![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49468.roa
File: AS49468.roa (raw, json)
Hash identifier: VdabJ5OOoKqKEV1stDAYzJETQHME2vNqWw4+fIljX6Y=
Subject key identifier: 8F:99:C6:3E:D7:6E:A1:E6:F3:8B:BA:0C:C4:CF:50:C9:0D:A5:00:DC
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 62C2CC42C4C8E253B665F4F7A93C4AFBF40A0320
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49468.roa
Signing time: Wed 09 Aug 2023 18:03:07 +0000
ROA not before: Wed 09 Aug 2023 17:58:07 +0000
ROA not after: Wed 07 Aug 2024 18:03:07 +0000
asID: 49468
IP address blocks: 89.116.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c2:cc:42:c4:c8:e2:53:b6:65:f4:f7:a9:3c:4a:fb:f4:0a:03:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Aug 9 17:58:07 2023 GMT
Not After : Aug 7 18:03:07 2024 GMT
Subject: CN=8F99C63ED76EA1E6F38BBA0CC4CF50C90DA500DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:5a:0f:10:0d:59:ae:4f:0c:49:69:7a:ec:
3d:40:48:4f:4e:b0:75:c9:35:16:f0:c8:29:14:6d:
e3:cd:47:64:ca:16:d7:5b:44:49:d0:36:03:24:86:
97:dc:ab:15:c2:13:d9:c4:c6:6d:6c:7e:2d:ec:79:
ba:82:20:ac:27:76:2c:1a:74:84:96:06:b3:d7:f9:
7a:3b:33:ba:a7:86:cf:32:0f:f8:a7:58:e1:a8:96:
4f:71:62:31:ac:6b:90:c0:23:fd:67:ed:79:68:4b:
19:b3:52:65:93:32:26:14:5c:b8:a4:34:55:2c:58:
06:42:53:33:ca:89:96:b9:02:1f:58:b5:c7:c0:b4:
de:20:28:34:30:81:1a:3d:98:fc:2b:60:f8:b7:c3:
86:73:d8:d1:5f:b8:76:46:d0:f5:cb:64:4b:d1:19:
4d:57:94:3f:cc:01:89:72:90:55:95:e2:4c:91:5e:
c5:71:cc:25:64:f4:a0:fd:b8:97:e4:1c:a1:42:90:
18:e2:e3:6a:c3:d0:36:a8:61:1f:a2:70:4a:f9:2a:
9c:38:d2:42:82:d5:e5:c4:c0:bc:70:39:3d:05:ab:
8e:53:d7:c3:3f:9c:87:2b:a0:2e:70:36:76:b3:54:
ca:85:4d:13:bb:36:24:95:5e:1e:04:8a:e0:81:67:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:99:C6:3E:D7:6E:A1:E6:F3:8B:BA:0C:C4:CF:50:C9:0D:A5:00:DC
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49468.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.126.0/24
Signature Algorithm: sha256WithRSAEncryption
af:51:0e:15:79:a6:dc:f1:d3:db:77:ff:3e:a4:bc:5d:79:b3:
91:00:bc:e6:c9:23:70:79:f3:6b:54:74:75:73:b1:34:43:5f:
fc:4a:60:08:32:80:1f:84:b3:46:75:20:5f:85:45:94:61:dc:
bf:3e:0b:d9:0c:61:d8:3f:25:6f:67:67:03:f5:2b:f4:e9:0f:
db:81:48:50:b3:34:fa:88:d6:42:8f:eb:7a:e8:db:91:0d:8e:
73:66:3c:ee:0b:f0:5f:c0:81:59:3e:35:47:cb:0d:5d:9b:76:
6d:52:91:93:f1:40:c9:30:91:8b:3c:8d:2b:dd:30:22:4d:b4:
97:aa:42:c8:3b:0e:44:bc:6a:a3:b4:3b:9e:b8:ab:82:4d:4b:
30:e1:55:00:d3:ba:fa:f6:ef:83:14:b4:96:bb:03:f6:2e:33:
43:17:b8:88:89:9a:c7:0a:0e:1b:a4:35:37:9d:e3:9d:59:f1:
e6:2d:23:b7:c0:9c:f8:95:8f:a6:91:02:2f:e4:a7:18:71:e2:
f2:16:ae:80:6c:0f:eb:df:ae:24:4c:74:9a:7e:f3:8e:9a:c5:
cc:7d:03:15:c4:28:6e:d7:5a:58:b7:ad:e0:a7:95:ab:13:7b:
b4:c4:0c:3f:95:d1:67:51:d6:f3:99:c0:f4:dc:7b:21:7f:85:
bd:05:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:29 2025 by rpki-client