Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e20323132303237.roa
File:                     37372e37352e3139372e302f32342d3234203d3e20323132303237.roa (raw, json)
Hash identifier:          H/pSV878lSkQI1T9Lg3JkczoLiuH48vHgjZm1GkOsqE=
Subject key identifier:   4E:19:93:C8:F2:B6:BC:AA:5C:05:FC:D4:B8:0A:B9:B7:14:4A:30:58
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       73769E41E8856A3A4FFD46AF6466943D0CE1DD1A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e20323132303237.roa
Signing time:             Fri 08 Mar 2024 06:09:21 +0000
ROA not before:           Fri 08 Mar 2024 06:04:21 +0000
ROA not after:            Fri 07 Mar 2025 06:09:21 +0000
asID:                     212027
IP address blocks:        77.75.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Apr 2024 00:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:76:9e:41:e8:85:6a:3a:4f:fd:46:af:64:66:94:3d:0c:e1:dd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Mar  8 06:04:21 2024 GMT
            Not After : Mar  7 06:09:21 2025 GMT
        Subject: CN=4E1993C8F2B6BCAA5C05FCD4B80AB9B7144A3058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:45:c9:01:e3:fc:e3:4e:50:db:38:80:6d:f8:
                    49:d1:51:4c:c6:25:a3:ee:3d:b8:d6:0b:a3:c5:fb:
                    37:00:e2:fc:c6:5e:b8:b4:81:a2:9c:47:0d:8b:b7:
                    2f:13:68:9d:14:91:cc:04:54:c6:95:17:89:14:d0:
                    72:55:d6:4e:99:50:de:1f:a5:04:47:32:b0:e5:92:
                    ca:58:c5:23:7d:51:3d:7d:c4:37:ee:02:e2:1d:d0:
                    e4:3d:57:d8:2c:86:ff:a1:f6:28:f4:28:d4:bb:04:
                    72:60:d1:c7:b4:cd:98:ff:1c:93:1c:df:9a:c2:27:
                    2d:60:30:45:fc:b7:64:1e:e3:bb:f0:83:c5:c1:29:
                    97:79:b1:66:dc:fe:a7:d5:75:ae:b2:55:85:29:e0:
                    c2:b9:56:30:b5:2e:d3:a4:4e:e7:e9:76:1d:fa:59:
                    9e:03:7c:51:33:c9:20:32:aa:71:ae:a0:c2:d4:b4:
                    1a:d5:56:79:dc:b0:6b:ec:6e:83:14:cd:a0:f6:9f:
                    67:69:88:e4:5b:b8:c2:96:87:71:13:c4:84:d8:56:
                    8f:e5:b2:aa:e8:42:5c:69:2c:f0:c6:a9:8a:7a:fb:
                    f5:e1:73:39:bf:38:82:26:91:b7:5d:62:d2:ef:01:
                    9e:2f:ff:fa:97:16:52:2f:fe:27:34:28:8a:05:9d:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:19:93:C8:F2:B6:BC:AA:5C:05:FC:D4:B8:0A:B9:B7:14:4A:30:58
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e20323132303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:49:0d:9c:45:4f:d0:5f:f2:57:1f:da:67:6f:89:bc:5c:23:
         a2:ed:fb:c5:a1:58:4f:23:5d:c9:04:68:a7:8b:3d:4c:81:a7:
         92:1b:d9:f2:1b:ea:4f:65:45:56:40:84:6e:c5:eb:a3:c1:73:
         d6:c0:ca:2d:0d:2c:69:77:0d:a1:f4:42:6d:27:94:9f:c8:ab:
         8e:c9:68:f5:12:2d:b4:c8:b2:e9:67:37:83:d2:0b:25:6f:98:
         a2:a8:60:6a:55:b0:d4:9a:4b:da:0a:72:83:0d:31:5d:83:f3:
         b7:0c:a2:ba:77:81:9b:92:8e:57:53:4f:7e:6e:cb:be:48:af:
         0f:c0:79:5c:f1:43:e6:f1:a6:48:4e:28:31:c9:f6:b3:54:63:
         22:46:8f:33:d4:a0:85:0d:c9:77:13:ca:85:6b:a7:9b:9f:1d:
         a5:98:16:b8:2c:76:0c:8d:d1:e5:17:be:f2:28:71:c8:aa:dd:
         6d:a9:73:55:0b:a0:69:ab:22:3a:e1:b0:14:0d:a3:3a:c0:6f:
         03:18:5d:95:e7:0a:17:27:7f:ec:ba:0d:1f:d1:05:2e:a2:b7:
         28:db:dd:34:60:d1:a1:dd:17:4c:3d:c7:2c:97:a8:db:b5:f5:
         0f:3c:d0:7c:74:52:87:28:a7:e2:c4:f8:f1:22:1d:a2:59:82:
         92:21:76:4b
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUc3aeQeiFajpP/UavZGaUPQzh3RowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDAzMDgwNjA0MjFaFw0yNTAzMDcwNjA5MjFaMDMxMTAvBgNV
BAMTKDRFMTk5M0M4RjJCNkJDQUE1QzA1RkNENEI4MEFCOUI3MTQ0QTMwNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9RckB4/zjTlDbOIBt+EnRUUzG
JaPuPbjWC6PF+zcA4vzGXri0gaKcRw2Lty8TaJ0UkcwEVMaVF4kU0HJV1k6ZUN4f
pQRHMrDlkspYxSN9UT19xDfuAuId0OQ9V9gshv+h9ij0KNS7BHJg0ce0zZj/HJMc
35rCJy1gMEX8t2Qe47vwg8XBKZd5sWbc/qfVda6yVYUp4MK5VjC1LtOkTufpdh36
WZ4DfFEzySAyqnGuoMLUtBrVVnncsGvsboMUzaD2n2dpiORbuMKWh3ETxITYVo/l
sqroQlxpLPDGqYp6+/Xhczm/OIImkbddYtLvAZ4v//qXFlIv/ic0KIoFnVVXAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUThmTyPK2vKpcBfzUuAq5txRKMFgwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzM3MzcyZTM3MzUyZTMxMzkzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzEzMjMwMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1LxTANBgkqhkiG
9w0BAQsFAAOCAQEAkEkNnEVP0F/yVx/aZ2+JvFwjou37xaFYTyNdyQRop4s9TIGn
khvZ8hvqT2VFVkCEbsXro8Fz1sDKLQ0saXcNofRCbSeUn8irjslo9RIttMiy6Wc3
g9ILJW+YoqhgalWw1JpL2gpygw0xXYPztwyiuneBm5KOV1NPfm7LvkivD8B5XPFD
5vGmSE4oMcn2s1RjIkaPM9SghQ3JdxPKhWunm58dpZgWuCx2DI3R5Re+8ihxyKrd
balzVQugaasiOuGwFA2jOsBvAxhdlecKFyd/7LoNH9EFLqK3KNvdNGDRod0XTD3H
LJeo27X1DzzQfHRShyin4sT48SIdolmCkiF2Sw==
-----END CERTIFICATE-----
Generated at Mon Apr 8 01:11:37 2024 by rpki-client on console-ams.rpki-client.org