Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS33387.roa
File: AS33387.roa (raw, json)
Hash identifier: A+G5EYSAc/r2HKMY4kL5pIowMBOuyzoUpNPVRFxaro8=
Subject key identifier: 09:EF:CD:60:3F:66:06:C9:44:E6:2D:E3:BF:3E:A2:A2:01:57:20:66
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 29552F84060D1F1B314797B39F700B8E60AC3F24
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS33387.roa
Signing time: Thu 05 Oct 2023 13:47:10 +0000
ROA not before: Thu 05 Oct 2023 13:42:10 +0000
ROA not after: Thu 03 Oct 2024 13:47:10 +0000
asID: 33387
IP address blocks: 89.116.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:55:2f:84:06:0d:1f:1b:31:47:97:b3:9f:70:0b:8e:60:ac:3f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Oct 5 13:42:10 2023 GMT
Not After : Oct 3 13:47:10 2024 GMT
Subject: CN=09EFCD603F6606C944E62DE3BF3EA2A201572066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:ca:24:08:03:aa:7f:ae:77:f3:a1:57:ef:
e0:e5:b7:71:6b:cb:4b:f8:20:46:02:76:92:b6:6c:
bd:59:43:e8:cb:a5:a9:d7:cc:7a:78:e9:aa:89:78:
25:fe:a8:44:63:f0:8f:67:e2:f1:00:f0:45:59:f6:
86:01:07:22:cd:c1:ea:da:6d:9c:84:b9:67:25:cf:
8c:0b:42:c7:b7:7a:20:9f:ce:68:ee:ca:a0:67:2b:
cb:8c:d8:42:dd:15:11:56:72:7f:e2:5a:d0:1e:76:
9d:09:67:f2:b5:b1:8b:f4:e8:f1:b1:0d:8f:7c:2b:
2a:de:79:91:df:e1:b2:6f:3e:dd:10:fa:46:df:ce:
a3:15:c3:e8:76:78:12:c5:2e:ab:c7:7b:6a:43:1f:
cb:e5:21:98:88:02:dc:74:26:81:69:6f:31:c4:2a:
75:ae:11:3c:0b:05:13:54:83:9d:96:a7:49:35:80:
aa:1d:3d:2d:ad:13:cd:e3:ea:0d:72:a9:8f:ae:90:
92:9d:2d:3c:27:56:18:cf:fb:d3:7c:93:66:8f:89:
c2:77:4c:7e:6c:6a:fd:ef:4e:8b:8f:a0:3c:74:68:
0a:2b:75:52:19:2c:f8:75:aa:e2:04:ec:9a:b3:93:
a5:e8:0e:4f:c4:4d:d0:68:0a:88:4a:e1:e7:44:4f:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:CD:60:3F:66:06:C9:44:E6:2D:E3:BF:3E:A2:A2:01:57:20:66
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS33387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.141.0/24
Signature Algorithm: sha256WithRSAEncryption
95:83:bc:d2:18:f2:09:5e:75:54:a5:93:b9:ac:4d:7c:54:b6:
b4:ed:84:c8:4a:e0:1b:04:1e:72:82:d6:ca:bf:e5:c3:e9:3b:
8f:df:a1:02:e6:a6:90:ed:09:63:c7:eb:22:d8:c9:90:70:75:
c4:60:c6:1a:ed:55:64:03:b5:3f:46:75:9c:12:43:a5:3a:4c:
ae:96:76:8e:46:96:b5:6e:3a:f6:53:01:c2:ff:0f:a6:76:68:
73:fc:45:b8:4b:05:8a:f2:55:0f:f8:f8:37:ab:18:7c:85:36:
1f:cd:b7:99:06:86:0b:12:78:64:a4:31:42:5a:3d:da:16:36:
62:36:c3:6c:79:dc:bc:45:05:f4:57:46:0d:7c:50:89:86:b9:
95:08:f9:c1:64:c8:f1:20:fd:d1:60:10:58:4f:f9:01:21:e2:
11:a2:ca:88:4f:12:f8:50:df:a6:1a:80:fe:d4:f2:b3:09:db:
92:04:24:98:72:a3:12:96:76:fa:0b:f6:db:70:cd:0c:7e:d6:
bc:31:e8:41:5d:c6:67:2c:62:95:fc:96:d4:a9:92:1a:a9:3e:
2b:a8:be:c7:a2:3d:5a:c4:d8:e5:cf:c4:19:08:01:10:2a:eb:
bd:68:a9:17:70:20:5d:00:cc:63:8f:ba:a8:62:1a:c3:07:92:
6c:b1:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 16:41:39 2024 by rpki-client on console-fra.rpki-client.org