Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32332d3233203d3e20323132323338.roa
File: 33372e312e3232342e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: v95Mvs/OupagwWfYXC9uGkSjFqonYti8u4yV8ynDtjg=
Subject key identifier: E6:05:30:94:87:57:B4:A1:7A:36:64:A3:D5:0C:A2:6E:75:08:D4:C7
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 20698F35D2AEBB542DE0AAE507401D19E755ADEF
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32332d3233203d3e20323132323338.roa
Signing time: Wed 11 Sep 2024 10:13:30 +0000
ROA not before: Wed 11 Sep 2024 10:08:30 +0000
ROA not after: Wed 10 Sep 2025 10:13:30 +0000
asID: 212238
IP address blocks: 37.1.224.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 11 Oct 2024 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:69:8f:35:d2:ae:bb:54:2d:e0:aa:e5:07:40:1d:19:e7:55:ad:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Sep 11 10:08:30 2024 GMT
Not After : Sep 10 10:13:30 2025 GMT
Subject: CN=E60530948757B4A17A3664A3D50CA26E7508D4C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:bb:cd:0d:5a:b3:f0:89:c3:7b:42:25:3e:
69:7c:c4:df:19:84:e2:bc:8b:8a:bf:92:fe:70:30:
93:76:dc:64:23:c7:0b:12:0d:c4:61:66:63:60:36:
c3:19:85:3d:3d:6a:90:54:bb:49:c0:38:e6:08:41:
f1:79:c3:19:35:2f:9d:06:a9:81:23:04:c6:5e:f4:
5d:db:5e:27:7c:c1:9c:5e:f4:2f:c0:22:ba:4d:67:
e9:f5:02:4f:34:7d:bb:0e:ca:a6:35:28:0c:de:c8:
48:93:55:42:09:e6:57:ed:c7:4c:20:23:e5:54:47:
9c:1a:74:d6:60:0b:9f:8f:86:06:17:34:a9:ee:c2:
88:9e:02:71:06:54:0f:aa:93:81:66:36:53:f6:f6:
67:b6:b9:da:53:70:ba:e5:e1:db:9a:bc:6b:73:54:
73:13:d6:6e:7c:83:85:09:cc:ef:43:bc:ad:46:3b:
51:6a:99:03:73:d4:54:03:70:87:20:61:2d:a7:8b:
c2:a3:a2:39:8e:af:ec:77:27:09:ee:54:5e:de:07:
49:ec:8e:a1:2d:f2:29:cd:96:f2:59:a1:ab:9c:3b:
c0:3b:14:97:b6:90:c1:69:e8:fd:94:cf:90:40:c5:
2d:12:17:72:fc:c9:0e:17:2a:29:ea:c9:30:b2:fc:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:05:30:94:87:57:B4:A1:7A:36:64:A3:D5:0C:A2:6E:75:08:D4:C7
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0/23
Signature Algorithm: sha256WithRSAEncryption
15:be:ff:b8:ea:32:a2:a3:46:a2:c5:0e:33:50:22:1d:05:3d:
5d:86:36:60:0e:c8:10:d0:ed:14:b2:7a:ae:d4:f9:ad:a9:61:
13:27:df:00:0b:b8:21:e0:96:f3:62:44:94:2c:8d:67:a1:47:
80:92:55:11:68:57:6f:ee:8e:18:2b:c9:05:8f:81:c9:29:23:
06:0b:24:3f:a0:a6:e7:3a:9f:b7:a4:78:16:7d:d2:4f:5b:40:
85:4b:e1:c3:4a:af:53:5d:72:b6:e8:9c:16:50:2e:35:f3:85:
cd:0a:e1:61:dc:48:ae:a6:f4:f5:c9:1f:32:b0:3a:c0:fa:a7:
4e:52:29:64:9a:f4:6f:11:12:d4:13:91:f2:0b:94:a8:78:a0:
0b:77:9f:a2:32:1c:84:81:e1:80:01:66:fe:af:e8:46:b1:27:
60:66:2b:c3:da:c6:7b:3e:ff:29:72:4f:95:b1:44:43:50:cc:
07:27:98:e2:36:8f:d5:7a:0c:46:e3:e8:b0:3e:47:83:cd:d6:
35:b6:7d:3f:7d:cc:65:a6:13:ea:1b:0e:aa:47:6b:b0:b1:7f:
0c:43:bf:2c:e7:bc:05:05:7c:77:80:f4:49:c4:80:7a:9c:aa:
8f:c8:16:76:bb:59:16:45:e4:f6:68:7c:29:e0:6c:f5:c4:92:
11:97:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 03:36:28 2024 by rpki-client on console-ams.rpki-client.org