Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20313938353130.roa
File:                     37372e37352e3139332e302f32342d3234203d3e20313938353130.roa (raw, json)
Hash identifier:          Cjw3jrWkjOea+4X3ATa7eptB8wmoQYMs88z5Vn4BoPM=
Subject key identifier:   1A:C4:23:B7:F4:DF:CE:D1:E1:0E:B9:B2:C4:89:D5:AB:4E:54:9A:E6
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       7B0FBA82EB033639E8CADC5A89CE0374C78A0202
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20313938353130.roa
Signing time:             Thu 04 Apr 2024 10:22:30 +0000
ROA not before:           Thu 04 Apr 2024 10:17:30 +0000
ROA not after:            Thu 03 Apr 2025 10:22:30 +0000
asID:                     198510
IP address blocks:        77.75.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 04 May 2024 00:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0f:ba:82:eb:03:36:39:e8:ca:dc:5a:89:ce:03:74:c7:8a:02:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr  4 10:17:30 2024 GMT
            Not After : Apr  3 10:22:30 2025 GMT
        Subject: CN=1AC423B7F4DFCED1E10EB9B2C489D5AB4E549AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a0:79:53:3a:47:b5:af:b3:be:52:82:ea:9f:
                    a1:be:1c:a3:80:a9:b1:2d:f6:33:37:80:59:4e:67:
                    46:46:5d:a1:a5:da:44:ec:0c:3c:41:7c:2f:14:24:
                    ee:7f:72:df:94:c7:2e:8f:23:ff:71:78:02:f3:08:
                    19:32:1c:c2:25:76:b3:15:7a:bc:1f:d6:75:62:c3:
                    e8:a9:15:dc:8b:af:d0:f5:10:2c:d9:55:35:04:27:
                    39:dd:10:a9:21:ca:b2:0a:66:4d:31:0a:b0:bf:bb:
                    9b:31:7e:52:a8:c4:5c:8b:91:96:90:fd:d6:8f:51:
                    2d:1a:91:62:83:dd:a6:d5:4b:76:eb:2d:75:2a:9e:
                    50:6f:17:1a:10:3d:fc:f4:02:6d:37:d5:55:af:fb:
                    cf:2a:4c:75:51:df:c6:25:35:71:a5:a8:a1:c9:fb:
                    09:c8:d4:a9:c3:95:e1:ff:43:18:82:6a:f2:3a:90:
                    f6:45:94:95:30:45:0e:3a:2d:09:88:e3:c2:2d:dc:
                    79:41:d1:4c:4b:4d:b9:d8:0d:5c:e2:7f:0e:5c:50:
                    ad:d6:74:61:0f:3f:8b:c1:f7:50:9a:35:5b:d9:62:
                    7f:ec:a9:f1:5a:cb:64:9d:17:51:7c:2c:49:e4:4a:
                    30:8d:12:4e:ab:66:d1:87:56:ef:80:25:02:af:3d:
                    10:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C4:23:B7:F4:DF:CE:D1:E1:0E:B9:B2:C4:89:D5:AB:4E:54:9A:E6
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20313938353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:86:25:e0:9e:f0:55:5b:06:31:fa:8b:5e:96:f6:55:29:15:
         fa:3f:b3:0d:7e:59:02:e0:86:6c:63:8c:9c:cf:e7:2d:52:fc:
         2a:57:cc:fd:96:29:e3:5d:5f:ff:7b:79:b2:b6:4b:88:63:fe:
         76:89:2e:b7:af:70:f9:36:eb:77:b1:1d:b2:dd:65:c8:67:33:
         e1:79:b8:23:15:dc:ec:b9:60:c7:54:c2:2c:02:fd:bf:ed:fc:
         52:88:0b:d4:bb:1a:69:59:8c:8b:33:a1:d3:44:c4:c5:e4:01:
         7c:f9:1c:4e:cf:42:76:ca:a9:b6:f3:b4:18:7c:5a:83:4d:b8:
         e8:57:5f:40:63:f8:99:f9:b7:39:a5:8d:f7:66:af:2f:3a:1a:
         35:9e:91:fa:36:90:79:ee:60:05:a7:02:82:02:b8:79:a9:67:
         44:c3:ff:6f:e9:84:45:e9:f2:46:0d:7d:6d:86:e5:cb:b0:bd:
         c6:66:68:b9:95:18:74:ad:0f:8e:a3:2d:b5:5c:d7:94:c3:bb:
         79:38:60:e4:60:44:3e:63:78:80:22:5f:fd:6c:e5:63:d0:88:
         07:17:22:60:80:18:72:80:ef:70:8c:35:a1:0c:bb:9e:1b:41:
         fb:fd:22:60:f1:cb:5c:1b:83:06:c9:a5:ca:a1:ce:7a:f1:77:
         6d:70:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:19:21 2024 by rpki-client on console-ams.rpki-client.org