Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/322e35362e3235342e302f32342d3234203d3e20383334.roa
File: 322e35362e3235342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ucBTM5VHBukzGIrTLGqxurcP7BtlWzQGwX0oH4botEQ=
Subject key identifier: 83:5C:F9:0D:AF:6D:41:E2:EB:57:27:8E:6E:1E:98:9A:80:F5:46:22
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 6AB3C7679F91FD88130CB3EE5F007323B60CCACD
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/322e35362e3235342e302f32342d3234203d3e20383334.roa
Signing time: Thu 13 Apr 2023 10:30:03 +0000
ROA not before: Thu 13 Apr 2023 10:25:03 +0000
ROA not after: Thu 11 Apr 2024 10:30:03 +0000
asID: 834
IP address blocks: 2.56.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b3:c7:67:9f:91:fd:88:13:0c:b3:ee:5f:00:73:23:b6:0c:ca:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Apr 13 10:25:03 2023 GMT
Not After : Apr 11 10:30:03 2024 GMT
Subject: CN=835CF90DAF6D41E2EB57278E6E1E989A80F54622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:95:a8:ef:3f:00:c7:c1:22:b8:ee:2d:28:
ee:e5:2c:77:1f:bb:d3:cd:b3:4b:0e:19:8a:78:38:
35:5b:d8:b4:a4:85:65:a3:dd:a7:45:13:23:1a:bd:
6e:d8:b6:07:f5:dd:50:99:22:31:2d:59:64:eb:56:
6d:c5:52:74:69:f5:3f:c6:d2:9d:57:b3:a8:86:f1:
7b:b0:91:6e:54:62:06:73:5a:6f:1b:22:74:45:24:
04:1c:f5:9f:e5:29:d4:9a:24:e2:ae:74:50:73:0a:
c5:c0:bb:4c:c7:27:2e:13:0c:81:6d:92:cc:5d:67:
07:08:3c:1f:24:00:58:c2:bc:c3:86:5c:fa:1b:ca:
65:05:69:d2:32:de:10:14:bf:2a:53:e7:0e:84:7f:
ce:d0:e4:91:c8:a6:fc:ee:03:26:46:77:84:8f:96:
91:5a:f7:82:b7:be:c2:41:98:04:9a:4d:70:25:f6:
30:5e:ae:77:92:3f:68:2f:23:4c:cb:0c:bc:83:87:
79:39:94:7f:5a:9b:55:83:8e:fa:1a:56:80:62:d8:
37:a3:b2:10:b7:49:3e:72:01:b3:e7:33:7c:d8:9d:
84:3a:9e:b1:76:70:39:41:6b:67:ac:a2:af:da:c8:
75:5e:e1:30:b1:c5:9a:21:bc:20:c3:a9:11:eb:42:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5C:F9:0D:AF:6D:41:E2:EB:57:27:8E:6E:1E:98:9A:80:F5:46:22
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/322e35362e3235342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:22:55:cb:a2:81:40:4e:8a:c9:ba:e4:04:69:6e:1d:30:33:
c4:48:77:cc:66:37:80:1d:de:b2:5e:d6:ea:e7:40:04:54:5b:
3d:7a:24:8f:a8:47:70:c7:bc:ce:68:15:54:14:3f:03:5b:2d:
4d:a3:d8:2d:9d:5b:7f:99:a4:81:32:f5:83:77:94:9d:8c:a8:
f4:d0:25:0d:c5:b6:ad:d9:4e:f2:11:5a:44:36:39:5e:62:79:
e5:27:24:77:7e:38:76:f7:7c:d4:6b:11:43:94:0e:67:b0:ae:
c2:73:9d:6d:56:6d:c5:f3:33:a6:e1:9d:ad:ae:e5:45:08:48:
96:2e:6c:c6:f0:17:60:4f:a4:d2:0e:71:cd:27:4b:ee:d0:e6:
b7:37:8f:13:43:a2:96:3c:aa:55:63:84:e1:93:fd:0d:38:cd:
0b:5f:e3:7a:d4:2b:73:98:01:67:07:4d:31:0f:de:37:29:2e:
cf:3f:f7:7c:2b:76:46:83:29:4a:84:0f:e5:a0:09:56:95:2c:
25:cd:22:40:64:1c:55:39:30:2e:39:bd:94:12:58:5a:8a:e9:
64:9d:10:c2:6a:80:ac:94:cc:16:15:a8:d3:3c:17:1c:fe:92:
5a:86:f3:a9:7a:c2:3f:39:67:aa:9e:ed:f5:4a:f0:0e:b1:98:
71:17:5b:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUarPHZ5+R/YgTDLPuXwBzI7YMys0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yMzA0MTMxMDI1MDNaFw0yNDA0MTExMDMwMDNaMDMxMTAvBgNV
BAMTKDgzNUNGOTBEQUY2RDQxRTJFQjU3Mjc4RTZFMUU5ODlBODBGNTQ2MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLJWo7z8Ax8EiuO4tKO7lLHcf
u9PNs0sOGYp4ODVb2LSkhWWj3adFEyMavW7Ytgf13VCZIjEtWWTrVm3FUnRp9T/G
0p1Xs6iG8XuwkW5UYgZzWm8bInRFJAQc9Z/lKdSaJOKudFBzCsXAu0zHJy4TDIFt
ksxdZwcIPB8kAFjCvMOGXPobymUFadIy3hAUvypT5w6Ef87Q5JHIpvzuAyZGd4SP
lpFa94K3vsJBmASaTXAl9jBerneSP2gvI0zLDLyDh3k5lH9am1WDjvoaVoBi2Dej
shC3ST5yAbPnM3zYnYQ6nrF2cDlBa2esoq/ayHVe4TCxxZohvCDDqRHrQp5VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUg1z5Da9tQeLrVyeObh6YmoD1RiIwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzMwMzI3YjllLTIyN2EtNGViZC04MjVi
LTNiOTgwOTVkYzkyNy0wLzAvMzIyZTM1MzYyZTMyMzUzNDJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAI4/jANBgkqhkiG9w0BAQsFAAOC
AQEAnyJVy6KBQE6KybrkBGluHTAzxEh3zGY3gB3esl7W6udABFRbPXokj6hHcMe8
zmgVVBQ/A1stTaPYLZ1bf5mkgTL1g3eUnYyo9NAlDcW2rdlO8hFaRDY5XmJ55Sck
d344dvd81GsRQ5QOZ7CuwnOdbVZtxfMzpuGdra7lRQhIli5sxvAXYE+k0g5xzSdL
7tDmtzePE0OiljyqVWOE4ZP9DTjNC1/jetQrc5gBZwdNMQ/eNykuzz/3fCt2RoMp
SoQP5aAJVpUsJc0iQGQcVTkwLjm9lBJYWorpZJ0QwmqArJTMFhWo0zwXHP6SWobz
qXrCPzlnqp7t9UrwDrGYcRdbaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org