Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139342e302f32342d3234203d3e20383334.roa
File:                     37372e37352e3139342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          iZpT9ptcEf6U9ON1ju/EcSF43mg9s4Sw9OAhIUZpqCA=
Subject key identifier:   03:2A:5F:51:10:9C:82:EE:77:47:38:1D:A1:43:9F:FA:CD:F3:57:34
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       7971F33FEA3B2C9AB9FB77533B3AE97E206C8178
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139342e302f32342d3234203d3e20383334.roa
Signing time:             Sat 17 May 2025 00:00:59 +0000
ROA not before:           Fri 16 May 2025 23:55:59 +0000
ROA not after:            Sat 16 May 2026 00:00:59 +0000
asID:                     834
IP address blocks:        77.75.194.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 02 Jun 2025 06:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:71:f3:3f:ea:3b:2c:9a:b9:fb:77:53:3b:3a:e9:7e:20:6c:81:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: May 16 23:55:59 2025 GMT
            Not After : May 16 00:00:59 2026 GMT
        Subject: CN=032A5F51109C82EE7747381DA1439FFACDF35734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:8b:88:37:fa:f0:fa:0e:22:80:ea:8f:a6:
                    70:e4:8f:14:24:9c:46:f7:01:c9:80:d6:f7:79:4b:
                    bf:25:11:2f:7d:2e:90:25:93:67:01:37:3c:c3:76:
                    ed:ef:9a:39:66:e5:5c:e2:69:5b:f1:49:d6:46:45:
                    35:e0:93:9d:53:2f:a8:2c:0b:1e:d9:36:48:66:e0:
                    3e:a9:d4:16:74:56:e5:f2:0b:49:0c:ce:58:43:1d:
                    e6:8f:bd:fc:8c:11:24:eb:2f:92:5a:3e:f9:74:90:
                    34:83:ae:60:e0:d7:07:1f:37:49:22:b9:ca:a1:b1:
                    ce:fa:fb:5c:1e:82:93:94:5b:e2:b7:aa:db:55:fd:
                    b8:c6:5b:f9:e9:94:62:69:0f:db:6a:e4:cf:bf:32:
                    9b:87:9a:0f:8d:52:23:1e:4e:22:cf:4f:98:ac:2a:
                    3b:bf:34:9c:ec:3e:bb:2c:00:02:9f:5a:b5:1a:65:
                    92:d6:6f:f6:a5:e3:30:08:a6:fb:a7:8d:80:29:dd:
                    26:ac:24:1f:ea:79:41:23:68:52:2a:35:43:3f:37:
                    c5:00:f0:e5:72:e2:4f:68:fc:5d:5f:61:ac:af:9f:
                    92:48:fc:5b:a0:27:b0:79:d9:e3:5b:bc:8f:9e:57:
                    db:3e:be:82:99:50:ec:b5:45:76:21:32:d4:8c:86:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2A:5F:51:10:9C:82:EE:77:47:38:1D:A1:43:9F:FA:CD:F3:57:34
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d3:43:37:97:c5:da:cc:1c:8e:c9:71:1c:82:fb:a8:19:5c:
         f7:6a:69:37:1f:81:2b:41:84:70:61:32:3a:2c:75:e7:7b:92:
         61:9b:af:7c:75:71:c3:4f:eb:8a:6e:89:5c:52:d6:78:98:ab:
         d6:4b:cb:0f:25:cc:58:c7:60:7c:b3:ad:0e:50:ae:a4:fe:cb:
         01:2b:e2:64:67:7f:c4:f4:69:95:70:a5:fd:e1:1a:84:08:8c:
         b0:4b:ba:27:e4:3a:b5:88:de:b6:5e:94:6e:8b:09:e4:3e:f5:
         da:b2:81:d0:1f:00:8b:ce:b4:84:a1:0c:da:4a:f3:c4:3e:21:
         f9:bb:2a:10:02:d7:d8:27:ed:d8:9c:ce:29:d8:c0:cc:67:f6:
         03:c9:c6:45:de:82:5b:33:fc:8d:7b:ed:fe:83:37:8b:3f:cb:
         c8:a7:a2:ce:d1:b2:9d:f4:a5:f6:a2:13:cd:04:eb:44:6a:47:
         7f:b2:6e:f5:fd:4b:57:99:08:52:94:33:a8:61:ae:3c:ec:c6:
         38:f6:f4:e2:35:59:f4:e7:e5:24:b5:06:3f:b3:fa:da:e0:56:
         de:50:af:ae:24:95:66:c3:ec:d5:d5:a8:4a:bc:54:5f:31:eb:
         5d:37:5e:a8:1a:2c:ea:42:49:0e:85:0c:52:7b:71:10:45:f8:
         6c:11:73:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 15:39:38 2025 by rpki-client