Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20383334.roa
File:                     352e38332e3232312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          EQVkTTCfURK+lS9QHz10ynucwOFJ2LVbU5rs8JgHqj0=
Subject key identifier:   F2:E5:2D:28:46:B7:1C:9C:90:CB:DD:BD:B6:8F:15:41:04:BB:B7:4A
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       2F5FF94750FA0BFD0B592D886292FEFFA552A047
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20383334.roa
Signing time:             Fri 14 Jun 2024 00:02:19 +0000
ROA not before:           Thu 13 Jun 2024 23:57:19 +0000
ROA not after:            Fri 13 Jun 2025 00:02:19 +0000
asID:                     834
IP address blocks:        5.83.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 15 Jun 2024 13:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5f:f9:47:50:fa:0b:fd:0b:59:2d:88:62:92:fe:ff:a5:52:a0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jun 13 23:57:19 2024 GMT
            Not After : Jun 13 00:02:19 2025 GMT
        Subject: CN=F2E52D2846B71C9C90CBDDBDB68F154104BBB74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:fe:c3:d0:56:a9:ec:4e:49:6f:12:4f:4e:
                    1c:e5:d3:65:92:ea:e5:b9:ab:95:16:fe:d4:c1:f5:
                    4c:0f:fd:8f:69:09:c5:56:2e:df:85:52:b0:fd:d8:
                    22:17:f5:17:bf:be:42:51:57:78:ce:83:8f:44:1b:
                    17:7a:96:81:21:31:00:4b:ae:45:4c:3a:78:03:d0:
                    4c:0c:db:3b:ca:9e:63:a6:d6:9b:94:6e:13:1c:85:
                    0c:4a:b2:c4:16:56:07:47:be:2d:b8:72:89:f9:af:
                    d4:ad:23:72:a3:89:b5:b9:9d:9a:17:78:3f:6e:3f:
                    15:52:56:41:0c:0c:33:fb:c8:15:87:3e:10:b5:91:
                    0a:ff:30:9c:08:64:e2:1c:59:1b:0f:c5:a2:08:37:
                    23:88:a5:a7:cc:8f:6f:e5:b8:e4:fa:ab:79:27:61:
                    f8:f5:a8:3c:1c:23:8d:67:54:5c:46:fc:7e:be:21:
                    b5:63:87:43:9e:9e:b0:94:3f:b1:db:fc:04:1a:f5:
                    16:77:64:93:a2:2d:23:91:36:bd:70:dd:4e:1c:da:
                    21:e5:5e:1a:9d:92:69:a0:67:84:d0:dc:87:3e:dd:
                    14:52:2d:4b:12:69:88:12:4e:db:0d:a4:28:12:49:
                    72:38:24:66:6f:73:24:28:a4:0b:40:4d:61:3e:37:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E5:2D:28:46:B7:1C:9C:90:CB:DD:BD:B6:8F:15:41:04:BB:B7:4A
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:86:d2:2b:e7:e3:fd:b8:78:c1:da:46:60:fa:37:9a:25:2f:
         2c:7a:a3:74:fc:0e:4a:d2:66:96:80:0f:8b:55:40:81:9e:c4:
         50:33:51:47:fb:a8:c0:09:1e:fa:0a:0e:56:cd:8c:89:98:b0:
         82:fd:10:d0:aa:b3:bf:48:f9:5b:72:19:e6:95:71:bb:c5:8d:
         98:61:fa:24:e5:36:04:02:7a:24:f2:01:26:8e:65:5a:98:4c:
         c3:52:5b:a0:dc:d1:17:01:95:c4:af:4c:52:b2:fd:1b:5d:61:
         e6:e7:9d:f9:07:2b:68:b6:53:58:1e:c3:6c:48:a1:e7:d8:1f:
         a2:cd:bb:09:10:a3:5f:e8:b2:24:39:b9:5c:cd:dc:94:6f:c6:
         bb:fc:32:4d:4a:f5:54:a2:d7:67:a3:42:ed:97:f2:16:95:31:
         75:aa:ea:c4:21:28:85:14:a6:83:d3:57:ba:01:a3:b9:77:74:
         31:4b:14:76:0b:fe:3a:06:2b:bf:9e:b7:e6:a0:01:a2:b9:63:
         31:f4:8e:84:a5:4a:dc:e2:89:ee:ae:c6:3c:30:1a:16:8b:34:
         5a:b7:9b:16:50:78:13:12:83:19:d0:6e:f5:c9:0b:57:06:21:
         48:fd:f6:98:84:e6:f2:b4:c6:45:43:73:56:6d:36:39:2c:8c:
         71:05:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:42:59 2024 by rpki-client on console-fra.rpki-client.org