Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32342d3234203d3e20313939323937.roa
File:                     37372e37352e3139322e302f32342d3234203d3e20313939323937.roa (raw, json)
Hash identifier:          UiU3QE9BdZ9glSBZGL/I5lociIgQrYQGHmWbAZN25Iw=
Subject key identifier:   98:1C:70:1D:40:8E:8E:A7:B5:F1:F4:8E:AC:7B:3D:CA:38:31:35:14
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       41124026A77A5DBA2CDDB51905E724C06181F199
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32342d3234203d3e20313939323937.roa
Signing time:             Tue 20 Feb 2024 14:59:12 +0000
ROA not before:           Tue 20 Feb 2024 14:54:12 +0000
ROA not after:            Tue 18 Feb 2025 14:59:12 +0000
asID:                     199297
IP address blocks:        77.75.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:12:40:26:a7:7a:5d:ba:2c:dd:b5:19:05:e7:24:c0:61:81:f1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb 20 14:54:12 2024 GMT
            Not After : Feb 18 14:59:12 2025 GMT
        Subject: CN=981C701D408E8EA7B5F1F48EAC7B3DCA38313514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:5a:6b:57:13:37:72:8b:eb:86:f3:54:e4:
                    ed:2c:49:9c:43:17:e0:2e:b8:fa:c5:96:0f:72:16:
                    cc:2c:4d:7f:cc:69:e0:f4:61:90:c9:a4:a5:c6:3e:
                    5d:3f:90:53:e6:08:25:6f:8e:ed:37:37:ec:4f:ca:
                    b6:8f:76:66:42:7c:f0:ba:e5:a3:ba:59:81:b1:3c:
                    0b:15:4e:6c:f7:dd:17:30:19:ed:08:4f:42:4f:ba:
                    cf:19:ff:12:28:18:50:f0:60:b6:c2:72:d2:cc:1e:
                    6c:6d:0a:34:a4:e5:71:2a:f2:f0:1c:b2:49:14:b0:
                    a7:f9:56:9e:c4:c7:7d:57:1f:97:6e:8c:e8:47:fd:
                    f2:62:98:33:b8:4c:32:67:94:04:b2:a0:ae:a2:ea:
                    f5:9c:06:84:f1:ed:9a:48:c2:49:20:b8:51:b7:0f:
                    de:32:79:7c:ff:10:eb:ad:a0:cb:ef:49:1a:e3:bb:
                    9e:a9:2a:2f:8c:56:5d:ce:4d:eb:75:92:d2:f2:dd:
                    7b:82:46:02:fc:53:16:ce:1b:75:10:70:cd:5e:03:
                    f2:cb:ff:5e:d9:e9:09:47:53:a4:5d:66:0e:ba:e9:
                    50:64:e5:67:32:1c:9f:de:62:9c:db:a3:eb:cd:f0:
                    4a:34:26:87:f5:55:f9:ae:4a:9a:93:8f:5b:97:fc:
                    63:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1C:70:1D:40:8E:8E:A7:B5:F1:F4:8E:AC:7B:3D:CA:38:31:35:14
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32342d3234203d3e20313939323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:0e:ba:48:f0:bf:44:6d:3d:3a:30:c0:fd:a4:76:20:ce:14:
         34:c6:97:02:28:1e:d8:0f:3a:94:c9:9a:a8:2f:b1:5e:10:bf:
         de:1e:fc:31:1a:f7:2e:95:59:4c:b3:bc:a3:ee:15:8d:1a:53:
         6a:d6:14:dd:4c:e4:07:4d:b6:44:af:39:e5:68:84:a1:9d:21:
         65:10:29:b2:77:5b:61:01:f1:08:47:34:07:ee:e4:91:13:9f:
         a5:ff:62:97:82:d2:f4:10:36:57:72:f0:7a:96:01:27:b0:6b:
         4a:58:3a:31:8f:a2:ce:92:7f:a6:00:b2:2e:30:b9:74:d0:17:
         82:04:9d:e8:85:87:e8:5a:43:64:5b:af:fe:1c:1d:53:c0:e1:
         3b:f6:33:03:3f:95:b4:f1:bf:b7:b8:e2:59:88:e6:66:0e:f9:
         bc:00:90:85:c4:7a:fd:11:da:89:0e:65:3d:87:d0:aa:69:6b:
         fe:b5:42:a8:b7:71:f1:40:5c:b2:80:e1:1e:59:5f:de:56:f3:
         a7:4e:65:3e:3e:64:72:9b:e5:54:2e:9e:fb:dd:27:54:4d:04:
         b1:72:4f:2a:14:b5:09:41:a9:cb:b6:29:21:fb:68:cf:33:06:
         ac:26:71:5f:6f:8e:c6:0e:21:e2:35:db:ab:1e:fd:c4:9c:9f:
         2c:96:2e:a2
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUQRJAJqd6Xbos3bUZBeckwGGB8ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDAyMjAxNDU0MTJaFw0yNTAyMTgxNDU5MTJaMDMxMTAvBgNV
BAMTKDk4MUM3MDFENDA4RThFQTdCNUYxRjQ4RUFDN0IzRENBMzgzMTM1MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9FprVxM3covrhvNU5O0sSZxD
F+AuuPrFlg9yFswsTX/MaeD0YZDJpKXGPl0/kFPmCCVvju03N+xPyraPdmZCfPC6
5aO6WYGxPAsVTmz33RcwGe0IT0JPus8Z/xIoGFDwYLbCctLMHmxtCjSk5XEq8vAc
skkUsKf5Vp7Ex31XH5dujOhH/fJimDO4TDJnlASyoK6i6vWcBoTx7ZpIwkkguFG3
D94yeXz/EOutoMvvSRrju56pKi+MVl3OTet1ktLy3XuCRgL8UxbOG3UQcM1eA/LL
/17Z6QlHU6RdZg666VBk5WcyHJ/eYpzbo+vN8Eo0Jof1VfmuSpqTj1uX/GOPAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUmBxwHUCOjqe18fSOrHs9yjgxNRQwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzM3MzcyZTM3MzUyZTMxMzkzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzkzOTMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1LwDANBgkqhkiG
9w0BAQsFAAOCAQEAVQ66SPC/RG09OjDA/aR2IM4UNMaXAige2A86lMmaqC+xXhC/
3h78MRr3LpVZTLO8o+4VjRpTatYU3UzkB022RK855WiEoZ0hZRApsndbYQHxCEc0
B+7kkROfpf9il4LS9BA2V3LwepYBJ7BrSlg6MY+izpJ/pgCyLjC5dNAXggSd6IWH
6FpDZFuv/hwdU8DhO/YzAz+VtPG/t7jiWYjmZg75vACQhcR6/RHaiQ5lPYfQqmlr
/rVCqLdx8UBcsoDhHllf3lbzp05lPj5kcpvlVC6e+90nVE0EsXJPKhS1CUGpy7Yp
IftozzMGrCZxX2+Oxg4h4jXbqx79xJyfLJYuog==
-----END CERTIFICATE-----