Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e20383334.roa
File:                     33372e3233302e36312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          EUHJ831Iv31fRqv27vw8gLf7TXKfbZKMWPZxGdMXaEc=
Subject key identifier:   EE:DC:56:40:B9:F9:EA:01:82:FB:31:D0:F1:84:C0:81:84:4A:61:BA
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       1EF65A959C632554B39C0D6BF2AB5E9B7BE94E78
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e20383334.roa
Signing time:             Fri 06 Sep 2024 00:00:27 +0000
ROA not before:           Thu 05 Sep 2024 23:55:27 +0000
ROA not after:            Fri 05 Sep 2025 00:00:27 +0000
asID:                     834
IP address blocks:        37.230.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f6:5a:95:9c:63:25:54:b3:9c:0d:6b:f2:ab:5e:9b:7b:e9:4e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep  5 23:55:27 2024 GMT
            Not After : Sep  5 00:00:27 2025 GMT
        Subject: CN=EEDC5640B9F9EA0182FB31D0F184C081844A61BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:60:ba:9c:95:7c:6a:0c:ad:74:e5:d6:5d:
                    66:df:3c:05:b4:73:ab:b8:d1:d3:79:93:4b:70:ca:
                    f8:c9:ce:92:24:1d:ae:f0:c1:f9:4f:09:18:a5:73:
                    ac:a1:3a:c3:1d:64:0e:b8:f5:16:00:ba:56:29:d7:
                    4d:d3:32:16:a3:c5:34:66:43:93:93:09:a0:d0:f8:
                    af:01:94:09:56:7d:67:da:8b:32:22:9b:3e:00:cb:
                    ae:76:90:cf:18:2e:92:c9:9d:d2:ab:7d:93:03:bb:
                    56:72:99:a0:9f:7d:0f:3c:c1:1a:49:ac:d9:af:49:
                    f8:16:c5:1b:4b:a5:de:9e:dd:2d:d3:a3:4d:53:b8:
                    08:77:40:1e:7c:68:8b:e2:eb:3b:3b:da:35:5f:62:
                    6a:0b:66:0c:e4:db:55:e0:c2:50:9b:16:e6:13:cf:
                    59:97:17:04:bb:b8:a2:9e:38:73:13:ee:34:9c:40:
                    d3:15:99:3a:47:a7:e4:26:f8:39:00:74:27:c2:fa:
                    49:5e:3b:c2:69:3b:4e:7a:f4:b6:7b:c9:9b:71:b7:
                    03:f1:e9:ee:65:f1:85:41:7a:43:51:bc:a0:9a:ab:
                    b9:8a:1a:87:68:cf:26:1e:56:45:6b:a9:5c:8e:c8:
                    53:99:b1:93:72:b9:4e:70:6d:27:da:ea:44:a3:9d:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DC:56:40:B9:F9:EA:01:82:FB:31:D0:F1:84:C0:81:84:4A:61:BA
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:b2:d4:bf:7f:1a:24:2b:70:fb:e9:21:bc:40:bd:86:7c:04:
         3d:fa:7e:dd:cc:c6:e9:29:60:ed:03:b2:e5:b2:cf:82:af:1a:
         67:19:f8:20:2e:fd:7a:a3:37:d6:5f:52:04:3d:fc:12:a2:3a:
         df:ac:2a:a0:0b:17:9b:31:f0:2c:f2:bd:78:68:d3:d4:b5:9a:
         2a:70:c8:80:c4:77:12:bd:14:64:d3:b1:a8:7b:b3:f6:64:f0:
         f7:23:a9:f4:90:b5:e4:07:9f:e3:39:1d:a8:60:3c:b3:26:9d:
         e5:91:bd:16:69:0e:4b:f9:61:9c:96:17:30:f5:e4:28:fa:d5:
         8e:03:1e:8c:27:5b:47:42:3d:33:13:1a:8a:41:42:e6:e5:3d:
         05:7e:d9:c7:be:db:ba:15:35:ee:d6:52:a6:e0:d7:72:4f:93:
         52:69:a1:b3:e0:4a:b6:08:3b:26:5d:f9:67:94:e9:d1:87:33:
         b9:f0:27:3b:b5:15:8a:9b:ba:95:5e:90:32:85:64:dd:7c:26:
         2a:97:53:90:39:24:12:14:86:eb:30:bd:e4:cd:80:45:7a:96:
         b7:5b:71:0a:34:c6:00:f5:4b:da:46:21:fa:56:bf:c2:af:d1:
         44:2e:01:87:4e:88:ea:fa:31:b9:d9:97:2d:96:9a:53:3e:60:
         bc:92:5b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 03:34:48 2024 by rpki-client on console-ams.rpki-client.org