Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20383334.roa
File: 33372e312e3232362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: IP37IcbnfykjlyHk9hRTU/1BmP1oN6wTqQUYvhMGCg0=
Subject key identifier: 87:35:FF:27:2A:E8:AC:38:DE:E7:C2:78:E3:65:AF:D0:76:5B:8E:71
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 21D90B46CADBC96F371AF990FE2E1DF2817D3FF3
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20383334.roa
Signing time: Tue 01 Jul 2025 00:00:57 +0000
ROA not before: Mon 30 Jun 2025 23:55:57 +0000
ROA not after: Tue 30 Jun 2026 00:00:57 +0000
asID: 834
IP address blocks: 37.1.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Jul 2025 17:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d9:0b:46:ca:db:c9:6f:37:1a:f9:90:fe:2e:1d:f2:81:7d:3f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Jun 30 23:55:57 2025 GMT
Not After : Jun 30 00:00:57 2026 GMT
Subject: CN=8735FF272AE8AC38DEE7C278E365AFD0765B8E71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:ab:f8:32:87:94:8b:69:1a:87:a6:b3:4e:
11:ab:80:d9:90:82:78:dd:38:49:b2:db:61:45:c5:
f2:95:7f:e2:a9:6f:d1:f7:a9:8c:cd:0d:ca:17:b2:
35:40:89:a9:fa:e6:98:bc:5c:b4:bc:68:90:10:5f:
ed:1b:53:40:bc:4d:8e:9f:86:55:a6:3e:ef:63:f1:
ea:f0:fc:09:89:53:a2:0e:b7:e4:52:59:e2:15:7a:
8c:17:42:9e:78:6d:7d:b5:6a:67:c5:03:ce:15:6d:
4b:45:51:08:a0:e6:93:f5:34:fc:3b:45:e9:24:4b:
08:a7:69:a9:45:64:db:96:ac:d5:30:e4:27:8b:7c:
64:e1:74:25:37:37:07:1d:b7:14:3b:9d:10:8f:1f:
c2:30:ed:a8:39:01:3f:f0:11:fe:b0:cc:61:85:77:
f1:9a:a2:32:ef:b1:f0:4d:f6:88:06:05:c0:ae:5f:
f7:e2:88:96:57:ff:35:fe:69:8a:76:3f:32:05:e5:
29:e2:30:78:bb:78:92:67:63:4b:8d:90:e4:e9:1c:
74:ec:28:8a:3a:b4:e5:5c:d0:7c:52:ff:6b:69:df:
96:57:76:22:fb:de:46:da:77:2c:05:b8:2b:e0:f8:
14:65:41:82:43:a6:4c:04:18:01:e7:0a:0c:d8:4f:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:35:FF:27:2A:E8:AC:38:DE:E7:C2:78:E3:65:AF:D0:76:5B:8E:71
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:28:fb:3b:04:82:f1:89:f4:7d:3f:25:ba:60:1e:52:58:f5:
1b:d7:e3:f9:db:14:8f:e9:0c:64:a2:5c:2f:bd:74:7b:a2:d9:
c6:78:96:ab:f2:02:f4:36:f2:f4:1f:f6:ac:4c:5c:23:8d:13:
1e:44:21:47:3a:f4:ab:3b:ca:74:7f:b8:58:6c:37:76:d8:fc:
50:72:8a:16:67:a5:6f:bb:8b:de:b9:74:d0:f8:92:5b:a5:3d:
55:bb:bf:b3:e1:19:fa:48:37:f3:52:70:47:05:23:52:77:67:
ef:b2:30:91:0f:02:8f:65:68:a4:4f:39:97:1d:e9:f4:9f:ff:
f8:89:c6:3b:d7:66:c9:89:1d:f8:15:de:49:72:72:d0:cf:3f:
74:16:45:07:4a:83:06:22:5b:38:c7:cb:b1:63:27:07:72:68:
e9:ba:b4:f2:25:05:98:75:83:eb:bc:30:51:15:9a:6f:c3:96:
5b:e8:8b:05:8e:23:32:07:41:aa:02:4d:76:b5:a0:33:4f:63:
81:f7:df:cf:5c:9a:44:a4:b7:45:88:bf:73:e6:d7:d6:fe:6a:
80:5f:da:c7:6b:ee:82:a3:73:63:44:ed:fc:01:d6:49:13:49:
4a:d3:1b:7a:cb:5e:c2:1b:c2:e7:87:08:e8:12:7b:a7:42:d1:
36:73:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 04:53:44 2025 by rpki-client