Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232352e302f32342d3234203d3e20383334.roa
File: 33372e312e3232352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8LIlVsUvB3jYWnZ36DdX6nLplevaGWGNwGgBY/F9ijI=
Subject key identifier: 85:C6:43:25:8F:C2:4B:36:DD:62:21:02:3C:A2:48:16:4B:07:58:FE
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 08FCD08992EAB2B388DCF88C2C47794D03FFB5FB
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232352e302f32342d3234203d3e20383334.roa
Signing time: Sat 26 Jul 2025 22:57:16 +0000
ROA not before: Sat 26 Jul 2025 22:52:16 +0000
ROA not after: Sat 25 Jul 2026 22:57:16 +0000
asID: 834
IP address blocks: 37.1.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Jul 2025 08:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fc:d0:89:92:ea:b2:b3:88:dc:f8:8c:2c:47:79:4d:03:ff:b5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Jul 26 22:52:16 2025 GMT
Not After : Jul 25 22:57:16 2026 GMT
Subject: CN=85C643258FC24B36DD6221023CA248164B0758FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:8a:bb:7a:0b:00:f7:62:1f:77:be:84:5c:
33:ae:69:c3:f0:69:80:e6:01:53:06:ac:73:3e:c1:
27:38:4a:16:f1:12:be:3b:fe:59:c5:89:0d:f7:88:
5a:ca:47:c2:b1:2f:15:86:cb:b0:af:db:c1:f7:5d:
a5:24:ab:07:c3:bf:d5:48:03:46:d7:7e:5d:36:bb:
10:a7:ce:40:c7:de:b2:d0:0d:1c:93:d7:bc:a3:c5:
eb:fb:6c:6a:3a:b3:99:1e:d3:00:42:51:cb:87:c2:
f9:10:b8:de:7c:18:20:67:1e:1e:71:f7:45:81:4b:
cc:c3:99:fd:84:09:9c:64:19:62:d1:69:4a:5f:a6:
bd:19:74:a2:f6:8b:02:13:dc:64:a3:26:61:18:3b:
03:90:fc:8c:53:ce:96:96:b2:f9:2f:24:48:fc:cc:
22:6e:28:f1:f6:01:b2:1d:1d:5f:88:ed:ff:ec:1c:
67:5e:93:17:e6:2c:29:5b:58:ba:a7:d0:b4:ab:c8:
81:1e:53:e4:ac:61:4b:35:10:4c:79:96:3f:c7:ae:
e6:f7:9c:ef:a1:9b:2b:b6:d7:e0:77:50:8f:87:74:
50:60:a3:af:83:37:e9:3d:78:45:9a:73:19:35:4b:
af:2e:3b:57:81:fe:22:c7:94:4c:e0:77:98:19:91:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C6:43:25:8F:C2:4B:36:DD:62:21:02:3C:A2:48:16:4B:07:58:FE
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.225.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ca:ed:13:2a:89:ba:da:6f:5e:92:fd:f4:90:5e:2a:ae:8d:
0b:e9:31:69:2a:26:76:eb:d3:3f:3e:a2:85:99:71:bf:19:a3:
81:a6:80:56:45:d0:ae:ec:e2:38:16:5c:0c:10:fa:e7:bf:fe:
ad:36:65:3a:a5:da:97:a3:87:14:78:fc:eb:0f:33:b1:db:b2:
ee:ea:50:0c:21:3c:1b:1f:85:6c:8a:d3:59:b2:e0:c5:da:fd:
64:7f:93:e9:39:fa:f6:0d:f7:29:10:ad:1a:bb:3f:b2:14:fe:
94:f7:d3:3a:44:2f:8d:2f:de:8e:f6:79:95:06:e6:20:c6:fa:
53:73:0f:0a:56:47:b5:e8:ec:aa:ad:0b:4a:25:2c:19:d0:ee:
57:74:0d:09:0b:bc:3e:0f:5b:58:3d:f8:6f:1a:3e:0f:80:2d:
9a:59:29:8e:cf:61:97:22:dc:b8:2c:80:ea:c6:96:c5:d0:b7:
27:f5:02:5c:91:a2:df:6c:d6:2c:ea:05:fa:8e:cc:0a:a9:95:
2f:5e:37:1a:08:ae:1a:25:fb:b1:92:82:87:80:0d:22:c8:15:
d4:b5:47:4b:2b:d3:d8:e5:19:9d:66:45:1a:40:91:f9:d2:c4:
4a:2b:a1:cb:ee:f0:7e:18:41:29:c6:8b:d9:e1:e9:eb:77:69:
40:6d:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:36:36 2025 by rpki-client