Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS266400.roa
File: AS266400.roa (raw, json)
Hash identifier: emGoGZIyBo9nLR2Qcn0+W4hvnxajwOmJHeaZ1o6moPo=
Subject key identifier: 0B:01:0E:AE:4E:68:8C:03:CE:51:A7:8A:6F:2B:2F:33:03:5D:C8:FE
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 09D7BFB5699052749F2E974A01E4025155853048
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS266400.roa
Signing time: Wed 27 Sep 2023 19:39:43 +0000
ROA not before: Wed 27 Sep 2023 19:34:43 +0000
ROA not after: Wed 25 Sep 2024 19:39:43 +0000
asID: 266400
IP address blocks: 89.117.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 06:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d7:bf:b5:69:90:52:74:9f:2e:97:4a:01:e4:02:51:55:85:30:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Sep 27 19:34:43 2023 GMT
Not After : Sep 25 19:39:43 2024 GMT
Subject: CN=0B010EAE4E688C03CE51A78A6F2B2F33035DC8FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:0c:7a:cc:26:e7:8a:d2:b7:14:36:3e:a8:
f9:98:0d:bb:33:26:05:06:06:31:da:06:ef:38:ee:
c2:38:d4:59:ae:d4:93:07:e7:e8:26:d9:ac:05:7e:
bb:c4:46:6a:8b:0b:b6:5f:70:db:f5:4d:b4:7e:08:
fc:25:cd:d4:6f:6a:36:0c:4f:47:36:a1:0c:71:ef:
27:a6:10:39:5a:d2:04:d8:a4:b7:a8:38:07:52:54:
e5:f2:d7:ac:f8:45:ef:ca:20:f0:f9:8e:29:32:75:
62:f0:db:17:43:7c:08:af:5a:93:d5:39:a7:40:34:
44:40:80:57:03:0d:46:5f:f2:c6:5a:a3:cf:2a:85:
ac:ee:94:62:46:15:17:d1:5f:96:7f:bf:a9:bb:5e:
d5:43:49:e7:4d:4c:ba:a3:ab:4b:1b:16:10:3a:92:
50:fd:c0:42:13:a2:47:01:81:b2:27:0c:15:47:55:
f3:8a:ff:ef:b7:a3:1a:47:34:46:5b:e9:62:ff:34:
d3:cf:86:72:3e:78:d3:c3:89:f0:fd:e4:fe:41:25:
f4:83:06:b0:5a:28:b5:cf:f0:ed:ec:c5:24:d1:09:
c0:94:34:95:98:0b:99:aa:bb:a2:82:6b:dd:ac:bd:
49:30:bf:5d:28:6f:c1:c5:eb:74:1d:71:25:5a:8f:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:01:0E:AE:4E:68:8C:03:CE:51:A7:8A:6F:2B:2F:33:03:5D:C8:FE
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS266400.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.25.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:70:e2:6f:45:27:3e:bb:3a:7d:16:c2:1f:90:7a:e8:17:9f:
3e:49:14:7a:3b:95:8b:a1:f7:f8:98:d4:9f:d7:d4:92:6e:df:
f3:4a:1f:8f:6d:62:0e:f0:29:c7:c7:76:cb:b5:52:9d:77:37:
21:0c:bc:ab:e6:d3:c7:72:ba:40:4e:c0:44:f4:36:83:06:ec:
4c:19:a1:c8:a7:7b:19:68:72:47:63:d9:df:b7:1b:d7:78:89:
fc:3d:f7:d2:cf:2e:8b:7b:54:7c:0a:4c:6f:af:27:eb:c8:73:
bc:8b:ab:ad:a5:e1:72:e9:c0:e2:b5:c7:93:30:74:32:5a:6f:
f7:f5:53:16:93:86:6b:85:a4:0a:37:9a:da:1e:e7:cd:51:11:
03:81:81:64:0e:16:b3:89:ec:bf:69:ac:89:65:f5:3c:52:22:
49:9c:f0:97:e1:b3:ca:03:14:54:41:40:3a:fa:56:c4:58:b0:
1d:c9:1e:16:79:bf:f7:ad:ca:bf:60:a1:28:0c:4c:31:95:a9:
38:89:1e:97:0f:41:19:e4:a9:e6:d5:a9:18:9e:87:51:53:55:
be:50:62:85:97:80:7b:01:38:e3:ff:e9:1b:7d:76:ff:35:24:
a5:e8:3e:b4:82:c7:2a:a3:d8:b2:b5:76:cb:e7:a9:62:84:7c:
01:94:71:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 09:36:05 2024 by rpki-client on console-fra.rpki-client.org