Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203233343730.roa
File: 33372e3233302e34382e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: IQEo4vFMxB/dmK2g//n06RAe2G6ZcdQkPgCLf2fSK34=
Subject key identifier: D0:61:29:45:57:05:4B:DA:5A:D0:AE:C8:02:70:EB:EE:90:F3:7D:16
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 0FF8D57BB19547A05A5D5F790716D6A043C5D72F
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203233343730.roa
Signing time: Sat 18 Nov 2023 13:08:16 +0000
ROA not before: Sat 18 Nov 2023 13:03:16 +0000
ROA not after: Sat 16 Nov 2024 13:08:16 +0000
asID: 23470
IP address blocks: 37.230.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Dec 2023 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f8:d5:7b:b1:95:47:a0:5a:5d:5f:79:07:16:d6:a0:43:c5:d7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 18 13:03:16 2023 GMT
Not After : Nov 16 13:08:16 2024 GMT
Subject: CN=D061294557054BDA5AD0AEC80270EBEE90F37D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:9a:d6:0d:a8:b6:71:7b:13:8c:79:2a:59:
52:25:36:47:45:18:1f:0a:99:e0:14:7e:7a:cf:bf:
46:38:40:97:82:bf:34:15:a7:e3:24:25:c5:b6:4e:
a6:1e:72:91:20:74:b5:ef:17:63:4a:13:72:03:a1:
ea:90:82:48:b9:ed:4d:e0:a6:9c:ef:49:ba:3c:8c:
5d:96:f9:39:dd:d5:fb:c2:1f:88:dd:2f:f1:ac:6b:
98:e0:64:60:f9:65:29:3a:11:3e:37:cf:93:83:6c:
46:c3:ef:46:7e:f5:3f:c9:a7:11:80:f8:4c:8a:0f:
09:4f:90:97:f7:57:dc:b2:b5:64:49:4f:bc:b7:86:
49:1b:7f:1d:33:6a:19:dc:77:f6:89:5c:ea:12:2c:
6e:ac:cd:6f:50:b5:fe:9b:ee:6a:d8:76:da:51:d7:
17:35:c4:10:e2:d2:19:ed:be:76:e4:8f:c7:f7:38:
a4:9d:bb:b1:5f:ea:89:0d:8d:a4:ca:49:cb:4b:a7:
b8:c9:4e:67:b9:3c:9c:a6:3d:04:ca:e1:13:99:33:
38:cf:2f:cc:69:ab:e7:36:27:55:bb:00:f5:d5:d5:
94:c4:ee:05:44:b8:6d:95:ac:34:25:a0:4b:d0:50:
4e:38:f1:31:d0:9b:c1:b9:64:23:42:28:6e:3c:92:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:61:29:45:57:05:4B:DA:5A:D0:AE:C8:02:70:EB:EE:90:F3:7D:16
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.48.0/24
Signature Algorithm: sha256WithRSAEncryption
73:29:b9:a4:e2:98:25:06:80:20:2c:b2:7b:41:eb:de:9a:52:
81:8c:33:34:98:83:a6:02:71:0f:4c:24:46:72:b2:22:c8:47:
2d:4d:fe:ea:f7:15:43:cc:72:58:e3:bb:70:66:de:34:99:56:
09:9e:0b:44:9d:da:64:16:f6:13:98:af:f2:e4:ce:ff:6f:4a:
b1:49:f8:03:9f:64:27:a6:3e:c0:e1:94:66:1d:db:f3:c8:70:
33:6a:94:9b:0d:66:79:b3:3a:f1:04:cc:04:f9:0a:c7:2f:22:
19:44:9a:75:c8:d1:58:6a:34:17:02:f9:9f:07:61:67:2f:be:
77:75:b2:4b:97:dd:a0:62:44:71:70:23:56:e3:d1:23:aa:12:
f6:82:10:03:b4:2e:0a:34:9c:ad:8c:0d:f3:2a:a7:d6:5e:1c:
41:3c:f2:68:53:39:02:c8:49:35:e3:6c:f0:79:12:74:d5:a3:
f4:ce:67:d0:7d:cd:2e:f7:fc:bd:dc:0b:dd:37:e8:c8:e6:55:
58:9a:bb:3b:08:c9:5a:25:b0:a3:64:b3:c0:33:73:9e:21:41:
38:2e:f9:d9:d1:38:59:30:4d:59:ce:26:48:58:ba:79:38:b4:
be:8d:25:8d:76:a3:25:df:1e:b9:8b:a9:07:5c:fc:c1:91:db:
75:db:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org