Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS43431.roa
File: AS43431.roa (raw, json)
Hash identifier: L6IHu235JIDQnoy/NCiedZm0zZAj5bzn2tbzvifFCBg=
Subject key identifier: 0A:81:D7:3A:53:66:B5:8F:A5:0C:B3:E2:D0:FE:88:89:2C:E3:D9:5A
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 0D766B5FA88F538693E739913BB8F5C7D568B6C0
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS43431.roa
Signing time: Sat 04 Nov 2023 00:04:27 +0000
ROA not before: Fri 03 Nov 2023 23:59:27 +0000
ROA not after: Sat 02 Nov 2024 00:04:27 +0000
asID: 43431
IP address blocks: 89.117.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:76:6b:5f:a8:8f:53:86:93:e7:39:91:3b:b8:f5:c7:d5:68:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Nov 3 23:59:27 2023 GMT
Not After : Nov 2 00:04:27 2024 GMT
Subject: CN=0A81D73A5366B58FA50CB3E2D0FE88892CE3D95A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b5:84:b9:dd:04:21:bf:c9:44:8b:b5:e7:76:
cf:39:ae:f5:c4:11:36:b8:ba:53:6d:de:2c:b5:ad:
b7:26:b6:e3:95:8d:3b:9a:12:f9:ed:42:0a:d7:12:
d3:07:e8:75:7d:1c:c7:71:18:35:cd:5c:38:f1:00:
c3:e6:0c:cc:35:9e:f8:98:c7:8c:3a:00:d5:c9:c7:
da:07:a2:fb:81:64:f4:87:e1:f5:d4:94:cc:87:7b:
41:fc:65:38:ea:d9:d0:37:5f:64:c7:c7:b0:c1:e2:
62:0b:0e:b2:cc:33:52:15:20:0d:d5:57:f9:43:c8:
cb:a8:93:a2:d3:af:4f:06:07:3a:1e:27:05:5a:f4:
87:ee:f7:1b:2a:99:a3:1a:9c:a1:c5:9a:8d:7b:53:
b5:ba:d3:64:cd:93:64:23:5b:d3:7c:ac:67:ef:f5:
d7:9e:a5:66:ee:d2:f7:48:9b:53:aa:47:11:09:6e:
1b:b5:be:0a:fc:b9:57:fd:0b:03:05:fd:03:9a:78:
d3:7f:c2:c6:98:fc:30:cb:ca:37:db:16:93:3c:17:
4e:15:a2:aa:be:22:ee:cf:95:2a:73:58:b2:59:03:
09:39:d0:08:85:65:9d:ab:16:4d:77:1f:47:cf:b3:
c5:ee:60:78:c5:77:ca:74:43:6b:67:a2:c6:6f:40:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:81:D7:3A:53:66:B5:8F:A5:0C:B3:E2:D0:FE:88:89:2C:E3:D9:5A
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS43431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.129.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b8:de:1f:5b:b8:7e:a2:e8:a5:a7:7e:2f:7b:35:2a:db:25:
35:d5:d2:be:b8:b3:37:b6:48:09:36:5c:61:7a:47:ad:86:2c:
00:97:a0:53:e8:1a:bb:84:87:6e:9c:28:51:8c:ad:63:fb:f6:
16:44:01:62:96:f5:67:0d:d5:45:0f:2a:ce:af:a2:2b:70:78:
4f:40:96:f2:e0:24:85:5e:ba:35:88:4e:8e:53:cb:c1:8f:11:
b9:88:7b:ae:bf:92:10:66:4a:12:61:36:7b:cb:fb:40:26:9b:
eb:cf:bf:18:93:78:1f:3b:00:d2:3c:97:3f:7e:18:56:6d:bc:
64:e4:17:bc:21:e0:d3:f7:a3:a9:b1:1b:70:30:9d:84:44:50:
41:ef:b9:7e:4c:cd:3f:ba:e6:98:98:cd:f8:2b:dc:54:84:fa:
77:34:96:6d:e0:9b:16:e9:f0:46:29:bb:e7:aa:d9:15:62:3b:
68:06:8b:7f:24:6b:0d:8a:a9:d0:bd:35:2f:13:c1:9b:2b:85:
01:e8:cf:94:87:f5:e3:10:31:c9:c6:6f:3f:02:63:27:9c:99:
f9:dd:fe:58:da:a7:a2:a5:e3:b2:e7:66:58:58:9a:9e:d3:33:
ed:f3:61:d2:2c:48:03:03:6b:68:8a:d3:ad:ca:7a:c0:37:cf:
41:6c:14:49
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUDXZrX6iPU4aT5zmRO7j1x9VotsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzExMDMyMzU5MjdaFw0yNDExMDIwMDA0MjdaMDMxMTAvBgNV
BAMTKDBBODFENzNBNTM2NkI1OEZBNTBDQjNFMkQwRkU4ODg5MkNFM0Q5NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHtYS53QQhv8lEi7Xnds85rvXE
ETa4ulNt3iy1rbcmtuOVjTuaEvntQgrXEtMH6HV9HMdxGDXNXDjxAMPmDMw1nviY
x4w6ANXJx9oHovuBZPSH4fXUlMyHe0H8ZTjq2dA3X2THx7DB4mILDrLMM1IVIA3V
V/lDyMuok6LTr08GBzoeJwVa9Ifu9xsqmaManKHFmo17U7W602TNk2QjW9N8rGfv
9deepWbu0vdIm1OqRxEJbhu1vgr8uVf9CwMF/QOaeNN/wsaY/DDLyjfbFpM8F04V
oqq+Iu7PlSpzWLJZAwk50AiFZZ2rFk13H0fPs8XuYHjFd8p0Q2tnosZvQJIhAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUCoHXOlNmtY+lDLPi0P6IiSzj2VowHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzQzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXWBMA0GCSqGSIb3DQEB
CwUAA4IBAQBwuN4fW7h+ouilp34vezUq2yU11dK+uLM3tkgJNlxhekethiwAl6BT
6Bq7hIdunChRjK1j+/YWRAFilvVnDdVFDyrOr6IrcHhPQJby4CSFXro1iE6OU8vB
jxG5iHuuv5IQZkoSYTZ7y/tAJpvrz78Yk3gfOwDSPJc/fhhWbbxk5Be8IeDT96Op
sRtwMJ2ERFBB77l+TM0/uuaYmM34K9xUhPp3NJZt4JsW6fBGKbvnqtkVYjtoBot/
JGsNiqnQvTUvE8GbK4UB6M+Uh/XjEDHJxm8/AmMnnJn53f5Y2qeipeOy52ZYWJqe
0zPt82HSLEgDA2toitOtynrAN89BbBRJ
-----END CERTIFICATE-----
Generated at Tue Jan 30 17:11:01 2024 by rpki-client on console-ams.rpki-client.org