Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32322d3234203d3e20383334.roa
File: 33372e312e3232342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: ysiMy2L35NjlQWk+akY7STm/eplrtCodero7MbXoZDM=
Subject key identifier: A5:F2:D3:0B:E7:65:43:45:3F:1B:43:90:58:3C:68:A8:CA:B0:10:B8
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 531EA0135446CC5BFDFC3E92952485D2F5F73535
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32322d3234203d3e20383334.roa
Signing time: Fri 11 Oct 2024 00:02:27 +0000
ROA not before: Thu 10 Oct 2024 23:57:27 +0000
ROA not after: Fri 10 Oct 2025 00:02:27 +0000
asID: 834
IP address blocks: 37.1.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 13:56:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1e:a0:13:54:46:cc:5b:fd:fc:3e:92:95:24:85:d2:f5:f7:35:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Oct 10 23:57:27 2024 GMT
Not After : Oct 10 00:02:27 2025 GMT
Subject: CN=A5F2D30BE76543453F1B4390583C68A8CAB010B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:c7:02:c8:59:c9:3c:fe:84:3b:a3:9b:66:
25:e4:94:f1:97:93:57:1a:e4:a6:f8:4a:c3:38:de:
b6:3d:a4:94:59:05:d1:37:da:fe:f1:7f:e2:d9:8b:
c7:b3:58:8c:05:7e:3b:3d:6b:6d:4b:19:d7:d1:88:
d0:95:6a:8d:11:af:be:08:a9:84:fe:00:98:ea:f2:
9b:51:9d:96:e9:af:49:bc:2d:aa:df:72:0f:9d:cd:
5f:28:ea:b0:0e:db:da:5e:8f:2e:10:29:8f:58:f4:
9d:47:55:dd:26:4e:78:c2:35:31:ec:55:ae:cc:59:
dc:df:bc:39:d2:19:83:9e:69:21:63:a7:e4:61:2b:
11:ae:51:12:24:71:f5:80:b5:f2:b0:bb:3e:22:52:
12:69:8f:ab:ba:02:a3:34:3d:25:7b:dc:e2:03:1d:
a4:a5:f4:30:4b:ef:24:6d:5d:c1:ba:21:c3:50:dd:
63:d1:ed:03:bc:b1:b9:ee:48:c2:ec:eb:b2:e7:0a:
17:54:a5:e4:33:1c:76:40:3c:fd:10:fa:4c:a5:b9:
62:5c:c0:96:ad:db:07:c4:86:43:02:fa:d6:3c:7c:
fc:b0:41:90:de:cd:1d:3e:4b:46:d3:c2:66:e4:34:
ff:ac:78:f6:bc:e0:8c:2c:98:91:0b:7d:7c:64:9a:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F2:D3:0B:E7:65:43:45:3F:1B:43:90:58:3C:68:A8:CA:B0:10:B8
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0/22
Signature Algorithm: sha256WithRSAEncryption
72:72:85:a1:16:ea:1e:da:db:6c:cd:5c:6a:eb:5e:e6:79:f0:
a2:f5:6a:44:a3:37:3a:55:74:c3:6f:3a:6e:fd:71:63:6e:52:
26:ec:c8:5d:3f:06:ac:56:c8:55:9e:b4:6c:58:3b:06:f4:62:
a0:1d:6a:5f:99:c1:cf:c7:61:c6:1f:eb:37:9e:a9:8c:49:4d:
a6:fa:2d:96:0a:f9:3d:61:1c:0f:f7:06:53:3f:16:7e:7e:e4:
20:b6:c7:94:7c:98:f4:4a:8c:02:b7:93:a9:58:f3:f3:26:7e:
68:75:a4:49:d4:4d:bc:cb:39:2c:9c:93:e3:17:2d:82:a0:7d:
59:16:15:94:ea:f8:70:1f:37:fd:6f:73:cf:4a:ce:24:5c:62:
95:19:5a:7d:59:b1:0f:0a:8f:ce:45:43:91:6d:95:d2:2a:5f:
6c:6c:75:b5:64:5d:d4:46:0a:b6:78:fe:57:86:4e:34:bb:61:
b0:ed:a9:c9:89:77:9d:18:4a:3a:5a:52:a7:6f:73:85:12:e3:
c0:d8:8c:e9:68:9a:d6:04:c7:cd:dc:f3:87:b8:f5:b6:c7:7a:
0b:9d:1e:b6:f4:44:98:74:03:67:b0:89:76:77:d5:1a:d3:b7:
f7:d0:a8:4d:79:50:7a:7d:19:00:06:b8:cf:02:bd:9e:c6:35:
c5:86:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 17:45:11 2024 by rpki-client on console-ams.rpki-client.org