Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e203336313133.roa
File:                     33372e3233302e36312e302f32342d3234203d3e203336313133.roa (raw, json)
Hash identifier:          3xH9FQQgBGOXU6jxLG9I4BaPpsTv6HPMKHa+7XKT/A4=
Subject key identifier:   98:2D:48:EE:98:73:96:92:4F:2B:9E:52:34:94:3D:90:B3:6C:DB:CD
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       500723E1BE8E985021133872EECE2D07397C6CEC
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e203336313133.roa
Signing time:             Fri 24 Nov 2023 13:37:09 +0000
ROA not before:           Fri 24 Nov 2023 13:32:09 +0000
ROA not after:            Fri 22 Nov 2024 13:37:09 +0000
asID:                     36113
IP address blocks:        37.230.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 04 Apr 2024 12:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:07:23:e1:be:8e:98:50:21:13:38:72:ee:ce:2d:07:39:7c:6c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 24 13:32:09 2023 GMT
            Not After : Nov 22 13:37:09 2024 GMT
        Subject: CN=982D48EE987396924F2B9E5234943D90B36CDBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:3f:30:b6:f0:0e:51:51:97:e9:a3:71:d1:
                    d5:a4:3b:68:29:01:d0:f1:95:62:90:03:85:d9:67:
                    21:4d:08:5b:55:0e:5a:e4:7f:2b:2a:e6:d8:b3:2a:
                    c6:89:2a:e3:ed:ef:2f:60:c1:4d:c8:0c:cb:0c:6b:
                    37:de:3a:20:b0:9a:a5:38:d0:71:39:7e:c6:c4:49:
                    fe:a5:c1:25:84:cf:f7:c6:80:30:7e:e6:48:08:8b:
                    a4:65:d0:88:03:12:ca:57:78:0d:ab:dc:6a:13:4e:
                    89:b2:2d:db:0f:2c:5b:1b:33:d8:45:bb:2c:4e:02:
                    32:42:15:21:ad:8e:ec:33:18:e0:1f:e2:f0:c9:f3:
                    24:89:f9:60:93:a1:51:99:80:10:fc:6f:5c:9c:5f:
                    af:b0:c6:32:c0:44:c2:ce:48:85:c3:2b:7d:46:22:
                    45:f1:29:53:7c:20:44:3b:c3:79:f3:0b:10:4c:14:
                    0b:90:c5:a7:56:7b:4b:4d:fe:41:2f:b5:50:0e:55:
                    4a:ba:09:ef:cf:67:31:14:bb:e9:13:f7:ed:32:26:
                    e2:91:3f:f6:36:f5:c6:e9:40:b7:ab:7a:a9:ff:bb:
                    4a:51:9b:d0:d3:75:56:a9:77:c9:f3:1f:54:20:84:
                    8e:48:1a:69:c1:b1:48:5a:e9:76:75:f7:91:32:4d:
                    b8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2D:48:EE:98:73:96:92:4F:2B:9E:52:34:94:3D:90:B3:6C:DB:CD
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e203336313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:77:7e:4c:81:66:76:f4:f0:37:18:ee:f6:c4:43:5f:21:5e:
         6e:12:27:aa:f4:53:e8:7f:cb:f0:82:46:ca:b1:21:6f:1f:fc:
         7f:30:bf:53:6b:34:02:6d:f5:d4:53:b4:68:b7:92:f2:28:b6:
         56:8d:8b:69:1b:58:36:07:27:5a:af:11:69:16:d6:a7:39:9a:
         be:5f:85:6c:1e:03:95:83:34:6e:b7:03:51:fe:cb:e8:c8:91:
         b4:cd:7d:bd:8d:d1:a2:ec:c4:37:fb:02:bb:59:76:0a:c0:ab:
         23:d7:18:e0:50:81:d7:86:00:29:5d:0f:ab:29:7c:db:25:fb:
         72:20:69:ba:0e:50:79:0e:14:7c:89:aa:06:64:53:ea:63:a6:
         f6:7b:b1:e3:1e:d8:f7:28:c8:a8:f5:15:49:d2:bb:28:51:e5:
         2a:dc:7b:3d:1c:ce:ab:14:62:0f:e1:bf:7d:cb:6c:3c:24:7d:
         66:04:dd:d5:05:64:14:dc:e9:af:49:ea:09:6f:df:84:d0:cd:
         d7:78:c2:da:37:6d:15:c8:47:5b:27:03:4a:da:2b:a4:59:2e:
         a2:44:6a:d7:a8:d0:3f:42:ba:bc:da:b2:40:0a:ba:03:aa:fe:
         9e:ac:c9:54:8c:a9:c0:c8:89:88:ec:9e:2b:a9:82:d5:12:37:
         52:39:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org