Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e20313937373337.roa
File:                     352e38332e3232322e302f32342d3234203d3e20313937373337.roa (raw, json)
Hash identifier:          kU/YDgy6h5P8/OIENq7QOg1t/UIyvJLIGUmNyO0my14=
Subject key identifier:   0F:C2:87:EF:22:7A:AA:AA:BF:CF:2D:97:16:7B:10:48:98:A6:1A:D3
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       27AD2328DF3619D99362E47D1E1DC37C3C72027C
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e20313937373337.roa
Signing time:             Fri 03 May 2024 11:16:25 +0000
ROA not before:           Fri 03 May 2024 11:11:25 +0000
ROA not after:            Fri 02 May 2025 11:16:25 +0000
asID:                     197737
IP address blocks:        5.83.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 10:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ad:23:28:df:36:19:d9:93:62:e4:7d:1e:1d:c3:7c:3c:72:02:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: May  3 11:11:25 2024 GMT
            Not After : May  2 11:16:25 2025 GMT
        Subject: CN=0FC287EF227AAAAABFCF2D97167B104898A61AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:27:53:45:05:51:8b:51:e5:93:2b:51:5d:
                    c9:1c:9a:b2:0c:5d:6d:d4:66:a0:26:ae:29:37:3f:
                    37:58:52:d5:a0:43:f5:2e:70:9a:84:a5:24:74:b3:
                    4f:dc:e8:ff:82:45:cd:71:4a:b9:78:d0:c6:ac:4f:
                    01:a8:87:92:18:73:32:4b:ff:4e:d5:b0:a3:a3:61:
                    c9:12:97:27:ee:15:f3:25:79:33:92:24:d4:27:19:
                    2c:0a:53:45:50:49:91:c5:dc:b4:ec:97:ab:79:d9:
                    e6:16:32:0c:c5:d0:aa:b0:f3:00:fc:04:4b:2a:d7:
                    59:89:cc:7f:83:2d:7b:d7:4f:7c:10:ae:ea:f4:aa:
                    a6:be:3c:cf:d3:a2:94:4e:02:ea:1f:36:0b:58:9f:
                    b8:ee:4c:18:cd:ea:96:c0:7a:0b:19:06:c1:75:82:
                    70:99:15:ab:7c:93:38:17:a5:b7:76:38:af:fc:fc:
                    46:d6:60:c6:e5:d8:fe:c3:d7:b4:87:de:af:4c:cb:
                    31:48:90:87:5e:74:96:f7:0b:c0:5f:e9:8e:52:a4:
                    8f:f1:f8:24:89:8d:7d:fb:84:a4:b5:f7:c2:d6:73:
                    16:4b:ff:87:01:33:27:79:e7:29:3b:d3:8c:66:c4:
                    35:50:0c:2a:0c:f2:96:11:a2:3c:b2:77:aa:6b:44:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C2:87:EF:22:7A:AA:AA:BF:CF:2D:97:16:7B:10:48:98:A6:1A:D3
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e20313937373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:19:56:87:d7:96:a9:34:e7:34:92:81:85:65:42:64:0c:87:
         40:25:84:78:ae:aa:50:01:fc:19:37:48:a1:46:89:71:cf:8b:
         76:3f:c2:72:26:8e:92:34:66:41:0b:41:06:e7:6f:cf:af:82:
         78:5d:38:d1:54:39:1a:b9:5b:85:a7:76:d7:ce:53:da:84:29:
         b2:43:27:d5:62:38:a7:c3:06:43:36:60:95:a1:72:fa:a4:65:
         f4:c9:1a:80:1e:a2:a3:32:ef:aa:86:29:d3:b6:dc:78:60:de:
         cb:67:63:e4:03:f8:f8:57:2a:3e:1f:6a:26:29:46:6b:4e:64:
         f7:cc:7a:41:ec:8e:00:c5:ec:c7:70:a9:ba:fe:ea:7e:09:21:
         1d:27:44:61:c4:f3:44:63:0a:a8:cd:3a:7c:6f:82:31:2b:4c:
         f9:9c:8e:c1:e7:75:9e:0c:5f:2d:b8:73:ba:04:e2:2c:c7:f5:
         21:1c:38:b4:88:c0:33:41:f5:c0:80:6d:ef:56:76:aa:9d:90:
         af:44:24:2b:12:0b:66:5c:29:a0:ba:6d:4d:9b:a3:47:09:e3:
         ce:ce:07:0c:d0:f4:f9:a7:81:ed:d4:f2:0b:81:a3:2d:b1:97:
         e7:6d:06:a6:ad:2d:f7:bf:8e:5c:e8:07:34:ab:70:c3:86:cb:
         e8:9f:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 16:06:20 2024 by rpki-client on console-ams.rpki-client.org