Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211237.roa
File: AS211237.roa (raw, json)
Hash identifier: JWR7SI0Y+dU5jc/rT1MkRAkpjh9pMUszbkMnow05ieI=
Subject key identifier: D0:86:44:88:89:30:67:22:8C:04:6F:39:4D:CA:B0:E6:E8:68:D6:B3
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 0F1DD064AAF92A22F9A09227DDA3C3A1DD44EBE0
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211237.roa
Signing time: Tue 12 Dec 2023 17:37:33 +0000
ROA not before: Tue 12 Dec 2023 17:32:33 +0000
ROA not after: Tue 10 Dec 2024 17:37:33 +0000
asID: 211237
IP address blocks: 89.116.153.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1d:d0:64:aa:f9:2a:22:f9:a0:92:27:dd:a3:c3:a1:dd:44:eb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 12 17:32:33 2023 GMT
Not After : Dec 10 17:37:33 2024 GMT
Subject: CN=D0864488893067228C046F394DCAB0E6E868D6B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ca:2c:ad:b0:ee:1b:ca:0d:96:78:15:bf:a8:
54:42:20:35:f7:ce:59:97:91:f3:0f:2f:ac:dc:f5:
64:ba:80:db:e5:df:08:ec:5b:6d:32:f1:1e:19:36:
c9:b9:5c:4b:20:71:80:21:16:4e:37:93:f1:64:e5:
3d:65:a8:af:0f:46:aa:c2:ac:09:5e:31:5e:43:ba:
95:31:bc:f2:fd:7a:3f:b1:8c:02:7e:cd:cd:8b:c3:
17:96:cb:4d:4d:15:4b:be:f8:e3:30:fe:5e:0d:d1:
b2:b2:35:28:90:65:db:23:a0:ef:5f:cd:d8:15:bc:
36:3d:79:7b:ba:4a:72:ec:f1:dd:e8:51:91:af:ef:
7d:58:95:30:77:97:d1:66:eb:04:77:db:56:86:6d:
c4:69:4e:d8:f7:e1:4e:d3:da:c2:fe:68:75:33:35:
41:07:3d:8c:5d:fd:f6:7f:42:62:fc:60:06:02:8e:
c4:ac:b5:6d:8e:4c:44:ac:9a:f6:5e:e4:d1:c2:03:
c2:3f:56:25:26:98:16:f9:0c:31:e1:6e:00:6c:dc:
c6:2c:21:5d:71:61:ce:b0:58:5e:e1:2e:f6:d5:d4:
37:f2:c8:20:26:8a:f8:ce:b3:8a:ec:60:10:94:14:
c7:15:74:f6:f0:bd:c3:3e:05:65:bf:20:7a:01:83:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:86:44:88:89:30:67:22:8C:04:6F:39:4D:CA:B0:E6:E8:68:D6:B3
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.153.0/24
89.116.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d7:09:61:62:35:3d:c4:32:eb:53:db:6f:01:39:55:19:e6:
e6:0b:2b:5f:1e:2d:f6:bc:a5:74:12:af:55:12:5c:fd:fe:ef:
66:3b:ee:46:7b:b4:9a:4c:cb:4c:b9:53:c7:2f:d7:0e:fb:bb:
66:a0:eb:cc:d3:8b:05:93:4e:d1:be:53:aa:c6:43:40:50:35:
ad:b9:c6:71:2d:64:ba:d0:bc:3e:f3:1d:10:6b:54:10:0c:3f:
71:b7:5c:eb:a9:73:57:2b:5e:07:01:41:6f:55:14:f3:32:ed:
6b:6a:8b:46:1c:8d:57:f5:86:f2:0f:c5:2d:10:46:c0:10:e3:
9c:e4:de:45:8c:25:2f:d2:00:19:77:a6:05:04:aa:a6:6f:8e:
65:7c:c5:7a:3e:12:f4:8c:77:3f:00:b0:53:7c:56:82:1a:cc:
c2:d6:2a:08:0e:c9:d6:ae:41:43:2e:09:bf:05:13:f8:4d:cf:
68:59:d4:f7:dc:85:5e:21:cc:73:9a:41:94:8d:5f:07:bc:b3:
3d:0f:07:64:70:92:bb:35:ac:ca:02:ec:be:e5:9e:ad:56:39:
49:5f:98:84:01:1c:cb:86:01:e2:3e:b8:ba:01:4e:bd:12:d4:
b0:e7:4c:d0:a4:85:fa:62:21:e3:43:1d:19:8e:88:67:3c:70:
21:26:ed:9b
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUDx3QZKr5KiL5oJIn3aPDod1E6+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzEyMTIxNzMyMzNaFw0yNDEyMTAxNzM3MzNaMDMxMTAvBgNV
BAMTKEQwODY0NDg4ODkzMDY3MjI4QzA0NkYzOTREQ0FCMEU2RTg2OEQ2QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqyiytsO4byg2WeBW/qFRCIDX3
zlmXkfMPL6zc9WS6gNvl3wjsW20y8R4ZNsm5XEsgcYAhFk43k/Fk5T1lqK8PRqrC
rAleMV5DupUxvPL9ej+xjAJ+zc2LwxeWy01NFUu++OMw/l4N0bKyNSiQZdsjoO9f
zdgVvDY9eXu6SnLs8d3oUZGv731YlTB3l9Fm6wR321aGbcRpTtj34U7T2sL+aHUz
NUEHPYxd/fZ/QmL8YAYCjsSstW2OTESsmvZe5NHCA8I/ViUmmBb5DDHhbgBs3MYs
IV1xYc6wWF7hLvbV1DfyyCAmivjOs4rsYBCUFMcVdPbwvcM+BWW/IHoBg3LLAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQU0IZEiIkwZyKMBG85Tcqw5uho1rMwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIxMTIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFl0mQMEAFl0vjANBgkq
hkiG9w0BAQsFAAOCAQEAPNcJYWI1PcQy61PbbwE5VRnm5gsrXx4t9ryldBKvVRJc
/f7vZjvuRnu0mkzLTLlTxy/XDvu7ZqDrzNOLBZNO0b5TqsZDQFA1rbnGcS1kutC8
PvMdEGtUEAw/cbdc66lzVyteBwFBb1UU8zLta2qLRhyNV/WG8g/FLRBGwBDjnOTe
RYwlL9IAGXemBQSqpm+OZXzFej4S9Ix3PwCwU3xWghrMwtYqCA7J1q5BQy4JvwUT
+E3PaFnU99yFXiHMc5pBlI1fB7yzPQ8HZHCSuzWsygLsvuWerVY5SV+YhAEcy4YB
4j64ugFOvRLUsOdM0KSF+mIh40MdGY6IZzxwISbtmw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:31 2025 by rpki-client