Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32322d3234203d3e20383334.roa
File:                     352e38332e3231322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          TIoD0kJkfrFWPcnoV2k69MDD/gyV+Kkhk18Q+zCnahQ=
Subject key identifier:   52:D3:F2:39:A1:EF:0E:A7:EE:89:2F:56:72:71:88:C5:32:04:52:8C
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       418ACC75B9038D2A6CB80580673755884B7CA4AE
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32322d3234203d3e20383334.roa
Signing time:             Sat 24 Feb 2024 20:56:13 +0000
ROA not before:           Sat 24 Feb 2024 20:51:13 +0000
ROA not after:            Sat 22 Feb 2025 20:56:13 +0000
asID:                     834
IP address blocks:        5.83.212.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 00:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8a:cc:75:b9:03:8d:2a:6c:b8:05:80:67:37:55:88:4b:7c:a4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb 24 20:51:13 2024 GMT
            Not After : Feb 22 20:56:13 2025 GMT
        Subject: CN=52D3F239A1EF0EA7EE892F56727188C53204528C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:4f:45:21:ca:2a:21:70:94:4c:83:4c:8a:
                    07:7e:a9:49:d0:f0:7e:75:a1:68:a8:d4:6c:d8:99:
                    d4:9b:e7:14:38:bb:fb:33:6f:1b:dd:0d:17:5c:dd:
                    24:c5:78:99:d8:90:d2:6a:9b:d8:ab:6d:d0:18:1a:
                    ad:20:cb:10:95:53:d8:cc:9a:e3:c2:3b:b6:21:d7:
                    3b:95:6a:d2:d3:8b:42:8d:a8:86:bd:1f:bb:17:56:
                    a4:63:f4:4c:fe:df:28:c1:09:14:e3:34:e6:ae:69:
                    e2:ac:d1:3a:b6:e6:61:f9:93:99:0a:b2:48:dd:ae:
                    66:b7:89:e2:76:68:43:2d:40:9d:07:0b:7b:6a:7e:
                    a2:c1:d5:d6:73:89:45:d4:f5:c2:ed:f2:3e:33:03:
                    47:48:6a:5f:74:2b:0f:6a:9e:7e:e6:19:44:55:a2:
                    0b:5c:ac:e0:03:ad:55:15:e3:e7:a4:20:92:57:de:
                    73:ab:c4:40:39:2b:bb:d3:47:d3:e8:15:8e:29:21:
                    60:24:2f:0c:92:f9:59:e3:3e:17:cb:5b:16:99:c3:
                    c3:ae:83:85:be:e4:e9:f1:fb:66:41:74:cd:8e:4a:
                    25:86:26:1d:5e:5d:53:1b:90:12:c3:a1:97:02:8f:
                    05:a4:6c:ed:8d:d8:5c:4a:d1:4f:ef:ae:64:58:fa:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D3:F2:39:A1:EF:0E:A7:EE:89:2F:56:72:71:88:C5:32:04:52:8C
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:61:47:e6:ba:74:76:75:49:a5:99:07:e0:42:6b:81:10:db:
         ca:df:3c:93:4c:2c:b7:74:0c:86:fe:e7:22:53:5c:f5:09:f4:
         2b:f8:2b:56:37:20:e8:be:58:ee:4c:b6:2d:2a:1e:c7:83:30:
         82:2a:0f:a2:a8:d9:43:17:e4:0a:fb:b1:1f:45:30:15:35:e1:
         8a:e7:06:e9:74:14:45:0f:5b:8d:29:55:c0:ff:fe:e5:bd:10:
         82:62:23:81:bf:39:6a:ed:44:5a:15:e1:4b:3b:eb:aa:bc:c9:
         de:1b:72:17:24:a4:63:9c:ac:45:5f:59:56:2d:b1:53:6b:f5:
         23:16:de:2e:f8:31:ec:fa:be:96:12:40:62:4b:1d:c5:9a:3b:
         cf:83:6e:a4:82:2b:3b:b1:f8:9a:b5:5c:b8:ba:88:99:01:61:
         b3:69:b4:ee:25:1a:42:6f:5c:47:5c:e2:f6:24:cc:05:1f:54:
         68:12:a4:b0:72:7d:00:e4:17:7d:6b:38:f0:0d:33:b9:65:61:
         ae:82:e5:09:5c:6f:b8:05:e4:8c:e2:af:a7:75:cd:a8:ae:5a:
         93:40:57:b5:a3:cb:ea:60:c8:3e:d8:b8:03:d2:67:5c:77:83:
         34:0d:b5:98:47:25:d4:17:92:ae:6b:4a:13:59:3b:12:c2:e6:
         47:fd:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org