Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211975.roa
File: AS211975.roa (raw, json)
Hash identifier: xkQSKTvJERFnfT9HIiwksIcIqaejIbhrqA2M3W7oJGY=
Subject key identifier: A0:EC:38:90:E4:3F:4B:D6:1C:EF:08:59:ED:CD:20:72:F0:CD:F1:66
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 314E1529DFB25C383770C027AF93FE0D483E1A55
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211975.roa
Signing time: Tue 18 Jul 2023 00:00:10 +0000
ROA not before: Mon 17 Jul 2023 23:55:10 +0000
ROA not after: Tue 16 Jul 2024 00:00:10 +0000
asID: 211975
IP address blocks: 89.117.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4e:15:29:df:b2:5c:38:37:70:c0:27:af:93:fe:0d:48:3e:1a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jul 17 23:55:10 2023 GMT
Not After : Jul 16 00:00:10 2024 GMT
Subject: CN=A0EC3890E43F4BD61CEF0859EDCD2072F0CDF166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:be:63:db:28:61:a6:b4:d3:89:14:de:03:
90:6e:18:9f:bc:ab:67:a4:ef:04:c5:ea:1f:e7:db:
6e:23:43:77:2d:87:8a:13:57:65:08:38:78:ad:0a:
f6:2a:25:0e:87:26:4f:f6:d6:0e:dd:0f:8d:cb:a2:
de:20:f6:5a:4e:fd:dc:2a:8f:53:13:44:53:51:14:
76:c5:c0:05:d9:20:bb:af:79:32:21:4e:ec:83:c7:
2f:46:dd:52:e3:0a:99:df:1a:66:e2:8f:35:f7:1e:
a6:cc:2f:b0:d2:f2:83:74:99:b1:d8:71:37:c0:a2:
5a:aa:d0:7c:c9:c2:0a:30:29:48:f3:51:8b:3c:72:
67:72:9d:d6:30:d7:b1:68:a0:30:03:b9:46:f9:21:
3a:71:df:0e:97:e7:0c:67:b3:2a:c3:72:d7:70:0d:
73:52:87:18:c5:9a:d8:69:62:0e:b8:27:1f:9b:2d:
db:65:17:4a:f6:b4:75:a4:4a:66:cd:1c:fe:d4:4c:
56:f9:04:bc:96:97:54:55:67:43:f8:20:50:24:09:
e5:1e:4f:cf:7b:74:9a:03:bd:29:fc:ef:8e:d4:df:
f9:cd:8d:da:b2:f2:84:34:29:e1:32:50:88:24:8d:
d6:cc:82:d3:6f:81:65:82:a2:0e:3f:3d:36:54:57:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EC:38:90:E4:3F:4B:D6:1C:EF:08:59:ED:CD:20:72:F0:CD:F1:66
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211975.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.167.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ae:a6:50:17:0b:d7:3a:e1:3a:b9:02:d1:84:fd:6e:fa:03:
88:3e:50:1c:aa:cf:b2:da:54:19:f0:74:69:fc:71:e1:55:69:
c6:01:d1:db:24:a9:31:fa:45:cf:a5:92:f3:d5:99:4f:86:dc:
04:37:de:55:cb:12:8c:8c:3e:8e:5e:14:af:b3:e3:e4:2c:6b:
27:5f:b3:8f:ed:81:ce:5c:84:b6:d4:be:ca:fb:be:28:91:79:
88:04:0b:4e:ce:8d:29:ed:5d:68:93:65:b5:2e:2c:8b:99:9b:
96:7e:a9:36:33:ae:99:60:02:5b:92:e4:ed:1a:cb:3d:08:ce:
03:f3:76:df:33:14:fd:05:8f:44:45:1e:f4:53:78:8f:05:dc:
12:16:c5:f3:be:60:6b:ff:ae:fc:74:01:d2:ca:e2:56:e6:85:
3c:67:29:41:c1:7d:e8:c1:1c:0c:a5:2e:7d:bf:d9:f6:d5:19:
2c:92:e7:82:7e:90:0e:3a:bd:f3:76:9a:9a:1f:99:8e:11:18:
8f:07:ab:29:a4:de:e1:4f:75:5d:fc:28:f2:6c:ad:a8:73:32:
8f:9d:0e:a0:4a:68:f8:30:57:ab:84:c2:63:5f:e1:d3:30:32:
89:d8:a3:37:a9:a6:be:b3:c7:55:25:0c:5c:29:48:15:8d:93:
78:67:83:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org