The best answer is the third one.
It definitely raises some concern that the time to factor
is much less than what was estimated here
but maybe that just wasn't a very good estimate to begin with.
It doesn't mean that RSA is fundamentally broken.
If we make our keys large enough,
unless we understand more about the cost effector, maybe that's still good enough.
So we'll talk about that next.
It is the case that the message could be decrypted.
Once you have these factors, it's easy to compute d.
The actual message was "The magic words are squeamish ossifrage."
