Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS201949.roa
File: AS201949.roa (raw, json)
Hash identifier: yxRcyqirt34OANF9GUOgytfz1ZSLhggadsiZYRU9jPo=
Subject key identifier: 5A:21:34:AE:C0:59:BD:F1:60:A7:68:80:76:03:AB:C5:F9:DD:FB:0F
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 78AC0886F7D43082E802AFBB21DEFFDDA024B0A1
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS201949.roa
Signing time: Sat 20 Jun 2026 09:30:41 +0000
ROA not before: Sat 20 Jun 2026 09:25:41 +0000
ROA not after: Sat 19 Jun 2027 09:30:41 +0000
asID: 201949
IP address blocks: 89.117.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jul 2026 09:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ac:08:86:f7:d4:30:82:e8:02:af:bb:21:de:ff:dd:a0:24:b0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jun 20 09:25:41 2026 GMT
Not After : Jun 19 09:30:41 2027 GMT
Subject: CN=5A2134AEC059BDF160A768807603ABC5F9DDFB0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:17:c0:95:49:ec:c5:4a:50:ed:40:4e:7c:
16:66:51:01:ce:83:1b:24:9b:1d:35:fc:e6:1c:f9:
95:a0:49:72:39:38:ae:12:cd:45:5b:5f:37:93:c4:
cf:2a:1f:32:26:47:fd:7d:b7:27:60:88:88:2e:fd:
f0:d3:dc:23:f2:ef:76:ce:db:28:85:c2:d1:0b:01:
49:1e:d5:2c:f7:bd:43:01:74:06:78:ac:52:f4:09:
c9:09:66:0b:23:d4:ca:d1:83:b3:aa:e5:dd:49:db:
3c:34:5f:43:90:b4:b8:e5:9a:f7:45:6d:a6:6e:12:
8f:29:7e:c8:e4:15:ec:97:18:c5:e1:42:e4:d1:0f:
54:52:f0:44:9a:eb:30:75:91:df:a3:bf:c7:3b:02:
31:85:0e:51:bc:ca:12:91:53:c1:ce:09:36:15:7e:
ab:68:35:1d:1c:e6:eb:0b:60:d2:de:a8:37:f6:43:
07:d2:a3:15:81:a0:e9:97:d3:66:59:95:bd:32:fe:
89:21:d7:8f:bd:28:95:e4:3b:6c:22:21:22:6f:19:
e6:91:f0:e9:9f:dc:9a:ce:4b:10:9d:28:73:0f:dc:
5c:39:c5:6f:97:1e:dd:0e:b2:8d:d1:ce:c7:6d:7d:
59:bf:35:0d:ef:32:4e:ac:e3:ef:8a:44:71:10:45:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:21:34:AE:C0:59:BD:F1:60:A7:68:80:76:03:AB:C5:F9:DD:FB:0F
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS201949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
38:af:63:98:60:69:e5:e2:73:37:51:c8:f3:cc:46:49:ee:44:
cc:0b:b9:b1:ef:73:20:34:d0:e2:88:7b:93:58:ff:bb:1f:70:
71:1d:3b:1a:c5:d6:0f:10:48:0d:55:d7:20:c4:ab:ac:85:27:
38:1e:c2:28:34:0c:29:de:3b:53:87:8d:e5:39:b5:d9:a5:2e:
80:69:ca:7e:fa:72:bb:77:c2:f0:54:75:54:2e:b6:55:08:6f:
b3:cb:0b:f5:86:45:89:37:c4:41:69:48:31:19:25:77:b9:e9:
bf:ec:23:7d:bd:0f:f2:c8:88:1b:27:df:3e:57:19:85:a4:c4:
a1:4f:7d:f8:32:92:48:bc:e0:47:98:c6:19:1c:c8:26:ee:97:
f7:25:cb:ae:66:6b:b0:db:7e:14:46:35:ac:ca:b1:f3:4e:ae:
23:2e:38:12:4e:5b:c2:6b:4f:17:35:b6:54:3f:3f:a7:71:c8:
7d:60:5e:49:0b:40:86:85:a9:09:05:35:52:8b:c2:bf:e9:da:
70:d4:02:c5:7c:24:ea:b5:8a:77:b1:4b:c6:df:62:b0:a6:21:
e0:e1:1c:cd:b4:49:e7:64:a2:a6:a7:24:f5:cf:b4:5c:79:0d:
86:2f:3e:18:9d:94:4f:3b:ff:dc:2d:f5:73:c2:ea:66:be:78:
5b:52:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:07:59 2026 by rpki-client