Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS60721.roa
File: AS60721.roa (raw, json)
Hash identifier: vGUcLAaQ5Op4hb6GLrk6GYV95+KPZlFdc9s58Rchd+g=
Subject key identifier: E6:8A:C0:54:4E:0E:7B:3B:A6:1F:5D:6E:67:39:AC:0A:14:5C:88:69
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 2668799A5B3255AE958C8A4AADDE399A8B964279
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS60721.roa
Signing time: Tue 12 Dec 2023 17:50:16 +0000
ROA not before: Tue 12 Dec 2023 17:45:16 +0000
ROA not after: Tue 10 Dec 2024 17:50:16 +0000
asID: 60721
IP address blocks: 84.46.170.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.117.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:68:79:9a:5b:32:55:ae:95:8c:8a:4a:ad:de:39:9a:8b:96:42:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 12 17:45:16 2023 GMT
Not After : Dec 10 17:50:16 2024 GMT
Subject: CN=E68AC0544E0E7B3BA61F5D6E6739AC0A145C8869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:c2:c8:cf:6b:ba:13:1f:28:92:be:ca:16:
1d:3f:ae:66:dd:dd:a9:4b:6f:8d:8d:8c:0f:70:39:
c3:f6:c6:b3:37:32:dd:9f:0d:59:41:eb:5b:81:2f:
f2:ce:c2:17:c0:2b:b6:e1:f4:82:9a:ae:eb:26:dc:
09:03:b7:8f:39:54:13:41:07:05:66:bd:36:1d:4f:
b9:62:1b:bd:40:8f:bc:b1:d5:3a:c8:97:0f:ea:73:
73:02:6a:93:af:cc:1b:00:de:dd:87:4f:e1:c1:25:
d1:97:85:06:1f:e8:82:8a:70:c9:1b:fd:b1:bc:a6:
e9:d3:c2:56:9f:bd:4e:07:bb:0e:a6:aa:05:62:80:
af:e2:88:7c:b1:1b:44:a4:bc:d0:2f:f1:c4:fe:7a:
d6:1b:df:f7:03:5f:40:07:5e:e5:e9:2e:fb:0a:1e:
08:68:86:08:24:80:9a:0a:5d:3f:f1:0f:bc:24:9d:
46:3f:72:49:10:56:96:27:c8:7b:43:1e:ce:97:39:
ea:ff:e9:65:1d:43:b4:cb:55:f9:20:55:33:9a:ee:
cc:f2:48:bd:ab:9b:6b:22:33:ba:01:b2:0e:af:41:
71:e0:37:ff:34:f9:6c:77:87:13:e2:1c:0f:bc:32:
d4:dc:ab:69:e4:9c:1b:82:95:63:9c:dc:c8:aa:51:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:C0:54:4E:0E:7B:3B:A6:1F:5D:6E:67:39:AC:0A:14:5C:88:69
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS60721.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/24
89.116.102.0/24
89.116.163.0/24
89.117.101.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e4:dd:51:91:25:b9:0c:6e:59:b6:41:c1:29:f5:26:80:b7:
51:d4:79:ff:78:4d:6f:39:a2:fb:3c:73:72:1d:d4:13:a2:db:
f9:bd:1e:15:ed:15:40:af:0d:f1:f6:85:dd:16:9a:56:fd:22:
7c:be:10:ca:94:4d:5c:d1:ac:07:ee:97:c3:a0:b5:6d:55:f3:
1f:d4:d3:06:d7:89:3a:58:a4:49:f2:ee:8f:0b:05:16:32:74:
05:0e:f0:b1:2d:66:b6:82:d5:69:92:48:69:f0:e1:81:43:23:
94:79:8f:98:00:21:b2:42:61:0c:4c:b8:33:88:42:94:16:68:
5f:b0:10:c5:27:b5:2b:84:f5:c2:48:c6:c5:f3:82:5e:e9:73:
d1:1a:7f:59:68:78:a4:75:27:00:e7:20:49:5a:cc:17:9f:93:
1b:84:85:66:5c:50:1a:17:ce:a7:77:4a:83:d6:5e:e8:53:4c:
0f:d6:1e:6d:ca:49:ac:bb:d2:9b:74:7e:21:2d:2c:9c:1d:1a:
8c:95:0e:e9:ac:5a:2e:7d:32:43:44:7f:31:c6:fc:26:72:d4:
01:7c:e7:9d:c9:cf:0a:ab:03:b4:21:ea:64:23:ca:af:cf:88:
c9:ca:0a:44:79:f6:c0:af:2f:01:3f:15:36:cf:c3:8e:f4:13:
e8:f9:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 16:41:41 2024 by rpki-client on console-fra.rpki-client.org