Route Origin Authorization
$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e20383334.roa
File: 36322e3134342e35322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2nEFGGX2DtTEMUdqknUlNJGvOqnS37q9gyOqp2e/1K8=
Subject key identifier: CE:F1:DA:AF:0D:40:24:73:3B:24:FC:C7:AA:55:37:6A:4F:57:C2:FE
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 2D3E8C0493DA3F92F21D9D4EC7CA3BE21A877491
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e20383334.roa
Signing time: Sun 18 Oct 2026 19:39:56 +0000
ROA not before: Sun 18 Oct 2026 19:34:56 +0000
ROA not after: Sun 17 Oct 2027 19:39:56 +0000
asID: 834
IP address blocks: 62.144.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Oct 2026 15:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3e:8c:04:93:da:3f:92:f2:1d:9d:4e:c7:ca:3b:e2:1a:87:74:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Oct 18 19:34:56 2026 GMT
Not After : Oct 17 19:39:56 2027 GMT
Subject: CN=CEF1DAAF0D4024733B24FCC7AA55376A4F57C2FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:59:ff:7d:b3:92:a6:54:32:10:95:09:ed:
d4:0e:2c:57:8e:56:24:f8:4f:a5:a2:05:0d:be:c0:
16:13:fe:40:8d:b8:9e:62:7e:00:d4:0b:e8:06:7d:
2b:cd:9d:6e:5e:92:bb:b8:e4:84:53:0f:53:dd:fe:
29:b1:c0:07:df:5c:16:49:03:f3:d6:db:95:a8:b4:
f0:e4:90:30:84:25:a0:83:70:3c:62:e8:05:1f:5c:
6e:f0:e4:8b:2c:21:a1:28:82:2a:02:53:8a:53:7e:
f4:54:00:f8:b4:21:42:fb:7a:51:83:aa:da:16:17:
ad:c9:0d:84:39:f2:6c:8f:ab:0f:57:a0:c8:61:42:
28:79:3c:2d:27:db:00:34:01:e1:38:55:6e:a5:04:
47:eb:a5:95:dd:28:ed:b2:1b:89:da:39:30:6b:21:
0a:a8:9b:f9:b3:5f:4c:8d:2e:6d:8b:d3:8e:56:59:
55:9f:36:a6:1c:89:4f:d0:1e:c2:a6:3e:b2:6c:e5:
2b:b0:a0:b9:15:59:01:a0:e0:91:cf:d7:82:73:48:
76:bf:86:74:8a:a8:c0:d2:e9:e7:cf:45:9c:a5:1c:
3d:b3:9d:36:f1:36:11:4a:15:63:6a:85:f9:ed:1d:
78:4a:de:b6:e4:c4:f3:1f:53:68:38:01:0b:f6:30:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F1:DA:AF:0D:40:24:73:3B:24:FC:C7:AA:55:37:6A:4F:57:C2:FE
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.144.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0c:6b:fc:be:fc:6b:1c:7e:90:8f:c2:a9:56:63:32:c1:dc:
89:96:72:8e:20:4a:1b:51:67:13:36:ca:01:ec:be:6f:4b:78:
47:68:e6:07:f7:fe:a1:83:da:03:de:f8:61:be:7c:5e:ac:35:
6b:b8:09:cb:d7:de:44:40:bb:85:70:08:d1:26:7d:f4:1d:88:
5a:c9:3e:b4:ce:dc:d4:99:e7:d7:45:4a:d0:6b:c1:74:4f:59:
4a:cf:8f:4d:fe:04:b4:95:f8:d7:e0:93:65:55:86:18:00:26:
3b:0a:9c:dd:de:4b:d9:a7:6f:59:36:56:eb:69:e6:82:79:98:
6c:99:68:0d:c8:92:9b:1c:26:db:80:53:4a:17:8d:41:e6:11:
03:30:2f:43:a7:ef:be:ad:5a:c5:7f:a3:08:6c:85:6e:3b:55:
ca:b7:00:03:a3:ff:c2:ed:4e:b2:8d:be:9c:e8:ed:4b:7c:f1:
b6:36:7a:08:30:a5:bb:2a:d8:dc:64:95:d6:86:a8:bd:a4:ea:
c2:83:18:be:1d:21:5b:96:9f:ab:85:e2:8a:8f:9e:fe:4a:a6:
91:9d:00:5f:5d:ed:55:87:a9:b4:f8:4d:c7:d1:58:55:eb:59:
98:a9:75:52:89:6c:06:09:c0:fa:ea:d3:aa:9b:41:48:a8:34:
10:13:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:59:36 2026 by rpki-client