Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20343030383636.roa
File:                     37372e37352e3139332e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier:          7H3xzP3qVGahIXXJvjLuzMx7bn8Co9v/5rWF+uH2AHA=
Subject key identifier:   0C:D8:4B:17:03:81:61:53:BF:98:67:E2:15:3E:CC:2E:3C:60:3A:63
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       5A87C21CD6FB7A14D187C302B3351FD2226A16E8
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20343030383636.roa
Signing time:             Mon 20 May 2024 07:13:46 +0000
ROA not before:           Mon 20 May 2024 07:08:46 +0000
ROA not after:            Mon 19 May 2025 07:13:46 +0000
asID:                     400866
IP address blocks:        77.75.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 20 Jul 2024 00:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:87:c2:1c:d6:fb:7a:14:d1:87:c3:02:b3:35:1f:d2:22:6a:16:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: May 20 07:08:46 2024 GMT
            Not After : May 19 07:13:46 2025 GMT
        Subject: CN=0CD84B1703816153BF9867E2153ECC2E3C603A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:70:6b:cd:dc:1e:2a:d6:e4:5e:61:fd:4e:
                    73:e7:50:c0:35:d5:5e:e1:ea:a7:73:a2:57:5d:36:
                    6d:c3:af:10:6f:5a:6e:e7:54:92:cb:20:02:81:33:
                    83:5c:f5:f1:e4:c2:b0:e0:8e:9b:9c:a3:bc:a2:56:
                    d3:25:0d:6e:03:6c:68:73:42:ec:4f:da:20:e7:aa:
                    d8:ac:1f:fe:93:32:af:76:8e:5a:c2:a2:65:06:46:
                    1e:ee:ae:85:28:76:17:f9:86:49:85:a2:f1:f4:47:
                    e8:45:80:97:e5:9d:6b:7d:a2:6b:5a:dc:f9:e6:94:
                    0b:c2:51:c9:45:5d:e1:ad:a6:12:6d:7b:83:22:47:
                    f1:0e:14:00:21:16:18:80:8d:53:84:90:3a:29:ab:
                    76:2c:5d:57:b3:c2:fe:8d:1d:87:b1:66:9f:e8:2a:
                    4c:a1:5c:7c:3d:a4:17:62:a1:67:ff:65:c3:2f:fa:
                    5f:4c:71:61:67:12:c5:f6:d4:1a:33:23:5d:d1:9a:
                    8e:9d:15:34:c8:3f:7c:e9:b4:bf:f7:13:8f:e0:69:
                    09:99:75:e2:a7:12:40:10:bb:65:05:9f:ce:59:03:
                    be:bb:b3:f8:3a:a6:f6:d1:56:5e:0f:61:43:77:8d:
                    b5:6b:6b:21:ce:08:97:9b:c0:73:81:fb:28:2c:b3:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D8:4B:17:03:81:61:53:BF:98:67:E2:15:3E:CC:2E:3C:60:3A:63
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20343030383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:fb:de:a0:ad:48:dc:ec:27:90:48:ca:fe:36:f0:7f:71:
         60:7f:73:a5:ce:77:d5:4e:08:d6:29:90:83:2e:32:3f:78:02:
         4e:b6:02:2c:ba:c0:47:ef:f7:f1:4f:d7:b5:e4:f7:b5:43:42:
         96:cf:f7:5c:9c:e1:33:16:77:3e:0b:63:6f:4d:a8:5b:a4:04:
         34:c8:fe:56:17:4e:1f:9f:a9:87:54:05:8e:6e:44:9f:2a:2b:
         cc:b5:f6:22:67:b3:3d:70:c4:5d:0e:73:91:08:87:67:00:41:
         d5:7d:68:9c:b6:8b:c5:26:3f:5b:0c:53:a6:64:85:d3:99:58:
         94:ad:ac:34:b8:da:f8:1b:e5:4e:e5:22:4b:4b:e5:b8:ba:21:
         0a:e9:d0:17:6c:66:00:0f:b7:d7:f2:1f:9a:61:0e:5f:85:fe:
         2a:87:bb:10:60:42:1f:62:f8:c1:02:71:0e:df:f4:35:16:b5:
         6c:94:06:ec:34:b8:07:c8:62:da:f7:f4:07:d5:10:02:39:ee:
         59:c6:b8:2b:c2:8a:1a:f2:4d:db:3b:3d:36:19:fd:24:cd:15:
         bf:fd:31:15:75:fb:dc:04:9a:1b:63:7f:91:1a:30:c0:fa:b1:
         5b:d8:b6:f6:33:26:52:2c:11:1a:62:aa:5f:a9:bf:9f:48:fc:
         d6:27:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----