This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa
File:                     33372e312e3232342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          pPoEzQ7d/zSeo6wmK6ahTM938mRKR8HBvpEB1ne2izk=
Subject key identifier:   1C:8D:73:58:18:BE:D2:58:2E:D4:78:5D:63:29:E1:15:5F:66:E9:9D
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       59E1AFA209770C27C2E7CB512B9D0A8A84CE7F39
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa
Signing time:             Tue 09 Dec 2025 11:49:22 +0000
ROA not before:           Tue 09 Dec 2025 11:44:22 +0000
ROA not after:            Tue 08 Dec 2026 11:49:22 +0000
asID:                     834
IP address blocks:        37.1.224.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 13 Dec 2025 07:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e1:af:a2:09:77:0c:27:c2:e7:cb:51:2b:9d:0a:8a:84:ce:7f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Dec  9 11:44:22 2025 GMT
            Not After : Dec  8 11:49:22 2026 GMT
        Subject: CN=1C8D735818BED2582ED4785D6329E1155F66E99D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:6b:e4:37:3a:f0:fa:65:20:4a:e3:75:9f:
                    31:42:da:f4:77:b7:e8:cb:0a:81:90:b9:26:b0:ad:
                    4f:72:85:db:ca:82:25:e2:1f:40:cc:0e:ef:4b:3c:
                    8c:b7:4a:a0:96:14:7c:24:10:bf:40:2f:b4:ac:af:
                    eb:86:b3:5c:91:9c:a5:f8:66:c3:6e:be:25:0f:13:
                    21:e3:f0:45:4e:8b:b6:99:af:4a:c7:e6:86:cd:42:
                    83:f5:d5:1d:24:ff:4e:13:0b:ea:f0:f3:c6:3e:6e:
                    b7:a5:0a:f0:c8:5b:c4:b9:5d:a1:7a:3d:c0:3f:00:
                    7e:b3:ac:74:c5:2c:a9:dc:a5:c0:b4:6d:6d:09:30:
                    24:db:df:a9:82:e7:cc:88:54:7d:3e:0e:3c:83:2e:
                    d8:e6:53:5f:49:61:0a:4e:04:89:95:e6:8d:67:b4:
                    27:1c:7c:2e:fc:6f:ce:a2:a7:89:a6:57:43:d6:cc:
                    65:95:c1:34:41:ff:29:01:cf:8d:53:8c:bd:0a:2a:
                    a4:d0:27:1b:2d:67:7b:2f:72:00:b5:92:2b:ef:1c:
                    98:6d:c5:8f:27:14:20:cf:a3:b3:cd:45:6c:aa:61:
                    39:bb:2b:32:e1:df:4e:34:e5:45:38:4f:d4:4c:86:
                    3b:c3:d9:a0:90:12:a0:35:ff:d9:d9:6b:61:27:91:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8D:73:58:18:BE:D2:58:2E:D4:78:5D:63:29:E1:15:5F:66:E9:9D
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:a6:c7:a2:50:dc:c4:65:c7:5a:6f:8b:43:a8:0f:2a:ab:94:
         0a:64:75:a0:f1:54:aa:3f:e8:e9:ac:49:40:4e:74:58:7c:18:
         22:e5:08:aa:ba:25:32:3d:a5:5f:c4:f3:ab:c4:e1:15:18:eb:
         52:34:3c:5a:50:5b:aa:d1:e2:cc:01:af:0b:4f:83:cb:1e:95:
         02:13:ec:93:a0:aa:66:d1:eb:4c:27:b1:0e:8a:18:aa:c2:26:
         72:e8:56:df:31:f1:35:d3:77:d1:38:d8:d3:35:2e:bf:05:bb:
         e5:dc:91:86:1b:47:5c:35:fa:7f:e0:44:1c:1a:98:6e:85:23:
         e5:d8:a6:46:8a:75:ae:cb:a9:f6:7c:b4:b9:7f:5c:2d:25:86:
         79:70:f2:68:16:7a:53:ef:e7:6d:7e:4a:2d:04:87:b4:a5:d8:
         ba:93:4b:0c:68:2b:cc:45:08:60:9d:94:1e:b6:c0:36:11:80:
         4f:ca:30:da:d1:a7:00:b8:46:6f:04:6a:b9:31:b1:ad:00:eb:
         f8:38:0c:41:04:88:f7:14:34:b4:e3:d7:e0:c5:27:5e:99:a0:
         d5:64:d1:0e:c6:39:51:45:53:37:b5:5e:27:14:da:70:3a:b4:
         b8:94:8d:52:2c:ed:6c:b0:f9:f4:ab:bc:ab:d2:91:6a:c7:80:
         67:1f:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----