Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20383334.roa
File:                     352e38332e3231312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          c/t9oeqNWYgBezcA+YkFvXGOuK6ZbjqusSuhp1HZgfg=
Subject key identifier:   30:E9:7D:9F:2C:76:AE:AC:A4:A6:CF:05:44:0D:C6:10:EE:B7:B7:94
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       1DC40EBD9B344F71E0DE0FD050F4886C1481F114
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20383334.roa
Signing time:             Mon 26 Feb 2024 00:39:13 +0000
ROA not before:           Mon 26 Feb 2024 00:34:13 +0000
ROA not after:            Mon 24 Feb 2025 00:39:13 +0000
asID:                     834
IP address blocks:        5.83.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 00:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c4:0e:bd:9b:34:4f:71:e0:de:0f:d0:50:f4:88:6c:14:81:f1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb 26 00:34:13 2024 GMT
            Not After : Feb 24 00:39:13 2025 GMT
        Subject: CN=30E97D9F2C76AEACA4A6CF05440DC610EEB7B794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:00:37:4a:64:35:05:17:14:34:a7:99:fe:6e:
                    6d:1d:3d:95:29:c1:3e:6b:96:c9:09:db:c8:bd:d5:
                    98:39:91:3c:74:a9:87:e8:ef:10:1f:d4:21:56:cc:
                    3a:10:74:e8:d2:d5:ab:c6:ec:4a:cb:36:8c:61:09:
                    e1:cc:6e:67:9e:94:0a:ba:4f:5b:9c:22:71:3d:7c:
                    2d:59:05:0f:65:c3:2d:7f:2a:c3:26:a2:bf:1b:f1:
                    f9:e4:31:fd:55:44:de:a1:e9:95:d6:76:45:79:1b:
                    8f:09:4b:c5:f1:31:29:10:ea:5b:49:47:c0:64:76:
                    8a:d6:a4:e3:d9:3f:47:1b:6d:06:a2:77:e1:ec:48:
                    47:0c:d9:c9:0a:bc:ad:35:80:00:53:7e:76:05:ce:
                    f7:05:5f:b4:1f:7b:7b:d8:90:3a:30:e4:4d:61:63:
                    be:19:14:7e:2a:6f:7a:a1:a9:7e:65:98:3b:f1:04:
                    ea:25:c1:38:31:02:d3:10:c5:07:be:f6:1c:09:e5:
                    77:9d:a4:3a:98:f3:65:6c:a6:b1:72:5d:7e:80:c7:
                    f5:1a:16:75:49:21:ce:50:3c:e3:76:45:0b:2c:47:
                    f7:e3:75:96:73:1a:9e:fd:a9:93:3f:c9:68:2c:05:
                    ec:75:3f:76:bf:8f:da:2a:6e:f3:0c:a7:03:ff:83:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E9:7D:9F:2C:76:AE:AC:A4:A6:CF:05:44:0D:C6:10:EE:B7:B7:94
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:03:41:20:21:cf:b0:2b:e0:fb:e9:42:83:71:1a:82:80:a1:
         2c:e4:5b:25:c7:91:6d:6e:7f:4b:60:d3:28:08:05:65:24:34:
         8b:52:6e:4c:9a:cb:ac:89:21:8d:e1:02:8a:f2:9c:7a:99:b0:
         bd:f5:79:4f:0c:81:0a:eb:6a:5a:a5:91:16:eb:d8:0a:c5:95:
         6b:9e:c2:c4:30:3e:b3:40:97:e5:c9:6d:da:ad:ba:8d:b7:ca:
         f7:dd:42:bf:ce:64:a3:d9:b3:64:2c:b1:02:71:44:8e:72:f6:
         e1:c3:a7:21:23:b5:42:3d:f4:9a:8e:48:e8:ac:d4:01:46:de:
         11:96:4a:ec:cc:87:3c:58:09:99:54:2c:08:1d:5e:d6:6f:82:
         b1:d2:93:c8:01:e0:25:80:df:dc:49:cf:26:7a:08:e1:d5:29:
         d8:9d:67:29:56:d9:d0:1d:42:3f:8f:43:77:8f:d0:c1:d4:8b:
         6a:90:6e:80:f6:f6:90:17:1e:c5:f5:c3:b2:f5:e6:be:f0:79:
         3e:11:3b:77:91:38:6a:78:50:f2:78:4b:38:59:93:0c:12:94:
         16:68:59:44:a9:a2:ee:f8:81:e4:97:de:cf:95:c9:9d:fe:9b:
         55:91:49:f7:22:28:b6:78:dd:38:2f:e3:9a:00:dc:90:a7:84:
         24:5d:f4:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHcQOvZs0T3Hg3g/QUPSIbBSB8RQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDAyMjYwMDM0MTNaFw0yNTAyMjQwMDM5MTNaMDMxMTAvBgNV
BAMTKDMwRTk3RDlGMkM3NkFFQUNBNEE2Q0YwNTQ0MERDNjEwRUVCN0I3OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ADdKZDUFFxQ0p5n+bm0dPZUp
wT5rlskJ28i91Zg5kTx0qYfo7xAf1CFWzDoQdOjS1avG7ErLNoxhCeHMbmeelAq6
T1ucInE9fC1ZBQ9lwy1/KsMmor8b8fnkMf1VRN6h6ZXWdkV5G48JS8XxMSkQ6ltJ
R8BkdorWpOPZP0cbbQaid+HsSEcM2ckKvK01gABTfnYFzvcFX7Qfe3vYkDow5E1h
Y74ZFH4qb3qhqX5lmDvxBOolwTgxAtMQxQe+9hwJ5XedpDqY82VsprFyXX6Ax/Ua
FnVJIc5QPON2RQssR/fjdZZzGp79qZM/yWgsBex1P3a/j9oqbvMMpwP/g/JLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMOl9nyx2rqykps8FRA3GEO63t5QwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzMTJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAVT0zANBgkqhkiG9w0BAQsFAAOC
AQEAHwNBICHPsCvg++lCg3EagoChLORbJceRbW5/S2DTKAgFZSQ0i1JuTJrLrIkh
jeECivKcepmwvfV5TwyBCutqWqWRFuvYCsWVa57CxDA+s0CX5clt2q26jbfK991C
v85ko9mzZCyxAnFEjnL24cOnISO1Qj30mo5I6KzUAUbeEZZK7MyHPFgJmVQsCB1e
1m+CsdKTyAHgJYDf3EnPJnoI4dUp2J1nKVbZ0B1CP49Dd4/QwdSLapBugPb2kBce
xfXDsvXmvvB5PhE7d5E4anhQ8nhLOFmTDBKUFmhZRKmi7viB5Jfez5XJnf6bVZFJ
9yIotnjdOC/jmgDckKeEJF30/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org