Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS216285.roa
File: AS216285.roa (raw, json)
Hash identifier: G5iVeybwniXTyzCFTpN4f9R/FOv/tSUEfnHXpnz6wwU=
Subject key identifier: 43:81:BA:C9:11:5F:69:6D:3C:DF:E2:C4:39:55:B7:08:63:8F:3C:2A
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 3E8A5EFF27AC14776E68F43892C5669365C16E74
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS216285.roa
Signing time: Thu 21 Sep 2023 18:32:38 +0000
ROA not before: Thu 21 Sep 2023 18:27:38 +0000
ROA not after: Thu 19 Sep 2024 18:32:38 +0000
asID: 216285
IP address blocks: 89.117.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8a:5e:ff:27:ac:14:77:6e:68:f4:38:92:c5:66:93:65:c1:6e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Sep 21 18:27:38 2023 GMT
Not After : Sep 19 18:32:38 2024 GMT
Subject: CN=4381BAC9115F696D3CDFE2C43955B708638F3C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:03:32:c3:ba:55:3a:31:73:3a:f4:dd:a9:
4c:31:0a:08:3e:50:ea:b0:83:ea:fc:5d:25:d3:df:
ef:29:0e:4f:ad:e6:6b:d9:2d:dd:43:0d:d5:60:85:
5e:6d:5f:de:77:12:87:47:85:47:0c:6f:1c:c3:27:
35:58:78:d3:07:90:65:7b:d8:40:7f:2d:bf:2e:ac:
4d:24:9e:6e:41:3b:cf:9a:19:cb:46:24:8e:64:a0:
59:b5:71:70:d6:23:bc:88:e0:d6:60:6a:a6:a6:1f:
1c:d4:2a:b0:4e:b5:0f:fa:43:f7:3f:c2:2c:99:9e:
ad:0a:9f:49:eb:88:c9:8e:f2:35:c4:9a:09:b4:7f:
d7:80:a0:f6:ca:9c:61:0d:38:ac:a9:fa:40:9d:c9:
4f:5c:36:88:b2:88:5c:97:73:0e:87:7a:0e:79:22:
8b:44:c9:a5:3d:07:f7:71:3b:b9:44:41:ee:16:08:
c0:e4:c9:54:6a:87:a5:34:fd:16:64:3b:53:83:b4:
8e:6f:7c:94:fc:5c:39:d7:85:7c:a8:16:eb:73:0b:
87:14:84:7f:8f:df:b0:ac:10:c4:63:c0:25:5c:be:
98:46:6c:3e:52:84:aa:07:72:78:a0:aa:0b:d0:0e:
a8:72:e4:87:d3:62:cb:2c:6f:30:85:eb:ca:8e:52:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:81:BA:C9:11:5F:69:6D:3C:DF:E2:C4:39:55:B7:08:63:8F:3C:2A
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS216285.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.152.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:88:2e:79:0c:c7:0a:5e:24:b8:ae:26:b5:e9:78:92:08:7f:
17:c0:48:e1:bf:40:24:31:97:70:7b:6e:96:f5:c7:96:53:8d:
5b:b2:8b:1b:53:cc:b5:5a:35:29:73:aa:71:d6:a9:63:01:cf:
0f:fd:55:17:06:d5:e3:4e:8b:9a:97:cf:e2:6a:32:ae:4c:b1:
57:8e:79:45:36:35:fc:03:de:83:76:a8:1c:e2:16:38:38:bf:
2a:3c:bd:7f:b6:58:6a:18:6f:c4:80:ac:f9:89:a7:08:dd:e1:
76:96:37:94:87:fe:fb:65:2c:d0:e7:80:a0:30:c4:91:17:71:
78:c5:9b:48:c6:06:67:38:30:f7:c8:1f:f4:98:62:94:82:8d:
7d:af:76:14:c9:76:06:f0:23:1f:3c:1c:24:4d:e4:5a:8f:15:
1c:ac:3c:68:88:09:07:9f:c3:75:01:14:97:e6:93:98:8e:a8:
7d:c4:e4:40:e1:4b:d9:94:69:be:7d:c9:36:e3:c9:d2:85:09:
ad:41:77:f4:fc:ae:2a:49:fa:28:fc:86:df:6a:a8:55:f1:20:
1b:85:f8:ae:3d:2d:d6:1f:dd:c6:a8:44:6d:c5:2d:f2:71:36:
ba:b9:d4:8c:23:d5:6b:0c:b2:61:d5:df:ca:e4:7c:77:d0:79:
20:28:71:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:52 2025 by rpki-client