Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e203631333137.roa
File:                     37372e37352e3139372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          DhFiX9xmLu8r83yNs+EYZsyGxCX0thZOUiM/RUMROew=
Subject key identifier:   2A:0C:F5:19:2E:CE:6B:FF:0D:A0:AE:1E:80:A2:31:A2:66:28:48:6B
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       07ED11117CA65A3A1EB6D300B72420D874551658
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 07 Nov 2023 11:36:41 +0000
ROA not before:           Tue 07 Nov 2023 11:31:41 +0000
ROA not after:            Tue 05 Nov 2024 11:36:41 +0000
asID:                     61317
IP address blocks:        77.75.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 21:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ed:11:11:7c:a6:5a:3a:1e:b6:d3:00:b7:24:20:d8:74:55:16:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov  7 11:31:41 2023 GMT
            Not After : Nov  5 11:36:41 2024 GMT
        Subject: CN=2A0CF5192ECE6BFF0DA0AE1E80A231A26628486B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0d:af:92:88:3b:92:da:45:ac:88:52:dc:d0:
                    b9:37:1f:39:52:3f:66:2f:bd:50:fd:21:cc:18:aa:
                    76:b8:71:00:21:d9:97:2b:ed:76:a1:78:37:c1:5f:
                    09:02:f0:e6:46:cb:59:7f:b4:2f:ad:9a:d4:fb:d3:
                    29:05:c9:32:07:58:31:ba:50:6a:3b:a8:88:22:a4:
                    5c:61:72:f6:f1:e8:a6:73:bc:3c:c2:f3:4c:7e:2b:
                    f3:f5:f3:5e:93:7e:7b:03:db:c8:82:af:39:dc:b5:
                    6e:c1:a9:6c:7d:ad:1a:93:2e:69:46:98:45:56:54:
                    38:de:ad:86:58:fc:29:36:74:e7:ff:f3:da:ee:58:
                    12:72:54:f7:6e:26:35:ca:5b:e1:e5:78:40:a8:50:
                    b9:bb:77:11:00:5c:89:a4:d8:ed:d8:85:1c:4f:b0:
                    b6:0b:18:52:df:5b:e9:fc:32:20:c7:7a:77:bf:72:
                    df:8a:b5:87:8b:35:d4:e2:0e:be:9b:95:ce:19:0b:
                    bd:f8:36:43:b4:a6:07:9d:2c:c1:42:08:9c:8f:e6:
                    af:6c:0a:52:cf:2c:91:1c:99:04:f3:8a:9d:5f:28:
                    c3:ec:77:ba:d1:3d:dd:5f:dd:6a:0d:ea:36:a3:55:
                    b6:66:90:c7:27:41:3a:4d:c1:3c:8c:8e:f5:8c:da:
                    ec:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0C:F5:19:2E:CE:6B:FF:0D:A0:AE:1E:80:A2:31:A2:66:28:48:6B
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:cb:89:fa:ee:6a:1e:23:97:d5:24:72:b4:81:09:d3:3f:b8:
         8c:a2:5b:11:1c:1d:01:dd:ca:93:b4:7a:6e:97:d4:b4:e1:ad:
         c6:9a:93:a1:1f:27:dc:3b:7d:be:67:2d:02:8c:9a:25:6d:f3:
         30:97:5c:02:13:b2:8c:16:e9:c6:ac:08:1e:b6:e8:40:ec:ca:
         0e:11:78:a6:36:2f:fb:10:71:3f:85:f1:60:51:21:fc:c8:82:
         05:58:bc:b4:23:53:02:87:88:25:09:33:9d:4a:ac:00:59:b6:
         0c:a4:87:62:d6:12:ef:45:63:16:b9:4b:b2:44:b8:ad:c8:eb:
         47:7e:38:b8:ed:d3:f8:9e:70:94:59:87:7f:0d:28:74:76:34:
         95:aa:64:ef:86:9b:b8:33:fb:8e:8f:cf:56:77:b4:3c:39:65:
         1f:f7:f8:87:c8:d2:dd:2c:ac:99:53:ee:d9:1e:3c:ac:a4:b1:
         d5:2b:d1:6c:99:39:e3:bf:01:a6:ed:ab:91:56:b4:66:14:a6:
         b8:26:fe:1e:0c:99:25:4e:e8:f5:b7:1b:51:da:34:bd:84:f5:
         8c:43:ee:9d:e1:48:e2:b8:3d:d3:09:f1:d2:a5:1c:7c:bb:14:
         a9:38:af:27:c9:f7:8c:69:bd:d8:50:74:0f:02:3e:a1:50:e0:
         14:f3:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 00:13:27 2024 by rpki-client on console-ams.rpki-client.org