Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e20313938353130.roa
File:                     33372e3233302e36302e302f32342d3234203d3e20313938353130.roa (raw, json)
Hash identifier:          UskwpEjE/B4E8jzaCkhdNx1wzKXndAhrdv1A8fl1iek=
Subject key identifier:   37:9C:E2:F3:11:C5:1B:86:5B:CD:30:F8:6F:5B:0B:D2:BA:EB:17:CE
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       35CE743E862FBC656AFCA54ADEABBB82BF6B1931
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e20313938353130.roa
Signing time:             Thu 11 Apr 2024 13:24:25 +0000
ROA not before:           Thu 11 Apr 2024 13:19:25 +0000
ROA not after:            Thu 10 Apr 2025 13:24:25 +0000
asID:                     198510
IP address blocks:        37.230.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ce:74:3e:86:2f:bc:65:6a:fc:a5:4a:de:ab:bb:82:bf:6b:19:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr 11 13:19:25 2024 GMT
            Not After : Apr 10 13:24:25 2025 GMT
        Subject: CN=379CE2F311C51B865BCD30F86F5B0BD2BAEB17CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:df:d8:ad:18:76:80:58:07:76:27:ee:02:
                    a8:8a:49:3b:d1:f9:00:3d:0b:73:82:d1:9a:7f:0d:
                    ec:f9:c3:21:47:61:f9:78:77:d5:13:4b:65:f9:05:
                    8c:b1:46:e3:14:20:28:72:91:80:e2:85:86:f9:57:
                    49:81:77:01:05:1b:fd:9c:34:ae:fd:95:d4:04:91:
                    61:e2:90:80:e9:05:e4:cb:5b:b0:87:e4:4d:1d:91:
                    7d:5b:b4:72:45:0d:ff:ce:7a:c4:fa:25:f9:ee:38:
                    f0:39:81:83:c4:cf:cf:ff:dc:aa:2b:5e:29:06:b9:
                    88:6d:66:f8:aa:00:a2:7d:59:f2:6f:d8:50:98:5e:
                    8e:b9:55:73:ed:0b:d6:ef:f0:34:49:67:fc:f6:89:
                    d9:5b:60:49:f5:d6:20:c9:71:b8:84:d4:03:5f:c1:
                    19:37:67:d5:39:ed:e5:73:08:4b:e5:a6:4d:17:83:
                    fd:99:b3:32:f3:f6:96:91:38:6a:17:52:6b:11:28:
                    9b:26:5b:af:b2:e8:06:5c:97:e9:c3:95:17:47:47:
                    ec:02:cd:f9:39:77:2a:f8:59:b3:a9:10:dd:7a:e0:
                    e1:61:b6:dd:0c:6e:7a:22:47:68:97:d8:60:c0:62:
                    ce:98:64:9a:9e:88:1a:4d:24:33:61:6e:4c:d2:65:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9C:E2:F3:11:C5:1B:86:5B:CD:30:F8:6F:5B:0B:D2:BA:EB:17:CE
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e20313938353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:9a:bf:7b:0f:e1:f3:13:dd:12:cc:89:ee:68:e9:b5:ff:c1:
         72:c4:4a:d3:ad:d0:10:98:98:7b:60:3e:b3:44:04:3c:b1:72:
         15:37:e6:90:4f:d7:d5:67:5c:9a:0c:a5:66:01:84:57:1b:4a:
         5d:4b:9e:44:18:bb:02:b2:14:03:50:e1:d2:fc:47:b6:f4:62:
         b5:1f:74:e8:fa:5f:4c:3f:1e:c3:54:2c:70:e7:77:df:f9:0a:
         22:b3:19:80:d6:99:c5:77:69:1a:72:9f:38:d5:af:23:f5:b5:
         c7:3e:c5:f1:be:1b:e0:6a:a0:33:6e:16:7e:e4:cf:aa:56:f0:
         d9:ec:45:a3:53:af:3f:e5:b1:b7:32:6c:12:0f:a9:dd:9c:fd:
         37:0a:a5:bc:c6:67:5c:73:b6:24:0f:f5:ae:05:d2:00:cf:68:
         b1:50:8b:bb:91:ce:8e:a1:b7:6b:54:3e:a9:b0:03:ea:2e:94:
         b2:8b:f2:8d:7f:4b:37:8c:18:45:8e:8f:e5:51:7a:f8:4c:06:
         6e:00:f7:70:42:d9:15:dc:1a:21:62:df:e7:8a:c1:ee:4a:b3:
         21:d2:0b:93:6e:75:5d:44:e7:59:7a:0b:21:00:f7:12:cb:ed:
         2c:12:e4:21:f3:33:ec:dd:ee:be:28:6b:31:3d:ba:48:49:d4:
         1a:4b:2e:64
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUNc50PoYvvGVq/KVK3qu7gr9rGTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDA0MTExMzE5MjVaFw0yNTA0MTAxMzI0MjVaMDMxMTAvBgNV
BAMTKDM3OUNFMkYzMTFDNTFCODY1QkNEMzBGODZGNUIwQkQyQkFFQjE3Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYgN/YrRh2gFgHdifuAqiKSTvR
+QA9C3OC0Zp/Dez5wyFHYfl4d9UTS2X5BYyxRuMUIChykYDihYb5V0mBdwEFG/2c
NK79ldQEkWHikIDpBeTLW7CH5E0dkX1btHJFDf/OesT6JfnuOPA5gYPEz8//3Kor
XikGuYhtZviqAKJ9WfJv2FCYXo65VXPtC9bv8DRJZ/z2idlbYEn11iDJcbiE1ANf
wRk3Z9U57eVzCEvlpk0Xg/2ZszLz9paROGoXUmsRKJsmW6+y6AZcl+nDlRdHR+wC
zfk5dyr4WbOpEN164OFhtt0MbnoiR2iX2GDAYs6YZJqeiBpNJDNhbkzSZa2XAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUN5zi8xHFG4ZbzTD4b1sL0rrrF84wHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzYzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzkzODM1MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmPDANBgkqhkiG
9w0BAQsFAAOCAQEAVpq/ew/h8xPdEsyJ7mjptf/BcsRK063QEJiYe2A+s0QEPLFy
FTfmkE/X1WdcmgylZgGEVxtKXUueRBi7ArIUA1Dh0vxHtvRitR906PpfTD8ew1Qs
cOd33/kKIrMZgNaZxXdpGnKfONWvI/W1xz7F8b4b4GqgM24WfuTPqlbw2exFo1Ov
P+WxtzJsEg+p3Zz9NwqlvMZnXHO2JA/1rgXSAM9osVCLu5HOjqG3a1Q+qbAD6i6U
sovyjX9LN4wYRY6P5VF6+EwGbgD3cELZFdwaIWLf54rB7kqzIdILk251XUTnWXoL
IQD3EsvtLBLkIfMz7N3uvihrMT26SEnUGksuZA==
-----END CERTIFICATE-----