.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 00:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:25:8f:57:76:1e:59:6c:77:9c:1e:e0:d4:7c:ab:de:48:09:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep 10 23:55:30 2024 GMT
            Not After : Sep 10 00:00:30 2025 GMT
        Subject: CN=ED9E51E27E1E74A06FF9808C08FDBA8CC2527CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a3:a4:82:61:12:c5:8d:85:7b:95:24:72:1a:
                    28:ac:56:50:0d:f3:47:1c:ec:4d:a3:62:99:31:45:
                    41:55:4b:00:5b:ef:82:43:34:ad:1f:8f:fc:bd:fa:
                    cc:75:e2:51:14:2b:9c:9b:09:a4:26:40:b7:a0:83:
                    a1:49:c1:a2:1c:8d:a9:87:64:b7:b1:e9:7e:c2:55:
                    6a:e7:f6:12:2d:ed:ad:9d:bc:54:f7:b2:38:a7:43:
                    f1:ba:5f:c3:e7:d4:57:4b:8b:1a:66:e7:65:9d:bd:
                    7a:15:53:d5:fa:5f:23:62:c4:e9:6e:8f:03:1c:32:
                    f3:e7:0e:42:84:36:bb:3e:42:44:25:39:4b:74:68:
                    f8:a6:87:0a:c0:53:7f:cc:c0:df:b7:6b:99:77:69:
                    3d:ca:6e:aa:6f:7d:9d:e2:32:ee:e3:83:6d:b6:a0:
                    b6:17:57:43:2e:dc:95:73:4f:e9:ee:36:96:a7:1f:
                    ae:b9:ba:8a:ec:29:f4:b4:b8:e0:16:72:e0:36:bb:
                    8b:38:d0:63:ca:a6:e5:55:69:52:4a:d7:de:68:1a:
                    30:7b:0b:d1:54:d6:bf:ba:b3:b2:29:fa:19:bb:a2:
                    57:60:2f:94:42:29:70:1c:78:f3:d7:b7:ec:c4:0e:
                    1b:93:43:44:31:14:34:c8:be:c9:4f:04:9e:1f:d2:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9E:51:E2:7E:1E:74:A0:6F:F9:80:8C:08:FD:BA:8C:C2:52:7C:FC
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:63:1f:15:24:e2:38:6a:df:70:e6:10:b8:46:1f:f0:53:32:
         75:af:75:e7:b8:06:0d:29:48:34:68:fc:df:ee:7f:cb:21:64:
         01:ca:f6:71:94:d7:0e:75:aa:f3:73:2a:99:5e:ab:6b:34:60:
         d5:de:c2:e2:b4:d0:52:fa:0b:de:fe:3e:88:37:dd:05:e3:ca:
         db:6c:8e:ee:03:ab:8b:0f:b7:40:c1:f8:57:d9:05:cd:c6:75:
         b3:0c:59:43:aa:8e:a3:2a:5a:b5:3b:3f:a3:35:75:f2:e0:90:
         64:66:fd:03:b5:21:6e:44:58:b9:3f:85:8f:61:ab:ad:24:52:
         f5:d6:d9:13:34:25:9a:ab:7c:b6:6f:7c:29:83:0b:34:74:66:
         ad:63:16:c1:e5:66:88:fe:5d:c8:7d:8e:ea:f3:87:23:f4:54:
         6b:fb:73:d2:75:61:94:de:6c:53:57:6a:37:40:15:b1:16:2c:
         47:2d:05:ec:5e:f4:d7:fb:a8:a5:ff:9b:d8:57:5f:a1:60:33:
         c4:07:5f:c4:15:66:53:07:a5:57:77:7a:4a:8f:74:9a:3a:ad:
         0d:0a:04:14:3d:89:f9:f5:6b:0d:95:07:d2:ad:b4:22:ab:6a:
         44:da:bd:8e:b4:ca:77:e6:7d:ec:b5:05:39:95:3b:06:3a:13:
         39:24:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 02:51:17 2024 by rpki-client on console-fra.rpki-client.org