Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20313432313436.roa
File:                     33372e3233302e36332e302f32342d3234203d3e20313432313436.roa (raw, json)
Hash identifier:          gMtEN/NpMz/wlhTQk7Jt0iuBpHPhN5JL1Z8vu2J51gI=
Subject key identifier:   D9:60:A0:55:5D:B1:3C:15:8F:68:B4:47:D7:84:DA:14:4D:C9:3D:CF
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       479F2B84E8D9DC52DA74F8064DF7C24EC6B26FBE
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20313432313436.roa
Signing time:             Wed 19 Jun 2024 10:52:14 +0000
ROA not before:           Wed 19 Jun 2024 10:47:14 +0000
ROA not after:            Wed 18 Jun 2025 10:52:14 +0000
asID:                     142146
IP address blocks:        37.230.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Aug 2024 00:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9f:2b:84:e8:d9:dc:52:da:74:f8:06:4d:f7:c2:4e:c6:b2:6f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jun 19 10:47:14 2024 GMT
            Not After : Jun 18 10:52:14 2025 GMT
        Subject: CN=D960A0555DB13C158F68B447D784DA144DC93DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:d1:4f:eb:5b:c8:ae:cd:46:84:3d:8a:a0:
                    b8:fb:c0:27:35:49:63:86:b6:a2:f2:5f:7b:7f:50:
                    04:4f:0f:5b:ea:9a:5a:a6:7e:71:1a:e6:b2:9b:94:
                    a2:5c:16:ad:79:a0:18:f5:62:c3:fc:ec:ef:67:8f:
                    8d:86:ca:03:5e:1a:f2:f9:a9:5b:86:35:72:6d:3c:
                    3d:5f:d6:dd:34:fe:5d:f2:f1:6a:07:ad:d7:7b:25:
                    56:79:31:12:54:73:0e:19:dd:b9:a0:d9:db:5e:2f:
                    19:c5:78:12:81:53:6e:f0:db:87:3d:c7:40:3b:2d:
                    06:c3:0f:f6:a9:e5:a0:54:5d:98:ea:2e:0d:21:1e:
                    00:18:e9:7f:67:84:94:81:67:1b:67:14:7c:7f:ab:
                    a3:52:31:fa:38:a5:6d:a1:1e:43:6b:43:41:07:1f:
                    98:e0:d0:65:c3:c6:50:50:28:88:1a:2b:ee:24:63:
                    98:1a:65:0a:64:eb:93:01:5e:3a:9b:73:ea:a9:59:
                    5f:2c:b2:7e:b0:24:3a:e9:18:b5:47:db:d2:42:a0:
                    b2:06:5c:1b:99:20:33:24:c9:7c:32:04:07:3c:cc:
                    70:1f:7d:ce:ea:fd:43:d3:73:38:70:a0:93:55:48:
                    ac:34:25:83:a2:d9:e1:d2:49:0f:79:93:cf:5d:aa:
                    42:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:60:A0:55:5D:B1:3C:15:8F:68:B4:47:D7:84:DA:14:4D:C9:3D:CF
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20313432313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:05:df:70:6a:a9:66:be:4a:9c:d1:1f:94:d0:0e:fb:86:27:
         5d:96:91:2d:13:c6:36:47:2d:45:f9:35:50:3c:c3:11:4d:a3:
         58:95:7b:10:fa:76:34:0c:33:4c:36:f3:e0:50:24:63:b5:cb:
         ed:42:4f:d8:bb:51:bb:ba:89:eb:b4:d4:b2:5c:0b:07:74:52:
         94:f7:24:74:5c:94:3c:d9:88:0a:de:5c:38:a5:a3:d9:71:91:
         6c:b2:7e:80:48:43:b2:31:52:6e:9f:be:04:d3:f7:02:24:62:
         9c:eb:da:a2:9e:5d:de:af:ee:61:a3:e3:bd:46:a1:1b:a9:2e:
         8e:2d:77:b8:e2:62:f1:25:27:03:b1:ce:d2:c0:e9:b8:3f:33:
         64:2d:38:dc:30:e9:56:45:08:57:79:73:d3:7c:b8:9d:54:7f:
         44:f7:15:49:ff:26:5a:8e:ae:42:b0:3e:a3:fa:8f:f5:2a:95:
         04:ad:2e:68:65:41:2b:07:7a:66:38:ed:0b:0a:5d:c7:84:17:
         33:01:f8:a5:2c:ec:02:1b:38:be:c3:3c:3c:05:58:ee:66:f5:
         72:be:47:0d:5d:72:de:48:6e:45:0f:0d:27:b6:e7:cd:1b:d8:
         59:ec:6e:3f:76:e0:ff:7a:b8:00:e2:b0:02:54:20:2b:05:4f:
         90:7a:54:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----