Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206119.roa
File: AS206119.roa (raw, json)
Hash identifier: 7pWvib46sA9oG9dYTkJ4SRhVOHEuhiTR6uDcDZreEhE=
Subject key identifier: 3C:8C:24:0A:C4:00:79:86:99:15:FC:3C:0D:10:EC:91:57:55:34:04
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 2B7323B879595E7875F2555CAF84F5F7F34016B4
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206119.roa
Signing time: Tue 13 Feb 2024 10:40:32 +0000
ROA not before: Tue 13 Feb 2024 10:35:32 +0000
ROA not after: Tue 11 Feb 2025 10:40:32 +0000
asID: 206119
IP address blocks: 89.117.40.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:73:23:b8:79:59:5e:78:75:f2:55:5c:af:84:f5:f7:f3:40:16:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Feb 13 10:35:32 2024 GMT
Not After : Feb 11 10:40:32 2025 GMT
Subject: CN=3C8C240AC40079869915FC3C0D10EC9157553404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:e7:8a:a7:3b:f3:48:89:dc:a6:49:cd:7e:
5a:bb:b3:c6:c6:0b:03:f6:00:b5:cb:e1:2b:a3:e8:
3a:bd:c3:71:63:38:76:0f:06:86:9a:94:f5:8b:49:
c0:70:7c:50:47:33:9d:99:83:da:0c:56:73:64:ee:
28:78:25:fe:30:93:44:ca:6c:50:2d:12:3f:5d:ce:
33:81:f2:af:a0:ed:83:fe:7b:b2:e2:1c:26:62:ff:
9a:eb:e1:53:10:a6:57:35:ff:36:f8:78:8e:52:f3:
16:73:85:9b:9c:06:25:2c:c8:85:22:bf:01:07:71:
0b:63:2e:94:4c:37:98:92:7f:41:9c:43:af:3d:eb:
bd:65:ff:93:d9:a6:4e:59:e2:a4:63:dd:71:75:69:
fa:39:f5:e5:26:68:6a:cd:dc:c1:36:e6:05:45:e5:
3a:30:36:6a:bf:d5:fa:d4:ec:45:77:8c:f9:1f:eb:
fa:e7:1e:e9:18:c0:c3:68:a3:a5:94:67:96:5d:8a:
bc:26:24:5c:a3:86:0e:d2:5d:46:a4:79:e3:ab:84:
ce:bb:8b:34:18:77:4b:2a:c5:53:76:7a:3b:98:3a:
21:34:f0:69:95:31:56:35:80:ce:d6:89:d7:bf:cf:
4b:90:68:10:f9:95:16:0d:61:b7:45:64:d8:d3:9b:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8C:24:0A:C4:00:79:86:99:15:FC:3C:0D:10:EC:91:57:55:34:04
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.40.0/21
Signature Algorithm: sha256WithRSAEncryption
19:b5:3b:6c:9d:3b:01:c7:20:96:7e:0d:be:1e:0a:68:06:92:
3d:74:43:12:0a:ab:8b:c4:ff:63:a0:e8:c2:e8:7c:ff:66:ce:
b9:b2:ec:bb:34:6d:b1:f4:25:be:28:b9:51:b9:85:c6:ba:26:
90:b5:ac:e5:c2:64:49:83:b6:56:85:35:9d:33:18:d8:68:d1:
94:ef:fa:4a:8e:e8:b6:fb:5b:34:21:79:d9:aa:ba:85:b5:49:
dd:2d:dd:b9:7f:d6:66:25:72:ad:75:7f:19:3f:1b:c2:f4:44:
06:ef:19:15:21:83:46:8f:a5:e6:bb:3a:33:f1:4f:44:ba:0e:
d9:bb:c0:32:7d:83:d9:6a:0d:c0:27:3c:9e:65:5c:99:e4:42:
90:b5:09:2f:4c:39:b3:ed:98:b3:59:25:7f:44:37:94:86:a2:
85:36:e4:f9:53:8e:5e:e7:20:63:21:87:4d:d0:4e:6f:72:51:
f6:18:e3:f3:29:40:0c:c8:62:c5:3c:a3:15:de:47:c4:bc:d9:
2a:d8:ce:15:df:d2:f4:a1:a8:1a:59:9e:07:cd:97:e8:a7:69:
2a:66:a4:5f:22:bf:c0:7c:75:fb:05:70:26:e5:e8:da:dc:e2:
98:0a:fe:df:3a:1b:b9:4c:a3:46:12:94:08:89:0f:16:0c:5a:
11:6c:8a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 02:28:32 2024 by rpki-client on console-fra.rpki-client.org