Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20323132323338.roa
File:                     33372e3233302e36332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          8+AjdwsmzIO0slbuK9ppZzCAINkJGFC1oBoD4PfJgJo=
Subject key identifier:   49:FF:BA:1D:99:91:C1:BA:EA:99:3C:C9:8F:9F:22:73:73:3F:F5:73
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4DAEF3408A1C02D1C0C2604F25E6FC10A991C77D
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20323132323338.roa
Signing time:             Tue 20 Aug 2024 15:28:44 +0000
ROA not before:           Tue 20 Aug 2024 15:23:44 +0000
ROA not after:            Tue 19 Aug 2025 15:28:44 +0000
asID:                     212238
IP address blocks:        37.230.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 09:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ae:f3:40:8a:1c:02:d1:c0:c2:60:4f:25:e6:fc:10:a9:91:c7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Aug 20 15:23:44 2024 GMT
            Not After : Aug 19 15:28:44 2025 GMT
        Subject: CN=49FFBA1D9991C1BAEA993CC98F9F2273733FF573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:c3:f7:62:f3:85:d0:57:3e:fb:15:f2:17:
                    96:ee:25:ba:f8:c6:cf:02:ef:7f:8b:7c:c9:6d:24:
                    92:30:a8:c6:27:36:c1:e5:87:8a:4f:db:e7:f1:7b:
                    6a:11:35:d1:1e:84:a6:22:4e:92:06:6d:d7:8f:ea:
                    f5:b4:07:d8:0e:e2:5d:b6:da:19:43:b0:41:47:1e:
                    21:9c:3e:21:58:8d:aa:8b:fe:7e:13:68:46:55:cb:
                    b9:68:cf:39:2e:21:38:6c:0f:b3:ac:45:4d:d3:75:
                    a6:77:75:9a:60:43:7f:f0:9f:12:3d:c8:a4:89:56:
                    a9:fc:d8:d3:a5:30:b1:de:83:55:94:22:06:22:be:
                    6a:a0:9b:3b:92:2e:5d:fa:8c:33:43:22:72:09:33:
                    d0:7b:d4:c4:f0:90:1c:16:35:af:79:39:47:b9:72:
                    1a:2b:17:c1:7e:57:2e:6b:3d:12:dd:2e:4d:ce:fa:
                    ac:47:d0:da:41:3a:81:53:82:e1:95:2b:6b:18:11:
                    27:b6:6b:ca:53:96:10:a3:58:ef:f9:92:78:26:be:
                    f4:69:c6:42:15:1a:5b:50:8a:45:c5:00:8d:0d:f7:
                    30:19:49:64:17:c2:98:c5:8d:06:d2:15:76:83:e0:
                    b8:7b:18:73:13:ad:17:9e:dc:aa:dd:61:7e:8b:4a:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FF:BA:1D:99:91:C1:BA:EA:99:3C:C9:8F:9F:22:73:73:3F:F5:73
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:a9:e9:08:a4:b6:ed:b6:95:d9:41:cb:17:8a:3a:cb:96:
         c4:aa:2e:97:e9:4f:f9:2a:cb:55:ff:f8:82:b0:80:af:29:5b:
         5e:e2:81:fb:25:ee:a1:96:a8:74:a6:1d:50:27:c2:88:5e:7e:
         86:0f:63:d8:9a:67:3a:7b:63:64:8a:9a:fb:e8:02:4e:95:3d:
         17:06:42:a1:08:c7:e6:bf:84:31:7d:67:a1:b6:32:f4:50:1f:
         bc:b3:09:05:e8:a7:9c:54:b2:5f:39:6c:49:58:4e:68:9f:4b:
         a3:df:3d:5c:9d:bb:39:66:67:9c:a3:42:7c:ab:9c:47:55:a7:
         80:2a:33:27:2e:fd:0b:08:b6:c7:2b:14:0b:bd:99:f8:79:ec:
         dc:1b:ca:77:32:40:ba:95:bc:89:73:17:ff:4b:86:2f:86:6a:
         3f:ee:ed:8c:8d:8f:bd:e8:44:67:43:dd:30:d5:35:47:a4:36:
         20:6d:7b:51:45:87:66:73:25:e9:ad:11:7a:00:13:84:4e:30:
         41:b4:1e:cf:b1:e6:c8:6d:53:76:3f:f6:ec:0f:1c:af:c5:42:
         69:36:7f:98:8b:ee:50:cf:fa:24:e9:1f:0c:c6:91:5b:ec:c2:
         d0:09:1d:40:7b:2d:0a:1f:a3:d1:bc:78:63:6f:ad:a8:4f:93:
         5b:e6:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----