Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207326.roa
File: AS207326.roa (raw, json)
Hash identifier: PrB8Tur3HMLBfTs7AJNXR4eYb59JnFcgt9HlCAeHwfA=
Subject key identifier: 46:13:9E:75:AA:B2:90:3E:85:04:6E:95:97:DC:47:3F:B9:65:CD:EA
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 743A87A5B42C1A17B9045A001D0B612103A49F8E
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207326.roa
Signing time: Tue 18 Jul 2023 00:00:11 +0000
ROA not before: Mon 17 Jul 2023 23:55:11 +0000
ROA not after: Tue 16 Jul 2024 00:00:11 +0000
asID: 207326
IP address blocks: 89.117.139.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3a:87:a5:b4:2c:1a:17:b9:04:5a:00:1d:0b:61:21:03:a4:9f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jul 17 23:55:11 2023 GMT
Not After : Jul 16 00:00:11 2024 GMT
Subject: CN=46139E75AAB2903E85046E9597DC473FB965CDEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:fb:b7:39:ff:d8:b3:a8:a3:d1:cf:58:69:
84:17:78:00:be:a4:89:e3:ee:38:76:60:19:e0:ba:
90:16:60:95:ed:26:14:63:93:93:79:39:63:bb:14:
b8:36:37:04:22:f4:00:32:3b:40:58:b6:17:98:60:
0e:12:92:26:db:9c:3d:7d:e9:3c:c2:43:98:c0:6a:
a3:64:98:d1:14:6b:81:4f:c7:95:a9:4c:d8:85:1b:
ea:ab:7b:cc:29:dd:6b:96:33:7a:9a:2b:b1:27:d9:
30:b8:8f:c2:63:c5:e2:0a:86:fc:40:ea:8c:8c:c5:
df:14:eb:0f:5f:6d:79:63:1f:6e:35:ce:4a:e2:e1:
6c:c3:c9:4f:35:89:b9:20:9b:2f:f2:46:37:dc:5a:
c2:63:42:57:29:c0:39:b3:f1:d6:59:a7:56:e4:ad:
ba:04:04:66:85:5f:f4:fd:fe:02:1a:c5:48:ef:15:
dc:38:77:d8:77:bd:59:5b:2f:45:47:8e:11:2d:28:
c7:a4:1f:88:21:da:f2:df:d1:b9:b8:0a:b5:74:da:
be:d9:c7:e3:90:6a:c6:25:a8:d7:72:59:b6:49:ce:
9f:4f:74:e1:86:54:7e:ed:72:7c:41:77:91:76:35:
22:c7:d4:e9:d5:eb:4a:98:5e:fb:71:bf:68:1b:28:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:13:9E:75:AA:B2:90:3E:85:04:6E:95:97:DC:47:3F:B9:65:CD:EA
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.139.0/24
89.117.245.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e6:30:ff:d0:29:3c:e6:2a:57:38:22:0c:2e:1c:26:5e:65:
46:f7:3f:9c:5b:25:65:63:b7:3b:21:c0:67:0c:57:2d:e9:00:
f7:d0:d4:4a:0a:46:a0:65:27:46:97:2f:6b:78:8d:2b:b1:d2:
e6:0e:b2:52:b7:b8:0b:a3:08:49:69:b4:a1:bc:1d:6f:a6:84:
45:32:65:c2:f6:7b:41:df:75:d7:ef:29:30:98:bb:5a:70:ab:
83:fd:fb:7c:89:08:11:e7:4e:1c:dc:63:5f:a8:21:8a:10:5a:
2d:f5:61:c8:54:49:a2:63:9a:5f:c6:c3:42:96:b6:70:6b:84:
19:42:c9:7d:ea:cb:51:6d:c2:11:ac:ab:98:2e:fb:3e:3e:28:
f3:52:47:fd:d8:82:2f:fa:97:c2:ac:84:86:1b:d5:3f:dd:b0:
05:82:0a:5f:94:04:12:fe:f8:23:df:52:7b:cf:85:d3:36:64:
76:e2:08:23:cc:ff:7a:9f:6e:ba:1e:8d:93:0b:2f:da:ca:22:
46:94:de:e2:26:52:a1:29:c2:68:b3:00:42:22:b6:00:26:05:
6e:f0:f8:0f:58:9c:bc:73:dc:86:11:c2:6a:31:b4:6f:11:c6:
55:ec:90:da:5f:7e:34:cd:8a:90:77:4f:21:e3:16:2b:47:39:
6d:65:07:f8
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUdDqHpbQsGhe5BFoAHQthIQOkn44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzA3MTcyMzU1MTFaFw0yNDA3MTYwMDAwMTFaMDMxMTAvBgNV
BAMTKDQ2MTM5RTc1QUFCMjkwM0U4NTA0NkU5NTk3REM0NzNGQjk2NUNERUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0vfu3Of/Ys6ij0c9YaYQXeAC+
pInj7jh2YBngupAWYJXtJhRjk5N5OWO7FLg2NwQi9AAyO0BYtheYYA4SkibbnD19
6TzCQ5jAaqNkmNEUa4FPx5WpTNiFG+qre8wp3WuWM3qaK7En2TC4j8JjxeIKhvxA
6oyMxd8U6w9fbXljH241zkri4WzDyU81ibkgmy/yRjfcWsJjQlcpwDmz8dZZp1bk
rboEBGaFX/T9/gIaxUjvFdw4d9h3vVlbL0VHjhEtKMekH4gh2vLf0bm4CrV02r7Z
x+OQasYlqNdyWbZJzp9PdOGGVH7tcnxBd5F2NSLH1OnV60qYXvtxv2gbKKx1AgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQURhOedaqykD6FBG6Vl9xHP7llzeowHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIwNzMyNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFl1iwMEAFl19TANBgkq
hkiG9w0BAQsFAAOCAQEAcuYw/9ApPOYqVzgiDC4cJl5lRvc/nFslZWO3OyHAZwxX
LekA99DUSgpGoGUnRpcva3iNK7HS5g6yUre4C6MISWm0obwdb6aERTJlwvZ7Qd91
1+8pMJi7WnCrg/37fIkIEedOHNxjX6ghihBaLfVhyFRJomOaX8bDQpa2cGuEGULJ
ferLUW3CEayrmC77Pj4o81JH/diCL/qXwqyEhhvVP92wBYIKX5QEEv74I99Se8+F
0zZkduIII8z/ep9uuh6Nkwsv2soiRpTe4iZSoSnCaLMAQiK2ACYFbvD4D1icvHPc
hhHCajG0bxHGVeyQ2l9+NM2KkHdPIeMWK0c5bWUH+A==
-----END CERTIFICATE-----
Generated at Tue Dec 12 18:10:36 2023 by rpki-client on console-ams.rpki-client.org