Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: Ty7jZvTShhhJqpcRcvyWub3ROBq9ksNFSTsQkqsX7Zg=
Subject key identifier: C2:A8:66:06:6E:E5:85:E3:FD:9C:DD:5A:B5:24:49:3E:3D:39:8B:56
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 22E70C2144229B119134C5F38780B8C015026B22
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS40676.roa
Signing time: Fri 01 Sep 2023 00:00:03 +0000
ROA not before: Thu 31 Aug 2023 23:55:03 +0000
ROA not after: Fri 30 Aug 2024 00:00:03 +0000
asID: 40676
IP address blocks: 89.116.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e7:0c:21:44:22:9b:11:91:34:c5:f3:87:80:b8:c0:15:02:6b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Aug 31 23:55:03 2023 GMT
Not After : Aug 30 00:00:03 2024 GMT
Subject: CN=C2A866066EE585E3FD9CDD5AB524493E3D398B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:44:c0:47:68:1c:17:88:08:33:48:9b:fd:
82:8d:a3:d4:20:75:29:23:5d:60:95:d2:8f:3d:8a:
bb:46:11:46:29:16:98:ef:c0:2b:89:9a:cd:05:1d:
82:37:e7:a1:b7:c1:f4:11:35:e3:f5:dd:59:e1:60:
8a:11:40:a7:3f:41:83:66:ae:e2:dd:58:32:20:42:
8f:52:b4:23:c1:43:a0:59:55:c9:70:d9:ad:b0:5c:
39:da:33:d5:91:7e:43:03:4e:35:7c:33:df:bb:ea:
a8:5e:ce:9b:69:66:c5:c8:05:1a:36:dd:66:a3:63:
ac:6d:3d:58:04:22:2b:57:3f:d6:a9:48:63:62:5a:
a7:f5:dd:c8:5a:db:3b:a2:8e:05:dd:c2:34:a5:51:
d8:be:5c:c0:bb:06:0f:10:cb:6b:2e:17:c4:df:e1:
13:83:89:50:1c:02:fe:48:7e:b6:82:31:57:87:c6:
d9:a4:96:e5:fb:d8:f3:44:81:29:99:b0:1b:3f:35:
39:12:ff:d5:97:69:c7:2b:27:37:9b:f8:aa:8b:2c:
8e:0f:e0:c0:9b:f9:03:e9:1b:90:d0:0a:91:c2:d1:
47:c6:4c:a9:64:e4:f2:22:79:00:f4:32:ac:db:41:
22:cb:be:41:f7:cf:7c:db:27:49:7c:79:97:93:08:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A8:66:06:6E:E5:85:E3:FD:9C:DD:5A:B5:24:49:3E:3D:39:8B:56
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.56.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a3:42:bf:99:0b:5d:a9:d8:fb:03:fb:c9:23:42:99:67:82:
35:a2:d4:f8:27:7d:6a:d6:f8:87:58:52:55:b5:cf:7d:2a:71:
3f:c0:1a:bd:56:be:3f:44:2e:9f:23:a7:fa:c1:13:f1:44:8e:
07:9d:58:45:5b:72:0b:58:3e:af:52:ff:19:57:21:41:5a:50:
31:af:be:20:b5:60:ba:3f:8c:d7:5d:f3:13:19:05:93:68:ee:
19:aa:6f:d4:3d:31:6f:80:0c:e4:2b:f0:d4:11:a0:f3:52:7f:
ce:ac:ae:6c:98:cf:a3:a6:f0:68:a8:f3:c5:85:8f:8a:0f:25:
a1:e7:09:aa:fb:70:48:11:13:4e:26:d2:74:79:af:fb:76:e0:
1c:f8:51:22:53:bd:93:f9:31:75:08:81:cd:43:8a:41:5b:ae:
ed:77:ef:2b:11:20:0e:88:4a:dc:45:80:32:7f:0c:2c:d6:cf:
f1:86:28:1f:af:e1:2b:d9:29:4b:55:37:a3:73:42:c1:2c:0f:
50:e0:67:ed:78:7d:1a:ab:81:8f:da:f7:dd:e7:84:f2:9e:63:
4e:6c:4c:9d:91:20:90:27:6b:c5:c5:31:4f:68:3d:21:61:3b:
4b:fb:56:14:55:79:c1:0b:63:11:c3:26:0b:c3:c9:03:71:cc:
82:98:f5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 17:11:00 2024 by rpki-client on console-ams.rpki-client.org