Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20323135323837.roa
File: 33372e312e3232342e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: KlQNOUfFY3F6zaQTrRH0Ly+fqelWzrvFMWXCBjxqj9s=
Subject key identifier: C0:A7:42:61:1D:A8:78:10:99:FC:01:37:F2:0A:43:A2:F2:6E:7E:AA
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 34B601722093274BF11E267AAA01F0A42769E54D
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20323135323837.roa
Signing time: Sat 08 Mar 2025 15:29:23 +0000
ROA not before: Sat 08 Mar 2025 15:24:23 +0000
ROA not after: Sat 07 Mar 2026 15:29:23 +0000
asID: 215287
IP address blocks: 37.1.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b6:01:72:20:93:27:4b:f1:1e:26:7a:aa:01:f0:a4:27:69:e5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Mar 8 15:24:23 2025 GMT
Not After : Mar 7 15:29:23 2026 GMT
Subject: CN=C0A742611DA8781099FC0137F20A43A2F26E7EAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:4a:ed:54:ee:ea:f7:b9:30:11:95:75:13:
ef:62:4d:3b:8d:d0:e2:77:d5:25:1a:e6:c9:cc:14:
17:7d:f8:2a:94:c0:ac:f3:4a:f3:08:48:7c:f3:0c:
6e:f8:b9:c9:54:80:7a:b2:9e:8a:fb:a3:b4:3f:27:
89:03:ce:4d:9b:75:25:d9:5e:61:8f:70:06:a9:6e:
6f:2e:d3:50:e0:fb:6f:a3:7f:28:ce:0b:9a:b5:df:
c2:08:3b:2d:a3:1a:d4:c3:10:7e:3e:0a:76:c0:77:
e4:10:d4:56:59:8f:80:6b:08:10:7b:18:08:7a:f6:
98:3b:d4:f8:c8:bb:c4:c3:f0:ea:79:fc:60:6b:0b:
36:3d:ab:07:03:55:43:22:45:80:75:52:dd:bb:b0:
c7:d2:92:f6:6d:2b:8c:9c:7e:e4:83:5d:4d:9f:e4:
39:29:00:39:f8:4e:a9:14:14:b9:47:28:d8:34:71:
25:b7:bf:90:8e:c7:9a:5e:b5:db:24:80:f6:5c:c5:
9f:87:77:8a:4e:dd:2d:0a:f0:f9:13:9a:b9:7f:27:
62:67:c9:4e:5a:7b:a4:a8:13:13:7e:51:8b:0e:3d:
9c:3a:49:1b:af:9f:91:81:61:5e:2e:c8:4e:02:c2:
fe:00:08:e6:43:73:fd:63:28:7c:96:53:32:54:d9:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A7:42:61:1D:A8:78:10:99:FC:01:37:F2:0A:43:A2:F2:6E:7E:AA
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0/24
Signature Algorithm: sha256WithRSAEncryption
13:57:1f:fa:f4:27:f1:89:0c:32:76:f1:83:be:35:4b:e7:11:
f9:6d:e9:71:3e:a1:6e:b4:28:62:f1:80:f0:2e:fb:d7:b7:44:
bf:ee:1d:70:4d:14:bd:78:e9:a9:d9:ef:84:30:2a:2a:eb:e1:
d3:db:8e:f1:dc:c1:88:cc:49:b7:90:0d:a7:26:2d:3b:39:6b:
bd:c7:b3:84:aa:d8:dc:fb:9a:fd:de:5d:40:5a:60:c8:48:ba:
43:33:de:50:4a:40:a5:3d:7e:2d:87:68:2f:95:56:16:22:5c:
46:7a:51:3f:c3:f9:bf:0d:42:d0:4c:6b:4f:a7:47:48:15:f3:
14:7c:08:3c:45:de:7a:ee:ef:c6:41:df:10:c5:6e:b5:bf:9e:
4c:6c:a3:23:70:d3:16:9f:2d:f8:5d:63:35:cb:78:ef:31:bd:
d6:39:5e:fc:98:06:1d:61:25:29:7f:80:91:c7:8c:fa:0d:66:
e3:6e:15:a5:1e:d1:74:42:a1:3f:d6:06:90:03:bb:71:2f:e2:
32:39:a0:d9:1c:e8:bb:d1:ad:40:f5:87:3e:1b:28:96:09:55:
cf:51:e8:ea:3b:a0:d7:12:ad:38:b4:4d:27:60:c6:2a:6e:88:
b8:5c:92:21:67:a2:58:ca:c8:ae:8c:a6:56:6b:e3:ee:74:4c:
a7:ac:1d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:39 2025 by rpki-client