Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32322d3234203d3e20383334.roa
File:                     37372e37352e3139322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          8CoDrv3ndMnTO4sgYuR3QUYg7XdLoxtf+0RTQKZPtP4=
Subject key identifier:   4D:4C:32:23:2C:12:97:23:64:60:5D:04:55:10:36:9E:15:5E:A2:3D
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       2A9EF23C859DB386E7FA631198E1AE39E2CDBAE3
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32322d3234203d3e20383334.roa
Signing time:             Tue 07 Nov 2023 11:36:59 +0000
ROA not before:           Tue 07 Nov 2023 11:31:59 +0000
ROA not after:            Tue 05 Nov 2024 11:36:59 +0000
asID:                     834
IP address blocks:        77.75.192.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 08:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9e:f2:3c:85:9d:b3:86:e7:fa:63:11:98:e1:ae:39:e2:cd:ba:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov  7 11:31:59 2023 GMT
            Not After : Nov  5 11:36:59 2024 GMT
        Subject: CN=4D4C32232C12972364605D045510369E155EA23D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:78:36:36:43:51:af:f2:ad:58:f7:e8:c9:
                    31:20:95:7a:ef:1c:bb:1f:ec:0f:e1:cf:99:13:c8:
                    ff:06:79:4a:e5:10:51:59:e2:e4:8c:34:97:64:14:
                    28:b8:14:c7:bd:9b:40:19:93:12:c6:a2:41:5c:13:
                    b1:41:ff:52:73:9e:d2:0d:67:bf:d3:7d:79:5e:10:
                    34:42:e1:a5:f4:42:30:d5:39:43:2d:62:55:a6:8e:
                    86:cc:0f:12:5c:a4:8e:67:45:ec:06:65:dd:b6:46:
                    d7:35:6f:4b:ef:9c:e5:cc:7f:04:e6:bf:b6:6b:0f:
                    3e:8a:60:e6:d7:c3:bf:3f:9c:10:62:f5:14:1e:8a:
                    bb:2e:46:9b:9e:de:c2:f5:f0:bc:67:15:d1:10:51:
                    3c:2e:16:82:88:ae:33:30:1f:b9:32:60:f8:7c:68:
                    c7:c1:78:d9:2e:85:0d:4b:30:3d:6e:cd:45:5b:aa:
                    1c:e2:4a:ca:da:53:4b:ff:a7:31:08:4f:34:22:5a:
                    33:19:a7:b2:40:d2:a4:83:56:4a:c0:cb:2f:57:25:
                    32:ad:8c:1b:16:3b:b7:73:86:b3:0d:78:8c:15:ae:
                    93:7c:5e:65:0f:7e:a9:42:bf:54:7c:95:e2:e9:a2:
                    a6:3c:b7:6c:b9:76:fd:ec:03:da:5c:b3:b3:57:61:
                    23:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4C:32:23:2C:12:97:23:64:60:5D:04:55:10:36:9E:15:5E:A2:3D
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:6f:c9:fb:3e:15:2d:1e:aa:a4:75:13:89:ae:db:cd:82:
         50:94:5f:12:f5:05:fb:aa:b3:83:05:85:12:d5:d9:ab:1d:ce:
         cb:bd:cb:72:10:f1:6d:80:d9:c8:07:3c:5f:86:75:65:03:3e:
         f5:e2:45:5c:ee:9b:a8:58:17:0e:6d:f3:a5:4d:68:6c:ac:52:
         6f:bd:e2:e8:f0:2b:4b:59:8c:f3:e8:87:ee:68:d3:68:18:fc:
         ea:a2:b8:11:59:23:f7:3d:c1:5d:da:bc:57:b7:73:38:de:89:
         42:de:ce:83:37:09:19:a6:77:83:25:68:0e:c6:ea:70:24:6a:
         e4:5a:44:82:61:ad:17:89:35:df:04:9f:a5:ce:e1:6f:39:79:
         4c:03:49:c0:82:8e:3e:35:45:4f:3a:bb:b3:32:29:19:ad:1b:
         84:b4:18:5c:9a:02:ed:2b:73:37:53:ea:f6:8f:a6:2e:01:69:
         2d:4a:e2:63:0c:7b:0d:f4:09:89:13:e6:60:45:e9:1d:72:f0:
         e9:fb:c2:a7:a7:f5:42:7f:a5:a9:77:55:e6:9b:13:65:7c:66:
         19:c1:66:38:02:29:be:45:1b:47:2d:5e:7d:70:19:67:44:87:
         fd:4d:da:1d:5f:6f:94:73:c8:63:b0:e1:97:9e:81:6d:3e:5a:
         63:11:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org