Route Origin Authorization
$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e20383334.roa
File: 36322e3134342e34302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: CvyNkk6THC+d6LsHMKgMO7nZMTVW2SERlrsMx4IyY5Y=
Subject key identifier: B7:6B:B3:92:E5:9F:E2:96:5A:07:AF:82:A1:9E:54:60:AA:49:3C:59
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 0A07385D624C5D0387807B4D635B410D0EF0EDB9
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e20383334.roa
Signing time: Fri 16 Oct 2026 09:18:47 +0000
ROA not before: Fri 16 Oct 2026 09:13:47 +0000
ROA not after: Fri 15 Oct 2027 09:18:47 +0000
asID: 834
IP address blocks: 62.144.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Oct 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:07:38:5d:62:4c:5d:03:87:80:7b:4d:63:5b:41:0d:0e:f0:ed:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Oct 16 09:13:47 2026 GMT
Not After : Oct 15 09:18:47 2027 GMT
Subject: CN=B76BB392E59FE2965A07AF82A19E5460AA493C59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:51:a7:75:11:76:79:f6:36:f3:be:66:f4:
85:bc:d4:72:08:f9:bc:36:5e:94:d7:28:02:9b:68:
49:6b:f0:55:ef:da:86:38:59:5e:fb:1e:74:d8:56:
fd:6c:60:16:48:2c:cf:20:7a:d9:68:80:3d:df:49:
32:4e:43:e8:20:00:46:46:e6:b6:7e:21:83:af:94:
3e:de:8f:90:f8:10:88:d6:81:17:23:f1:8a:a6:89:
e5:4f:16:84:71:68:1d:06:4f:fa:b4:27:75:88:63:
29:2b:fc:e7:c8:9b:e9:aa:60:44:67:50:24:39:6d:
14:59:30:32:a6:4a:bc:87:a6:f8:c1:ad:74:d1:41:
b8:66:08:d4:a1:b8:f9:19:bb:5f:a1:3c:c6:30:a5:
35:4b:63:38:c1:d2:cd:d9:28:f8:5f:9c:c6:c9:e9:
68:d3:1b:a0:eb:69:a8:ab:3d:cb:b6:7a:fc:ed:6c:
37:42:7c:7b:15:19:5b:2f:2f:a5:41:05:13:16:a6:
3f:39:fe:57:e3:60:bb:72:d6:ba:2b:79:99:56:7a:
01:a2:f3:ce:88:94:27:c4:1c:f3:eb:87:d8:ab:af:
30:45:fe:da:ab:fb:dc:a5:1b:fb:ec:e8:79:ca:83:
d4:15:bd:73:1b:83:53:df:ba:20:0c:53:28:a3:6a:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6B:B3:92:E5:9F:E2:96:5A:07:AF:82:A1:9E:54:60:AA:49:3C:59
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.144.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:ed:41:f6:54:a7:40:56:55:01:1f:b9:7c:38:b1:73:f0:a3:
c3:05:90:78:04:5d:b8:da:ed:22:62:7e:4d:e4:92:9a:1b:91:
02:c3:e8:8d:36:e8:4f:53:15:7f:a6:69:7e:ef:ce:e9:91:6d:
b9:86:24:d6:db:07:25:05:d6:88:ec:ad:28:aa:9c:97:4b:5a:
c1:fd:9c:e1:46:cc:54:b4:3c:2a:fa:69:37:88:b2:9b:5c:20:
d2:af:21:1c:1f:69:d6:5f:36:e1:01:7f:f6:72:c4:fe:30:26:
55:fa:5e:50:7a:32:2e:d3:e0:b3:30:99:31:b3:2f:b9:09:b2:
4c:95:8f:ad:23:70:b1:5e:9c:2b:3a:10:61:3d:c3:e7:45:6e:
6e:92:46:5e:cd:cc:62:2c:36:5d:db:84:14:8c:32:f7:82:8d:
21:9a:eb:6f:5e:3c:39:11:ca:38:f1:90:58:45:8d:39:73:fb:
dd:a6:0d:aa:2c:9d:3e:dd:20:5a:b3:ce:ce:92:df:f8:a9:09:
05:29:a7:58:04:96:cb:dc:2c:09:5b:ab:55:e1:de:51:54:d4:
94:ca:83:43:3f:ec:0a:f4:44:7c:47:db:14:5f:cc:04:5c:a1:
48:18:2b:d7:17:80:b7:92:75:47:10:1e:e0:25:8b:8c:5c:cf:
6c:2d:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:54:53 2026 by rpki-client