Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: iwoXid7z1ZM0qEM2POToq3WrLSDTZ3wYQ+RdPBeLZs0=
Subject key identifier: 9F:6F:29:70:76:83:65:00:A3:D5:04:3D:4D:3D:77:A3:D4:22:4B:86
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 159D31A7EB92F84680DAC66E75E94A8B635AA2EE
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa
Signing time: Mon 17 Jun 2024 13:57:12 +0000
ROA not before: Mon 17 Jun 2024 13:52:12 +0000
ROA not after: Mon 16 Jun 2025 13:57:12 +0000
asID: 29802
IP address blocks: 89.116.60.0/24 maxlen: 24
89.116.61.0/24 maxlen: 24
89.116.63.0/24 maxlen: 24
89.116.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 15:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9d:31:a7:eb:92:f8:46:80:da:c6:6e:75:e9:4a:8b:63:5a:a2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jun 17 13:52:12 2024 GMT
Not After : Jun 16 13:57:12 2025 GMT
Subject: CN=9F6F297076836500A3D5043D4D3D77A3D4224B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:db:fb:f6:1f:b8:ac:ce:07:ea:c6:1f:68:
dc:ed:bd:9b:d0:2d:d6:b0:22:51:c1:a7:d4:d6:77:
b2:d7:3f:4b:a6:99:82:2f:3b:21:82:1b:b8:36:4c:
ad:84:00:28:19:a4:30:66:70:af:a5:d8:c1:7d:20:
27:cb:4c:4a:61:10:f9:9d:79:0c:87:fc:2d:b3:39:
cf:a4:39:66:e1:c7:b1:a2:40:d7:f9:58:cd:c4:c2:
f7:bf:1a:51:6a:5b:4f:03:d4:9a:4f:5a:7f:0f:41:
59:f4:d5:78:c2:4d:2a:cf:30:86:70:f4:b3:97:d8:
49:0f:54:85:66:f9:8c:b9:26:f5:6c:15:50:01:4b:
f9:3d:92:b6:1b:bd:96:a0:eb:6d:19:78:b1:b3:eb:
50:b5:40:2a:31:75:1c:d7:c5:59:e9:74:a7:a1:c8:
59:2d:65:03:63:90:0c:ec:0e:c5:05:05:25:81:cf:
2c:94:ed:e6:c5:30:62:4b:6a:dc:a1:2d:b9:36:bb:
57:16:12:72:5c:a0:b2:a8:da:a3:a3:6b:c6:17:5a:
f7:85:a9:07:33:4f:09:84:b4:55:28:8a:9d:b2:19:
59:1a:2d:66:c6:3d:61:26:46:e5:5e:b7:4b:2c:9c:
2e:ff:98:a2:29:54:f1:3c:fd:53:d1:d7:eb:e6:4a:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:29:70:76:83:65:00:A3:D5:04:3D:4D:3D:77:A3:D4:22:4B:86
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.60.0/23
89.116.63.0/24
89.116.68.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3c:b0:b8:38:96:f5:86:9d:f7:47:25:7d:0f:4b:0f:53:f4:
6b:99:d6:bd:09:02:b4:6b:55:d1:e1:d2:68:2f:36:d9:01:f4:
02:80:a3:05:e5:63:00:07:93:31:f6:f8:57:d7:11:53:d6:a1:
fe:14:f6:e5:5b:4d:cd:6e:b4:81:56:65:20:25:ef:32:c3:4a:
5b:4a:3e:22:10:4d:a4:44:59:1c:10:fb:2f:08:d8:4a:d3:ea:
71:ed:c0:5e:00:6a:e1:16:74:31:cb:3c:db:41:5f:89:b1:8f:
4d:fc:ed:46:b4:f3:1b:9e:ff:df:ac:af:6e:8a:53:de:37:8a:
2b:de:b3:f9:b1:66:93:07:c3:31:e0:11:1f:59:69:b4:93:c6:
74:17:5b:e0:cf:27:ef:bb:f6:72:86:40:a2:73:e6:48:c2:ed:
92:3b:02:5e:a4:28:bf:bb:56:e3:2d:e1:cb:35:25:d3:79:f2:
2a:98:52:00:37:bf:b7:06:27:38:05:c4:09:67:16:36:21:23:
90:1b:f7:64:c7:89:70:f2:3d:16:b8:bb:3c:38:4a:bc:44:cb:
3b:39:82:e8:82:70:0e:08:4f:67:58:e3:7f:dd:43:7a:5b:55:
4c:67:c2:0d:b1:a9:5e:43:3a:bf:aa:d7:93:01:e4:05:c5:7c:
ba:ee:64:03
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUFZ0xp+uS+EaA2sZudelKi2Naou4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDA2MTcxMzUyMTJaFw0yNTA2MTYxMzU3MTJaMDMxMTAvBgNV
BAMTKDlGNkYyOTcwNzY4MzY1MDBBM0Q1MDQzRDREM0Q3N0EzRDQyMjRCODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4K9v79h+4rM4H6sYfaNztvZvQ
LdawIlHBp9TWd7LXP0ummYIvOyGCG7g2TK2EACgZpDBmcK+l2MF9ICfLTEphEPmd
eQyH/C2zOc+kOWbhx7GiQNf5WM3Ewve/GlFqW08D1JpPWn8PQVn01XjCTSrPMIZw
9LOX2EkPVIVm+Yy5JvVsFVABS/k9krYbvZag620ZeLGz61C1QCoxdRzXxVnpdKeh
yFktZQNjkAzsDsUFBSWBzyyU7ebFMGJLatyhLbk2u1cWEnJcoLKo2qOja8YXWveF
qQczTwmEtFUoip2yGVkaLWbGPWEmRuVet0ssnC7/mKIpVPE8/VPR1+vmSsQTAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUn28pcHaDZQCj1QQ9TT13o9QiS4YwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBWXQ8AwQAWXQ/AwQAWXRE
MA0GCSqGSIb3DQEBCwUAA4IBAQA1PLC4OJb1hp33RyV9D0sPU/Rrmda9CQK0a1XR
4dJoLzbZAfQCgKMF5WMAB5Mx9vhX1xFT1qH+FPblW03NbrSBVmUgJe8yw0pbSj4i
EE2kRFkcEPsvCNhK0+px7cBeAGrhFnQxyzzbQV+JsY9N/O1GtPMbnv/frK9uilPe
N4or3rP5sWaTB8Mx4BEfWWm0k8Z0F1vgzyfvu/ZyhkCic+ZIwu2SOwJepCi/u1bj
LeHLNSXTefIqmFIAN7+3Bic4BcQJZxY2ISOQG/dkx4lw8j0WuLs8OEq8RMs7OYLo
gnAOCE9nWON/3UN6W1VMZ8INsaleQzq/qteTAeQFxXy67mQD
-----END CERTIFICATE-----
Generated at Wed Jun 26 22:04:33 2024 by rpki-client on console-ams.rpki-client.org