Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42055.roa
File: AS42055.roa (raw, json)
Hash identifier: pwfG9VZ3LsK+XWzIoWUburC3x5qp3I/rVxHnvURhGKE=
Subject key identifier: 2C:5D:8D:36:B4:2C:76:6C:1F:83:76:92:DA:9C:1F:45:F1:3C:41:8D
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 1F48EDC38E34711AFD88872A050613B042798698
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42055.roa
Signing time: Wed 11 Oct 2023 17:29:53 +0000
ROA not before: Wed 11 Oct 2023 17:24:53 +0000
ROA not after: Wed 09 Oct 2024 17:29:53 +0000
asID: 42055
IP address blocks: 89.116.115.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:48:ed:c3:8e:34:71:1a:fd:88:87:2a:05:06:13:b0:42:79:86:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Oct 11 17:24:53 2023 GMT
Not After : Oct 9 17:29:53 2024 GMT
Subject: CN=2C5D8D36B42C766C1F837692DA9C1F45F13C418D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:e3:1b:3a:93:4c:8c:08:ab:89:9b:e7:e8:
52:16:33:93:85:b6:37:3a:67:86:a6:87:1b:72:3a:
b0:99:f1:7d:40:23:6d:78:00:a3:c7:ad:20:3a:6a:
84:a9:96:14:94:55:f5:8c:71:49:ff:22:fa:59:5a:
79:74:84:02:01:65:a0:bf:3c:1f:9a:18:ff:25:a4:
64:9b:e7:84:54:5e:b2:82:82:02:37:0c:f4:a2:7f:
9d:36:05:8f:f8:4e:da:01:41:c2:9b:f4:4e:96:50:
d8:25:54:d3:26:e2:cd:4a:99:7d:81:91:71:1d:25:
a2:0a:be:c6:ab:ba:03:b7:5b:e6:aa:49:0a:94:64:
86:98:96:12:06:b4:d5:be:c2:09:a8:ca:3b:f0:01:
66:28:a5:5e:d0:0e:89:bc:70:55:90:59:bc:9a:37:
57:8a:1c:8c:d3:93:44:99:13:90:7a:d3:f2:1a:ca:
66:23:32:bb:e1:f8:b1:e2:a4:c0:fd:ff:28:4f:5d:
bf:70:86:d0:a4:57:5e:07:80:8f:dc:d0:60:ea:bd:
da:65:f5:55:13:de:dc:85:e3:5c:16:e4:fd:7e:d4:
ca:fd:ca:30:53:f9:f6:92:2f:db:37:d2:32:a9:c0:
16:a8:b9:91:06:cb:03:ef:10:f2:fe:06:38:48:e9:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:8D:36:B4:2C:76:6C:1F:83:76:92:DA:9C:1F:45:F1:3C:41:8D
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42055.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.115.0/24
89.116.233.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:08:5a:72:89:15:d6:9e:03:df:58:e6:9f:4b:73:19:89:34:
75:9b:a6:0b:da:8c:e3:41:3a:22:3f:2a:81:8c:b9:56:9b:6f:
47:ed:49:bd:fd:b6:bc:06:4e:23:29:4f:92:0a:0a:7b:98:39:
3c:aa:85:47:f6:1d:52:eb:4c:c2:34:d3:9e:06:af:06:b5:81:
f8:86:02:c9:01:62:eb:45:a1:cb:67:25:96:b1:8f:0b:4f:41:
41:d8:fd:cf:9a:42:c2:e7:d7:63:29:bf:94:7d:20:2a:dc:4a:
4f:cb:12:fd:05:f9:9f:49:6a:85:23:8c:ec:90:e0:8b:f3:71:
d6:87:bd:39:20:8e:14:c9:8e:a4:39:5b:6d:c4:20:b0:5d:ef:
45:6d:66:c3:d6:32:9b:ce:4c:01:a3:2e:3f:9c:1a:2c:9b:a4:
da:c1:8d:38:1b:36:39:d8:6d:e8:90:e6:e1:6e:23:1c:a4:ea:
97:4b:b0:ce:fb:58:9f:5d:17:91:47:74:4b:2c:43:b7:ab:fc:
f4:4b:37:13:8e:f0:ff:8f:87:97:cf:a3:14:f9:d1:d6:ea:1d:
46:d8:8c:c8:f6:57:8b:29:34:30:08:3b:0c:61:cb:a3:f2:a2:
87:0d:1d:a4:9f:d8:52:86:87:0e:ef:e6:58:ff:7b:da:45:7e:
81:0a:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 09:13:34 2023 by rpki-client on console-ams.rpki-client.org