Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204968.roa
File: AS204968.roa (raw, json)
Hash identifier: tfHmMwEoLT57awM3SV0K5u4qW78bwv3P9hl6DzV7mh4=
Subject key identifier: 25:31:A9:08:45:29:17:96:72:ED:70:5A:AB:F1:A3:36:E8:F5:DF:DF
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 5F0A845DABACDADADF1B7DC549756A98F6736361
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204968.roa
Signing time: Fri 01 Sep 2023 00:00:04 +0000
ROA not before: Thu 31 Aug 2023 23:55:04 +0000
ROA not after: Fri 30 Aug 2024 00:00:04 +0000
asID: 204968
IP address blocks: 89.116.163.0/24 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:37:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0a:84:5d:ab:ac:da:da:df:1b:7d:c5:49:75:6a:98:f6:73:63:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Aug 31 23:55:04 2023 GMT
Not After : Aug 30 00:00:04 2024 GMT
Subject: CN=2531A9084529179672ED705AABF1A336E8F5DFDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:9e:7f:9d:94:d8:cf:48:d3:f9:a1:bf:23:
35:15:11:56:17:03:e6:3b:78:f4:4f:85:12:81:1c:
cd:e2:b6:07:ca:bd:7a:25:60:ae:42:ce:af:da:d1:
74:5c:83:87:e6:28:14:9f:f8:95:d2:01:5f:81:f9:
1c:9d:2f:9f:5c:75:94:2f:7e:13:22:3d:d1:ab:ea:
ff:7c:4c:59:75:69:53:b0:a9:1f:53:40:50:a6:2b:
01:db:4a:3a:af:78:bb:19:75:e8:f5:ed:50:9e:95:
f3:16:08:4c:ba:ce:1b:39:1f:d7:b9:11:73:ab:01:
11:77:74:c8:ed:b2:d5:6d:d9:50:a3:0b:e2:a4:96:
24:50:5c:f8:ec:ab:09:9c:35:39:04:ac:b7:1a:ab:
74:8b:a9:53:1f:a1:59:a3:ac:a1:78:f4:b4:06:56:
bc:cb:be:4a:3e:40:e7:77:24:f5:e7:03:ee:39:5f:
57:59:d4:e2:f7:99:ba:83:b2:a9:9b:c0:3d:21:33:
5a:67:85:28:32:9d:ca:9a:53:c6:a5:4d:22:81:82:
98:a2:9a:9e:71:c9:67:f9:c1:1e:4e:1c:64:91:b9:
72:b3:51:00:ff:a8:30:60:f6:72:1d:7e:54:ab:38:
31:6b:4f:fa:4f:d7:37:ab:80:65:8d:d9:8f:31:15:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:A9:08:45:29:17:96:72:ED:70:5A:AB:F1:A3:36:E8:F5:DF:DF
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.163.0/24
89.117.129.0/24
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a9:8a:ee:f0:26:e3:df:b3:a9:0c:62:35:73:38:61:35:6b:
69:8d:6f:80:47:0f:cb:e2:bc:e8:a5:b2:84:5a:23:f8:50:76:
05:f6:21:8a:50:84:d1:12:40:8c:33:c8:e6:bd:d9:22:c0:4b:
eb:48:5f:f5:08:39:ce:9f:ff:c1:9a:8b:86:29:33:59:dc:3e:
4f:f3:f5:ca:05:87:b0:a2:63:0f:e1:92:f0:40:c2:fe:b0:c8:
e2:fc:2d:35:e4:39:b3:94:ed:5f:13:cd:17:2f:ac:64:d6:0d:
89:ee:ac:79:37:b1:48:83:44:74:f5:63:7f:17:17:7d:b9:56:
e7:5e:c7:75:6c:3b:60:d8:1e:42:56:74:48:35:0e:ad:67:e7:
41:25:37:aa:83:1c:65:b9:4c:f6:d4:9a:90:65:5b:29:d3:0a:
78:ff:c9:5e:2a:22:ea:f5:4c:dd:99:28:eb:5a:08:39:15:da:
f9:1b:e6:9d:bc:4e:95:2e:e7:39:2f:c5:aa:e4:dd:d1:b4:4c:
fc:e6:6e:4e:e2:b4:3f:d6:6b:a9:4a:18:65:37:48:9a:16:a3:
67:a8:ca:75:2c:cf:d4:c8:99:52:64:bf:b3:cd:5e:fc:06:8a:
d5:3f:3f:cb:81:5c:12:dd:13:92:ea:84:f1:ba:16:c0:07:fe:
93:fe:35:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 17:11:00 2024 by rpki-client on console-ams.rpki-client.org