Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32342d3234203d3e20383334.roa
File:                     37372e37352e3139322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          LQDvhigKSyU/8cWunFd76WpcT/055xudCPvuxVUudIQ=
Subject key identifier:   9E:90:C6:8D:BF:84:D0:E4:EC:43:FC:6A:09:A6:9F:1C:5D:B8:2D:33
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       433CED47B5A196D1753FCC19AEE1A7D55149590B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32342d3234203d3e20383334.roa
Signing time:             Wed 20 Mar 2024 00:00:56 +0000
ROA not before:           Tue 19 Mar 2024 23:55:56 +0000
ROA not after:            Wed 19 Mar 2025 00:00:56 +0000
asID:                     834
IP address blocks:        77.75.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 27 Mar 2024 20:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3c:ed:47:b5:a1:96:d1:75:3f:cc:19:ae:e1:a7:d5:51:49:59:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Mar 19 23:55:56 2024 GMT
            Not After : Mar 19 00:00:56 2025 GMT
        Subject: CN=9E90C68DBF84D0E4EC43FC6A09A69F1C5DB82D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:e3:24:7a:d9:2d:27:28:88:67:48:9a:df:
                    b2:eb:e1:1e:13:88:71:de:34:3b:8f:be:17:77:4e:
                    59:d6:dd:14:34:81:4c:9c:e7:b5:6c:39:29:53:42:
                    7b:be:20:02:f9:05:ef:8b:b6:44:b2:e9:84:f9:d3:
                    5b:2d:57:66:3d:7c:66:5c:54:5e:21:c1:ea:4e:96:
                    2c:dc:46:b8:11:a1:2d:f6:65:e9:ca:af:be:ce:de:
                    18:a9:c8:de:5c:9b:4f:fc:25:14:9f:78:71:88:22:
                    6b:d2:6c:74:4e:23:30:23:97:56:a1:80:28:c4:6b:
                    29:71:8b:a6:49:fe:ab:2e:cd:43:57:be:b1:d9:1f:
                    62:3c:86:bf:3b:16:df:c4:c4:9f:c9:79:63:29:8b:
                    69:fd:78:85:ac:df:fd:2a:9c:27:5b:60:3a:e5:ef:
                    a5:3d:f5:c7:2c:6b:8a:ae:79:38:f2:f0:cf:b5:4e:
                    a6:eb:51:a5:6f:59:89:55:59:26:3b:ca:b0:06:26:
                    e8:33:79:6f:35:b1:41:9e:0c:80:aa:95:d2:f9:2c:
                    3e:61:e7:9c:73:06:87:d8:8e:43:8b:6f:db:7e:1d:
                    9c:b7:98:5b:88:15:b6:48:12:d6:b8:b5:4f:3d:e1:
                    96:9f:e2:5d:de:cd:e4:89:23:08:95:42:69:9a:68:
                    3b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:90:C6:8D:BF:84:D0:E4:EC:43:FC:6A:09:A6:9F:1C:5D:B8:2D:33
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:e2:f3:5a:8f:0b:4b:07:45:2b:70:a2:7b:5e:24:53:7a:6e:
         29:ce:75:49:55:2f:b7:8d:49:01:6f:f0:af:71:0c:97:17:f8:
         9a:e4:0b:2c:72:a9:39:0e:e4:8e:79:5b:5e:83:c0:8e:59:ab:
         91:70:64:09:2b:99:13:2f:a5:7f:bc:e5:18:1b:37:bd:d8:ab:
         3e:f0:1f:ef:22:4e:27:4b:7b:4c:bd:fe:d6:4b:f4:26:44:40:
         77:f9:22:54:41:99:00:16:25:83:68:bc:4a:29:31:5a:0d:cb:
         c3:1f:56:2a:9d:ee:63:d4:a5:a8:f0:bc:d5:93:6c:aa:3a:8a:
         89:f4:ed:49:b4:d8:50:a2:f8:de:3d:a7:cf:65:f7:7b:62:fb:
         34:82:56:27:19:af:0c:ad:9f:27:cc:ab:27:a1:c0:c7:60:05:
         93:c5:18:e1:2a:a3:e1:d5:1d:59:67:9e:1a:ad:38:a3:2b:49:
         a9:fe:9d:28:2b:42:6a:52:72:a9:52:3a:0a:d9:aa:e5:2f:4b:
         da:e4:39:c9:c8:df:28:99:ba:3c:81:fe:bc:7b:9c:80:9c:31:
         88:58:99:95:fc:c3:b4:dc:0e:cd:02:fe:99:2d:ae:4a:f8:97:
         28:9b:ab:e7:09:d7:85:ea:81:0e:0a:1c:f7:d1:de:79:ed:2a:
         48:d4:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org