Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32332d3233203d3e20323132323338.roa
File: 33372e312e3232362e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: 50Cw6DpJt6fzbaIzVJBqzbA060BSFdzhw2WDxY4cBww=
Subject key identifier: 41:84:3F:1E:E3:EE:14:7B:39:94:57:30:7B:0A:EB:11:25:20:93:5E
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 06DEA20D595114F0F1A72DF480A63997E1390765
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32332d3233203d3e20323132323338.roa
Signing time: Wed 11 Sep 2024 10:13:31 +0000
ROA not before: Wed 11 Sep 2024 10:08:31 +0000
ROA not after: Wed 10 Sep 2025 10:13:31 +0000
asID: 212238
IP address blocks: 37.1.226.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 11 Oct 2024 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:de:a2:0d:59:51:14:f0:f1:a7:2d:f4:80:a6:39:97:e1:39:07:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Sep 11 10:08:31 2024 GMT
Not After : Sep 10 10:13:31 2025 GMT
Subject: CN=41843F1EE3EE147B399457307B0AEB112520935E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:a4:2d:a6:ff:15:94:59:9e:4e:39:38:28:
84:42:ad:ff:62:67:c6:b8:6d:42:7e:e0:b1:57:94:
e3:db:8a:c2:d9:8a:52:82:11:07:a5:7f:33:37:cd:
d3:03:83:f2:68:2d:56:1d:4b:3e:eb:ed:9e:00:1d:
cd:c8:74:5a:42:a2:e6:27:a5:5b:a8:2a:79:b5:ad:
81:98:4e:66:c6:ee:3b:1c:09:8d:6a:e2:0c:f6:3d:
02:b4:e5:e2:a5:4a:67:b3:f4:6e:42:70:e8:b5:e2:
0d:2e:f9:4d:1b:1e:5a:ab:4b:0b:cd:9b:9e:4f:b6:
3f:23:50:4a:dd:ad:34:6e:b2:bf:60:90:cb:27:89:
bb:f2:05:be:89:08:3f:fa:d4:fb:0a:9a:6f:4f:81:
48:dc:42:42:15:25:f8:56:92:f6:e5:98:18:6f:51:
b9:50:74:0a:2d:e4:27:24:42:a6:31:dd:4a:48:e2:
9d:b3:ac:95:85:b5:29:70:c7:7f:e9:7d:26:aa:35:
17:a4:d6:cc:fe:58:0f:5b:80:3f:67:fe:b7:56:c0:
8b:e4:62:a0:74:44:ae:de:e6:2d:d4:c4:08:d6:8d:
1b:59:4c:c2:0b:92:72:60:4e:e1:d5:0d:eb:7c:41:
21:99:44:bc:b8:91:c2:92:52:e7:fa:39:95:df:c2:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:84:3F:1E:E3:EE:14:7B:39:94:57:30:7B:0A:EB:11:25:20:93:5E
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.226.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:62:9d:a3:a3:2d:5e:4a:33:ed:74:5f:bc:86:a9:2e:35:c2:
1e:14:f2:75:3c:46:e6:d0:89:7b:aa:59:0e:41:69:75:38:24:
2c:4c:b9:ed:80:bf:11:e8:14:26:1d:ac:aa:a3:d8:2b:9d:9c:
fb:6b:a0:31:7c:07:bf:a5:a3:54:d0:f8:fe:51:02:e5:8d:71:
4b:12:ef:02:19:99:13:01:f3:89:18:1e:5c:6c:4a:8b:6a:f6:
36:1e:02:a1:a3:f9:0e:b3:e0:31:df:ec:fd:08:7b:49:5e:a7:
be:fb:5a:98:6d:0b:35:c9:5f:85:d7:b0:6a:06:d4:bf:29:5d:
ae:93:00:1e:89:e1:91:77:65:f8:05:eb:47:65:5b:af:9a:e2:
32:c9:48:16:57:3c:a8:4c:0e:99:83:61:d2:bc:6f:77:98:86:
f4:16:be:b9:ac:3f:83:af:27:f4:76:41:bb:68:55:f1:59:a2:
fc:20:af:d6:2c:95:dc:e8:0e:4f:2b:94:27:9b:10:1c:23:50:
79:7f:d1:f0:c2:f2:93:1f:cb:ed:cc:ad:3e:2a:9e:7b:ba:33:
90:76:2b:1b:9b:69:3a:9f:02:9f:1e:c0:e1:98:42:bf:87:7d:
93:24:84:fc:93:eb:26:a0:41:80:b1:43:3d:91:48:28:01:e4:
7d:e6:7d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 02:41:39 2024 by rpki-client on console-fra.rpki-client.org