Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: AGojEL9bd47SattEqALtdd1KvFl4wpjCyrUeLGha+3Q=
Subject key identifier: A9:F0:57:5E:86:28:67:E3:5E:2B:C6:D1:ED:46:32:FA:A0:16:1E:D4
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 6A086D6A0A79CD5096364892F8725E27B96C8737
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa
Signing time: Tue 07 Jan 2025 16:01:33 +0000
ROA not before: Tue 07 Jan 2025 15:56:33 +0000
ROA not after: Tue 06 Jan 2026 16:01:33 +0000
asID: 29802
IP address blocks: 86.38.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:08:6d:6a:0a:79:cd:50:96:36:48:92:f8:72:5e:27:b9:6c:87:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jan 7 15:56:33 2025 GMT
Not After : Jan 6 16:01:33 2026 GMT
Subject: CN=A9F0575E862867E35E2BC6D1ED4632FAA0161ED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:dd:44:43:62:c6:f5:66:6d:a5:f8:10:8f:
e3:2d:86:35:61:06:ca:85:d1:95:58:ed:bc:79:6e:
a2:27:fd:1a:86:59:01:3d:68:34:c4:28:e7:b6:52:
49:d1:e6:40:72:7a:c1:b8:ce:64:dd:99:41:c6:b9:
51:71:4d:42:09:20:25:4b:b0:99:ff:ae:3d:05:fe:
78:f2:df:4a:01:3f:fc:e7:cb:a5:2f:55:bf:c3:77:
e8:b0:cb:f9:b6:d6:62:94:c4:ac:d1:07:97:4d:55:
24:aa:ea:fc:b8:e3:ca:2c:1a:52:0d:c2:07:3b:cd:
6c:44:e1:72:ed:14:99:e0:5c:23:b4:f0:a5:7f:a0:
0a:28:f8:b2:ad:a1:dc:3e:72:96:3c:3a:23:05:31:
0d:e8:e6:ff:0a:91:99:c0:b3:25:ee:3f:29:0e:1e:
fc:b1:a4:7a:98:70:4c:a6:60:91:04:84:65:66:07:
9f:1c:97:6d:cd:ac:34:9a:6b:3b:57:ce:78:4d:cc:
f9:e7:3a:ec:85:e8:5e:57:ef:34:16:84:65:ad:91:
e3:f9:f7:5a:36:4f:32:59:c7:a3:ff:40:9f:d5:ad:
9a:a6:6a:7b:b2:98:79:69:1f:29:0f:cd:2b:e0:8a:
e9:9a:49:32:a9:33:44:9f:33:b3:ad:76:42:dc:9b:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:57:5E:86:28:67:E3:5E:2B:C6:D1:ED:46:32:FA:A0:16:1E:D4
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.255.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:3d:31:d9:e1:00:c6:5c:e2:40:db:4c:e1:30:27:10:4b:49:
dc:b0:bb:f5:3e:e6:c4:ac:18:a7:9b:c5:a4:ab:3d:ca:c5:e8:
02:92:15:5e:26:4e:15:24:18:9b:e2:0d:b2:06:5f:3d:55:3f:
2c:40:44:59:df:57:ab:8f:e4:d0:eb:4f:ab:7f:b4:08:0f:de:
9a:29:bf:f6:54:b1:7d:93:c7:9a:81:85:b7:4f:51:d9:89:a8:
ce:fd:0f:bf:5e:8f:43:ac:5c:1b:e8:22:3f:08:ee:9a:c8:50:
16:32:58:1d:1c:a4:05:fd:87:25:ec:fc:56:29:2f:5e:d4:24:
e6:c4:2a:2b:a7:ab:ee:69:9f:51:2f:20:2b:39:fd:ba:55:08:
8b:d9:a7:86:16:e8:38:2b:da:8b:4d:3d:ea:95:3f:af:1c:79:
fa:4f:19:68:e6:38:5a:5c:6b:73:9d:aa:3f:73:05:d7:43:2c:
d8:66:ad:2c:76:9a:a6:8b:f6:d2:81:c1:64:77:74:c9:9d:9d:
43:b0:8e:a9:9a:46:f5:b4:6d:ab:9e:2b:4e:d7:b7:13:6a:a5:
5a:4a:31:99:39:13:f1:23:d6:24:6a:8e:8c:77:cc:9c:47:8a:
9c:75:db:f0:af:1c:c9:bc:c2:15:27:62:ea:ec:e6:39:a9:94:
27:26:f6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:31:26 2025 by rpki-client