Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa
File:                     33372e3233302e36322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          LyC7qCw3OxgXy8YyQ3aB3yYtna+BQsWEcao/vfoEUGE=
Subject key identifier:   48:9E:E6:E0:11:1D:76:0F:F9:54:5F:B6:80:0D:5B:37:4C:EE:6E:14
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       78978E45DA40CBA734E5AB49D8C082FC2F72C31E
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 04 Apr 2024 12:10:48 +0000
ROA not before:           Thu 04 Apr 2024 12:05:48 +0000
ROA not after:            Thu 03 Apr 2025 12:10:48 +0000
asID:                     834
IP address blocks:        37.230.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 May 2024 22:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:97:8e:45:da:40:cb:a7:34:e5:ab:49:d8:c0:82:fc:2f:72:c3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr  4 12:05:48 2024 GMT
            Not After : Apr  3 12:10:48 2025 GMT
        Subject: CN=489EE6E0111D760FF9545FB6800D5B374CEE6E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:30:48:d7:2e:9a:03:2f:29:fb:6e:68:f3:
                    66:d3:8e:e0:d4:8b:34:03:bc:05:ec:a3:98:15:35:
                    1d:a8:a2:b5:9a:a7:9f:a1:59:73:e2:83:35:cb:10:
                    4c:25:d0:ff:c0:b7:af:d2:44:41:97:d2:77:b9:83:
                    8e:8c:11:c5:d9:97:60:f1:9a:6a:64:fd:75:ba:58:
                    20:f3:d9:01:85:83:5d:0d:10:26:7b:d3:6c:40:58:
                    46:66:53:f3:8a:77:19:ae:af:b1:82:46:53:12:f3:
                    ad:ef:c1:e7:cb:28:0c:2d:1b:3d:56:f1:10:cc:32:
                    7f:86:dd:9b:03:37:95:98:a2:a5:48:e4:73:c8:94:
                    53:e5:4e:35:2e:3b:8f:be:83:2e:78:0e:c9:db:c7:
                    79:d0:d1:d8:e2:8f:fc:0e:60:08:ca:9a:89:ed:50:
                    d0:77:30:05:e3:5c:54:0c:57:9f:df:ca:2a:4b:8b:
                    41:3a:8f:4a:fc:cb:e7:ec:54:d6:cb:b7:45:6a:3e:
                    b3:0f:d2:ed:a6:0a:96:46:04:12:6d:0f:eb:4e:b8:
                    35:9a:81:e3:10:e7:bc:8f:51:31:a3:9d:7c:aa:a5:
                    40:77:e0:e6:bf:2d:3d:4b:60:ae:ad:fa:2e:8d:45:
                    91:79:9c:a2:df:b9:20:54:83:90:d1:8d:ba:7e:7a:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9E:E6:E0:11:1D:76:0F:F9:54:5F:B6:80:0D:5B:37:4C:EE:6E:14
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c9:69:b1:13:03:dc:81:7f:f1:40:16:f1:b9:b6:57:6e:6e:
         da:40:10:82:05:2d:ec:c6:b1:fa:db:8a:51:e7:21:62:95:3f:
         5e:a4:8a:2e:d9:a1:8e:b7:4e:fd:f7:bb:7a:5c:aa:d3:93:9c:
         cc:86:91:72:9a:b6:7a:95:6a:c8:c7:78:42:4c:24:6f:12:9a:
         83:f2:8d:d1:52:09:1e:ab:a6:69:91:fd:e2:b7:87:8e:58:7b:
         92:61:8c:00:47:ba:ec:01:cf:d2:36:7f:9e:76:68:b6:83:79:
         5d:11:c9:d7:ea:d4:98:9a:99:d2:be:15:9c:89:c2:c4:3c:44:
         b9:19:21:ef:65:3f:97:34:22:7e:51:69:5c:cd:ac:b6:d5:5e:
         a0:24:82:f7:8a:86:40:e6:50:64:68:32:6c:7e:e9:b9:86:7f:
         d6:0c:f7:f1:24:ab:53:68:ba:1d:1d:3a:f2:06:19:1d:62:50:
         a3:84:20:6c:1d:b3:b2:82:62:17:99:0d:04:9f:b5:b3:e5:29:
         fd:0b:c6:9f:1a:ed:60:ce:13:33:7c:d5:62:02:5a:61:b0:eb:
         7e:2b:b3:1b:94:11:28:68:ec:92:e5:41:0f:d4:80:3e:2d:ec:
         54:ab:72:e2:c3:e7:31:9d:23:41:3f:8d:d5:c7:8b:02:5e:26:
         8c:11:c4:b6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeJeORdpAy6c05atJ2MCC/C9ywx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDA0MDQxMjA1NDhaFw0yNTA0MDMxMjEwNDhaMDMxMTAvBgNV
BAMTKDQ4OUVFNkUwMTExRDc2MEZGOTU0NUZCNjgwMEQ1QjM3NENFRTZFMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/DBI1y6aAy8p+25o82bTjuDU
izQDvAXso5gVNR2oorWap5+hWXPigzXLEEwl0P/At6/SREGX0ne5g46MEcXZl2Dx
mmpk/XW6WCDz2QGFg10NECZ702xAWEZmU/OKdxmur7GCRlMS863vwefLKAwtGz1W
8RDMMn+G3ZsDN5WYoqVI5HPIlFPlTjUuO4++gy54Dsnbx3nQ0djij/wOYAjKmont
UNB3MAXjXFQMV5/fyipLi0E6j0r8y+fsVNbLt0VqPrMP0u2mCpZGBBJtD+tOuDWa
geMQ57yPUTGjnXyqpUB34Oa/LT1LYK6t+i6NRZF5nKLfuSBUg5DRjbp+ehy3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSJ7m4BEddg/5VF+2gA1bN0zubhQwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzIzMzMwMmUzNjMyMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY+MA0GCSqGSIb3DQEBCwUA
A4IBAQBwyWmxEwPcgX/xQBbxubZXbm7aQBCCBS3sxrH624pR5yFilT9epIou2aGO
t07997t6XKrTk5zMhpFymrZ6lWrIx3hCTCRvEpqD8o3RUgkeq6Zpkf3it4eOWHuS
YYwAR7rsAc/SNn+edmi2g3ldEcnX6tSYmpnSvhWcicLEPES5GSHvZT+XNCJ+UWlc
zay21V6gJIL3ioZA5lBkaDJsfum5hn/WDPfxJKtTaLodHTryBhkdYlCjhCBsHbOy
gmIXmQ0En7Wz5Sn9C8afGu1gzhMzfNViAlphsOt+K7MblBEoaOyS5UEP1IA+LexU
q3Liw+cxnSNBP43Vx4sCXiaMEcS2
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org