Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20383334.roa
File: 33372e3233302e34382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Q0WWTqC2+A3jCsvs76cdLa8G4DKRrPsYydznzBLMK+Q=
Subject key identifier: 0E:F4:26:E2:35:CE:48:CC:FA:80:F8:9A:5E:68:EC:F4:D1:52:18:EA
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 20FF2232BB200F2A41507C1CD520DA06556F8B4A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20383334.roa
Signing time: Sat 20 Jul 2024 00:04:07 +0000
ROA not before: Fri 19 Jul 2024 23:59:07 +0000
ROA not after: Sat 19 Jul 2025 00:04:07 +0000
asID: 834
IP address blocks: 37.230.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 15:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ff:22:32:bb:20:0f:2a:41:50:7c:1c:d5:20:da:06:55:6f:8b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Jul 19 23:59:07 2024 GMT
Not After : Jul 19 00:04:07 2025 GMT
Subject: CN=0EF426E235CE48CCFA80F89A5E68ECF4D15218EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:ea:b0:9a:78:77:92:b1:15:a0:3c:17:44:
1c:96:d6:a1:ce:22:da:42:cc:b4:85:f7:58:cb:33:
62:f0:8b:38:34:88:9b:f6:ea:67:a7:88:12:84:26:
26:10:99:72:06:b5:b2:c1:5c:f9:78:d4:f2:2c:66:
8f:26:29:32:7a:95:ec:1f:92:77:ce:94:6e:e8:35:
8e:9d:ff:a8:ca:48:7c:80:6b:38:ef:a3:a0:c3:e8:
40:ac:5b:ae:03:33:94:6a:60:7c:82:0e:a1:23:59:
9a:d9:59:f0:47:e1:33:9b:eb:d4:48:c8:c0:1f:40:
71:fc:9e:c9:c1:a4:4e:9c:81:d6:e6:f7:ea:bd:d4:
ca:b9:c6:da:26:fc:c7:d9:7c:31:71:87:22:13:7a:
b0:38:42:a8:72:e8:09:13:1a:b4:c0:3e:0d:6e:a9:
61:e1:61:ba:d8:3b:35:9d:20:1b:46:ff:b2:0d:a0:
57:56:fd:a1:05:5b:f3:39:eb:fb:54:a1:1d:ca:28:
e6:85:b9:c3:58:a4:9b:2e:60:c2:50:d3:d2:fd:37:
a2:20:72:9b:41:db:34:7f:0d:fc:de:96:f0:de:38:
64:5a:98:7b:54:a5:73:db:e5:9b:b0:96:59:f7:32:
0a:fd:d9:40:14:21:e8:29:0c:31:ca:9d:c7:3d:5a:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:26:E2:35:CE:48:CC:FA:80:F8:9A:5E:68:EC:F4:D1:52:18:EA
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.48.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bc:48:9e:da:6f:09:eb:9a:e9:88:58:07:1a:25:b9:7c:8b:
e2:c6:5e:bf:98:9f:95:70:02:c9:27:6b:4b:51:cc:85:d2:99:
ac:46:30:ab:49:ab:fa:c0:44:57:2e:03:52:ad:ef:f8:a8:78:
28:3c:44:2c:66:41:60:c1:9f:8b:1a:ab:43:da:24:c2:da:db:
c7:8e:d7:00:65:d8:b2:ad:8e:eb:af:ed:cc:94:06:e9:f6:cd:
f0:5b:61:2e:99:65:f6:0d:80:4d:ce:d0:ed:dc:95:65:d1:b7:
2a:a9:cf:db:65:8c:c7:9b:f9:aa:c7:27:6e:d9:21:ff:b7:ff:
9b:78:6d:d9:fd:4a:ef:56:10:0a:18:61:61:81:f1:4a:3a:6d:
98:e0:99:0a:ff:1c:7d:69:ee:29:e9:e6:82:85:fa:e5:3b:34:
c1:8c:c3:78:f2:f3:ac:2c:f9:7a:e4:d3:c8:0c:e3:3d:3f:5c:
df:95:64:59:ce:48:13:0f:7e:71:d4:7c:35:21:54:8c:59:72:
85:fe:30:56:4e:ff:73:3e:a1:f9:85:61:f0:0e:2f:17:83:65:
d1:86:89:de:cc:7a:e6:a4:da:d9:11:33:6b:13:3c:3d:54:db:
b9:d7:76:9e:a6:46:11:79:3d:a8:fe:8b:29:af:1f:72:06:d1:
25:68:3c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 18:15:46 2024 by rpki-client on console-fra.rpki-client.org