Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198448.roa
File: AS198448.roa (raw, json)
Hash identifier: hnzLe2+Zq/Jd14RMGyldNSRBeasufg1IgtwUR2Pn8x0=
Subject key identifier: 7D:2F:15:D7:99:F9:C6:47:91:53:12:35:81:00:20:48:BC:0F:47:A4
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 3713B0E6CCB4F04480E2C2AA5D608286C475972C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198448.roa
Signing time: Mon 29 Apr 2024 13:05:16 +0000
ROA not before: Mon 29 Apr 2024 13:00:16 +0000
ROA not after: Mon 28 Apr 2025 13:05:16 +0000
asID: 198448
IP address blocks: 89.116.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 00:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:13:b0:e6:cc:b4:f0:44:80:e2:c2:aa:5d:60:82:86:c4:75:97:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Apr 29 13:00:16 2024 GMT
Not After : Apr 28 13:05:16 2025 GMT
Subject: CN=7D2F15D799F9C6479153123581002048BC0F47A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:65:45:7c:40:23:f4:b9:13:9e:ce:82:3f:
45:f7:e3:ce:b4:73:7a:36:56:77:df:cc:a5:6f:d6:
ce:d4:d8:50:ca:ab:7d:f7:39:2a:90:52:95:54:fd:
3e:aa:e3:90:f9:7e:4f:2e:1c:c9:d3:45:0b:10:8b:
e4:36:1f:e5:9d:18:a5:62:de:16:99:ae:f3:6e:81:
12:73:4a:27:87:97:c9:77:79:63:8b:4f:ad:8f:53:
0c:0d:c5:a0:b5:39:68:f9:8a:db:53:3f:c6:5d:cb:
d1:da:13:67:e3:52:02:04:78:4e:94:fa:a3:0c:ce:
94:53:7d:26:7b:84:5b:87:32:0f:1d:a0:a3:08:9d:
c8:31:2e:17:cf:b5:05:90:c0:8a:83:a6:20:4f:1f:
4f:1c:a9:e2:ff:73:4e:b0:01:ed:aa:ab:43:51:85:
6d:28:d2:ac:58:84:79:96:1e:c7:a3:d5:42:45:c6:
6b:78:67:1c:ac:e7:b9:68:35:ab:81:f2:21:be:d1:
9f:23:bf:7a:09:39:bb:3e:f9:d3:d0:89:88:2d:c8:
ef:53:83:ad:b3:46:23:d4:57:77:d8:cb:7b:5b:53:
27:d7:d1:92:62:a0:33:39:be:83:03:f7:b7:36:3d:
3f:47:89:1c:0c:1c:d3:2c:ca:7e:fd:0f:19:89:ae:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2F:15:D7:99:F9:C6:47:91:53:12:35:81:00:20:48:BC:0F:47:A4
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a0:a4:6d:65:e6:93:f8:45:4c:6a:39:a3:f7:68:f0:8a:2b:
e6:0c:fc:bf:83:00:a9:e1:29:1f:89:e2:32:2a:23:9d:c3:e8:
f7:1b:3c:e9:df:24:f4:92:7a:83:bf:b6:1f:f7:2b:a5:19:ed:
62:e9:13:73:1c:ad:a5:71:c8:e6:d4:61:4c:60:3d:ed:90:d8:
76:6e:dd:ad:7d:83:95:2e:97:61:9f:bb:a9:6e:1c:69:81:cd:
e3:64:a1:86:aa:56:df:6e:a8:3e:39:d0:fe:ed:ee:8a:e2:9e:
f2:da:35:3c:5a:be:86:17:d3:aa:31:d2:58:7c:f5:ca:eb:26:
05:b1:9e:26:12:d7:01:b2:49:98:45:a6:a5:03:b3:20:8e:77:
40:7a:40:7e:c7:43:ae:2c:d2:84:4f:65:2b:54:7e:f6:db:04:
c3:fe:cc:cf:0f:78:1b:5d:ef:2d:8a:3c:73:c1:ed:86:43:5b:
f4:e4:b6:ca:7e:66:ee:6c:45:87:d6:be:ac:a4:30:a5:97:a3:
0f:19:05:9c:96:40:d0:5f:2f:63:e7:7f:7c:df:e0:2d:d6:54:
5e:94:ca:ca:1e:15:e4:88:86:67:84:a8:f5:b3:59:3c:e3:14:
e3:46:aa:27:47:76:46:1e:69:c2:2c:04:f8:ed:96:f0:54:ad:
4a:6f:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:53:11 2024 by rpki-client on console-ams.rpki-client.org