Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e20323136323235.roa
File:                     33372e3233302e36302e302f32342d3234203d3e20323136323235.roa (raw, json)
Hash identifier:          egj3PuAqT0PXMBDMv/F/8uBsOGvAev68B206ZFHmLgM=
Subject key identifier:   2F:EA:35:A9:FF:D7:F9:9E:1E:F7:29:52:CE:53:D2:92:B1:E9:9D:61
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       36F86175B903E8BD00787336BF8AC8CDE5532B23
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e20323136323235.roa
Signing time:             Thu 29 Aug 2024 13:11:36 +0000
ROA not before:           Thu 29 Aug 2024 13:06:36 +0000
ROA not after:            Thu 28 Aug 2025 13:11:36 +0000
asID:                     216225
IP address blocks:        37.230.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f8:61:75:b9:03:e8:bd:00:78:73:36:bf:8a:c8:cd:e5:53:2b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Aug 29 13:06:36 2024 GMT
            Not After : Aug 28 13:11:36 2025 GMT
        Subject: CN=2FEA35A9FFD7F99E1EF72952CE53D292B1E99D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:da:38:94:42:b5:b0:bd:dc:87:85:e6:09:
                    45:4f:93:3c:31:35:cd:fe:ad:55:59:4b:28:16:df:
                    98:00:37:d7:2f:e2:da:eb:46:a0:5e:8f:e1:37:dd:
                    9b:47:9f:0d:78:56:5b:2b:46:74:88:16:ac:6e:b1:
                    82:99:e9:18:8e:29:aa:73:64:c4:fb:82:38:47:ed:
                    9d:a5:11:37:99:50:df:f6:61:94:6b:61:d0:71:52:
                    b2:fb:09:00:62:3e:09:86:90:8e:78:2e:8d:2b:2d:
                    62:11:50:18:0d:5e:cf:94:88:34:75:50:ef:c3:a2:
                    3e:d4:6d:89:70:22:4d:63:35:0e:1b:0e:12:55:e1:
                    dd:18:f3:f4:75:18:1b:bd:77:fe:c6:74:e8:9e:0a:
                    22:b0:f8:92:2d:82:d6:29:80:43:ee:c6:1d:ba:13:
                    96:d3:99:90:7a:21:7d:f6:64:d2:ad:40:19:ad:81:
                    e1:05:a5:be:2f:3c:4e:53:5b:4c:dc:ee:5a:45:26:
                    9e:26:28:61:8e:98:f4:e6:19:5d:2b:11:8f:8b:a2:
                    f3:ae:13:21:12:ac:7f:1b:71:4b:ea:3f:3b:f9:8b:
                    14:79:21:e1:3a:f6:5a:cf:5a:04:e1:f7:5c:13:7e:
                    17:92:c6:e4:7a:74:52:5a:97:f0:3a:9b:6c:f4:cd:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EA:35:A9:FF:D7:F9:9E:1E:F7:29:52:CE:53:D2:92:B1:E9:9D:61
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e20323136323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:af:de:24:79:c3:89:d9:70:5a:3a:90:05:94:7d:81:21:bc:
         a7:a8:c3:24:0f:76:73:f4:92:a5:3e:df:e6:4c:4c:ed:d3:26:
         31:d8:3b:32:a5:b9:86:b9:00:9c:a9:e7:6a:46:02:0e:35:b8:
         93:55:0e:8c:e9:be:89:ce:c3:5c:be:c8:09:69:2b:5d:17:38:
         31:ac:8e:5c:d0:29:ed:4c:b3:ab:22:03:66:14:d8:c9:b4:94:
         36:fc:8e:f1:ef:84:42:91:10:47:07:e8:57:66:85:77:bc:7c:
         da:3a:df:55:ce:4a:f1:78:51:af:b6:6c:ab:49:e5:bb:31:29:
         86:ab:1e:4b:7c:21:ac:8e:ed:52:91:59:58:87:3d:cd:c4:b5:
         3e:f7:ef:e5:50:95:b1:50:52:ce:6f:83:d9:36:12:87:fb:56:
         a0:b9:bd:27:d4:7c:66:2f:ec:1f:34:09:70:a1:dd:3e:86:b4:
         2d:57:2a:44:e9:3c:52:9c:9c:2c:9e:06:f5:23:c4:b8:e9:c6:
         a3:c5:f3:16:5b:bd:40:3e:bc:1e:0f:ce:91:b4:b5:b7:60:32:
         2e:dd:30:e2:29:38:89:e3:28:07:4a:8e:05:b8:d5:d0:bd:b6:
         c9:85:f9:4b:b3:30:f7:42:95:05:fa:cd:c2:c6:76:84:06:4d:
         5d:92:2d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----