Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400866.roa
File: AS400866.roa (raw, json)
Hash identifier: a2UCJe6OAKEmdPko3gAInzBZeiE7bfDM7uJYybN8yDE=
Subject key identifier: E6:35:9C:A8:C4:64:36:2A:51:A9:9D:15:BD:4D:29:71:F5:A6:3C:A9
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 19823A4AFC04B7997514A85439F66DC4D3A27834
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400866.roa
Signing time: Mon 20 May 2024 07:13:47 +0000
ROA not before: Mon 20 May 2024 07:08:47 +0000
ROA not after: Mon 19 May 2025 07:13:47 +0000
asID: 400866
IP address blocks: 89.117.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jul 2024 00:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:82:3a:4a:fc:04:b7:99:75:14:a8:54:39:f6:6d:c4:d3:a2:78:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: May 20 07:08:47 2024 GMT
Not After : May 19 07:13:47 2025 GMT
Subject: CN=E6359CA8C464362A51A99D15BD4D2971F5A63CA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:1c:8c:81:9b:8e:03:b2:eb:3e:33:f0:69:
f4:ce:d6:c2:07:6e:26:da:ae:8e:df:32:0c:eb:ab:
e8:82:0f:3f:83:37:d6:f7:cc:dd:e4:1e:d3:56:46:
b3:85:20:22:c6:b1:37:9c:01:c5:bc:5d:87:d4:5e:
cf:56:ac:93:0b:59:83:2b:8a:49:3a:7d:f0:61:92:
b5:f8:87:7d:30:5d:d5:4d:f7:01:71:dd:eb:77:02:
55:b2:83:cf:21:7f:ff:cc:f9:97:14:10:e3:e9:73:
e7:c4:dc:ab:a6:50:21:59:45:66:88:55:14:ec:49:
c0:c5:c1:71:51:70:47:37:54:44:77:1e:09:23:e9:
4d:db:fa:b8:fa:71:83:d8:1b:bb:a6:7c:21:e7:90:
70:b8:9d:ec:94:0d:10:aa:bd:5e:7b:49:4c:6b:e3:
41:c0:35:50:49:d3:bb:50:24:af:fb:b6:d9:eb:e5:
ff:cd:a9:09:14:90:df:35:4f:c8:9e:5f:52:af:72:
1d:47:31:68:67:0a:68:2a:48:b4:9e:55:51:73:5c:
ff:ec:f5:02:b3:23:33:07:f3:4d:19:3b:22:1c:ca:
da:18:ed:b9:5f:3a:d7:d0:50:8e:6e:80:3f:c9:e1:
29:4d:ba:c3:d7:ab:2d:06:11:f5:da:08:de:b6:2c:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:35:9C:A8:C4:64:36:2A:51:A9:9D:15:BD:4D:29:71:F5:A6:3C:A9
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.11.0/24
Signature Algorithm: sha256WithRSAEncryption
80:0b:02:33:0b:ae:dd:22:68:26:e3:b3:0b:3a:8a:d9:42:44:
d0:49:a5:01:87:24:b7:95:9a:70:73:f4:30:bd:c1:ff:34:42:
5e:1f:08:6f:41:81:58:ab:be:0f:43:71:7c:3f:0e:1d:f7:69:
72:52:3b:d4:dd:51:f0:62:d9:77:50:94:7d:9d:94:4f:a2:ad:
70:72:8a:72:97:2a:df:49:4a:d5:fe:e0:85:db:ee:d8:9c:6d:
b7:73:9a:63:08:c2:8e:c1:9d:75:4c:1a:68:ac:d3:aa:31:64:
5b:74:28:1c:84:03:04:50:0e:6a:9a:bc:1f:b9:3c:8a:02:16:
1b:8b:58:b8:be:85:18:e9:63:40:b2:89:af:de:f2:eb:74:3a:
21:41:25:91:4d:b2:a9:2d:ac:95:2c:41:39:da:fc:83:27:90:
59:8c:eb:8c:a8:27:d0:cc:1c:f6:2e:f6:6a:2f:a2:b0:af:4f:
c7:69:8b:48:d8:bd:0b:55:f5:7c:8a:7b:bd:16:15:e7:41:56:
be:36:29:6a:1b:5c:48:b0:01:4e:0e:5d:28:25:55:b8:ab:e5:
28:6a:fc:a3:14:a1:1f:a2:a3:5a:65:ac:5c:7b:83:c6:49:4b:
ac:20:30:e1:24:31:84:e6:e7:31:5e:7f:75:29:c6:6d:88:63:
c5:7c:2f:2f
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUGYI6SvwEt5l1FKhUOfZtxNOieDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDA1MjAwNzA4NDdaFw0yNTA1MTkwNzEzNDdaMDMxMTAvBgNV
BAMTKEU2MzU5Q0E4QzQ2NDM2MkE1MUE5OUQxNUJENEQyOTcxRjVBNjNDQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPlxyMgZuOA7LrPjPwafTO1sIH
bibaro7fMgzrq+iCDz+DN9b3zN3kHtNWRrOFICLGsTecAcW8XYfUXs9WrJMLWYMr
ikk6ffBhkrX4h30wXdVN9wFx3et3AlWyg88hf//M+ZcUEOPpc+fE3KumUCFZRWaI
VRTsScDFwXFRcEc3VER3Hgkj6U3b+rj6cYPYG7umfCHnkHC4neyUDRCqvV57SUxr
40HANVBJ07tQJK/7ttnr5f/NqQkUkN81T8ieX1Kvch1HMWhnCmgqSLSeVVFzXP/s
9QKzIzMH800ZOyIcytoY7blfOtfQUI5ugD/J4SlNusPXqy0GEfXaCN62LJ6RAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU5jWcqMRkNipRqZ0VvU0pcfWmPKkwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzQwMDg2Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl1CzANBgkqhkiG9w0B
AQsFAAOCAQEAgAsCMwuu3SJoJuOzCzqK2UJE0EmlAYckt5WacHP0ML3B/zRCXh8I
b0GBWKu+D0NxfD8OHfdpclI71N1R8GLZd1CUfZ2UT6KtcHKKcpcq30lK1f7ghdvu
2Jxtt3OaYwjCjsGddUwaaKzTqjFkW3QoHIQDBFAOapq8H7k8igIWG4tYuL6FGOlj
QLKJr97y63Q6IUElkU2yqS2slSxBOdr8gyeQWYzrjKgn0Mwc9i72ai+isK9Px2mL
SNi9C1X1fIp7vRYV50FWvjYpahtcSLABTg5dKCVVuKvlKGr8oxShH6KjWmWsXHuD
xklLrCAw4SQxhObnMV5/dSnGbYhjxXwvLw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:20 2025 by rpki-client