Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e203231383539.roa
File: 33372e3233302e34392e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: CVpXgqczkjSvqd+3GsChLCH2fqPqYA1esVIeC5ZNz6I=
Subject key identifier: 8E:76:52:9C:6E:68:08:C4:FA:E2:B2:5D:41:80:D0:1C:DD:A7:A9:4E
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 2352C144F0FF8943595917092214595B86CC87F1
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e203231383539.roa
Signing time: Wed 31 Jan 2024 10:51:03 +0000
ROA not before: Wed 31 Jan 2024 10:46:03 +0000
ROA not after: Wed 29 Jan 2025 10:51:03 +0000
asID: 21859
IP address blocks: 37.230.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:52:c1:44:f0:ff:89:43:59:59:17:09:22:14:59:5b:86:cc:87:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Jan 31 10:46:03 2024 GMT
Not After : Jan 29 10:51:03 2025 GMT
Subject: CN=8E76529C6E6808C4FAE2B25D4180D01CDDA7A94E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:9d:66:02:1c:d6:7b:6d:39:e6:c0:a4:d7:
f2:9d:be:5d:12:40:2a:8e:9d:42:36:44:10:17:72:
8b:99:22:7e:6b:a6:ce:b9:8a:1d:38:e5:a1:f3:74:
ef:c0:72:9a:08:99:9d:e5:71:38:8d:3a:e2:cc:f3:
22:e3:ff:af:e9:2a:01:61:0f:fe:be:0c:80:c3:49:
64:d7:09:15:4f:de:6b:d9:15:c9:e3:66:67:15:9a:
fb:f9:0e:7d:7e:20:11:0e:aa:f3:28:39:54:f4:69:
17:b3:34:29:94:0f:64:96:06:96:19:33:fc:9a:8f:
5a:a6:2f:69:10:de:8b:80:c8:06:86:c7:6c:d8:f6:
22:2c:75:02:d5:31:2f:8d:65:69:e8:89:ca:95:2e:
30:f9:21:29:01:0b:5f:fc:4b:3f:67:22:79:a5:2a:
fb:79:5d:b0:69:16:c0:50:30:3c:e5:df:16:a2:b3:
d1:24:3f:67:16:69:b8:64:a5:19:8f:23:31:7d:50:
49:de:86:76:2a:8c:4d:e6:6b:e3:0b:e2:89:06:49:
dc:d3:99:ae:d7:a5:45:4d:3e:00:88:3b:97:8c:96:
06:85:57:66:be:39:8b:a1:e1:86:46:66:be:07:c6:
84:9a:7c:14:09:64:8a:0d:c4:00:62:6d:64:d8:fc:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:76:52:9C:6E:68:08:C4:FA:E2:B2:5D:41:80:D0:1C:DD:A7:A9:4E
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.49.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c2:dc:c4:a9:cd:25:5d:2d:61:ef:0f:d3:0c:8e:f2:96:94:
09:39:c6:36:ab:96:d8:19:8b:14:6a:a9:84:8f:17:1b:2b:8c:
29:e4:5a:8a:83:38:db:01:aa:aa:e6:08:88:64:5b:a3:e0:da:
f5:47:4e:fd:b6:7f:c1:57:3e:1e:c4:c3:84:22:5b:cd:c6:dc:
c3:30:85:41:a7:a6:c4:9d:03:44:09:c2:73:60:7a:90:4f:31:
07:fb:08:a6:9b:74:af:82:bd:b5:48:fb:a3:96:25:ff:71:dd:
39:3b:b4:ae:26:dc:9b:23:fe:b9:8b:27:e7:d4:df:93:f1:55:
6f:26:67:37:18:4e:e2:35:e9:39:e1:1e:9e:9f:ad:27:3c:4f:
fe:0e:c1:e5:26:4d:ac:fc:04:95:c7:5c:ce:30:1a:09:36:37:
a5:c0:30:1e:21:60:53:b9:8c:0d:fb:ba:a2:5b:c3:1a:35:6d:
ef:7f:20:56:54:36:87:1b:03:72:ac:d4:f9:b5:85:f8:2f:66:
ef:e3:de:a3:bd:14:45:b2:75:e7:3b:03:09:cd:58:e7:61:f0:
6d:df:02:96:87:3c:88:ab:07:e1:b1:a7:6a:32:1b:b5:b1:76:
a8:57:15:73:84:e1:54:93:a8:2e:fb:cb:58:8a:b3:9d:a6:11:
cf:40:84:73
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUI1LBRPD/iUNZWRcJIhRZW4bMh/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDAxMzExMDQ2MDNaFw0yNTAxMjkxMDUxMDNaMDMxMTAvBgNV
BAMTKDhFNzY1MjlDNkU2ODA4QzRGQUUyQjI1RDQxODBEMDFDRERBN0E5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3p1mAhzWe2055sCk1/Kdvl0S
QCqOnUI2RBAXcouZIn5rps65ih045aHzdO/AcpoImZ3lcTiNOuLM8yLj/6/pKgFh
D/6+DIDDSWTXCRVP3mvZFcnjZmcVmvv5Dn1+IBEOqvMoOVT0aRezNCmUD2SWBpYZ
M/yaj1qmL2kQ3ouAyAaGx2zY9iIsdQLVMS+NZWnoicqVLjD5ISkBC1/8Sz9nInml
Kvt5XbBpFsBQMDzl3xais9EkP2cWabhkpRmPIzF9UEnehnYqjE3ma+ML4okGSdzT
ma7XpUVNPgCIO5eMlgaFV2a+OYuh4YZGZr4HxoSafBQJZIoNxABibWTY/MrbAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUjnZSnG5oCMT64rJdQYDQHN2nqU4wHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzQzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzEzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5jEwDQYJKoZIhvcN
AQELBQADggEBABPC3MSpzSVdLWHvD9MMjvKWlAk5xjarltgZixRqqYSPFxsrjCnk
WoqDONsBqqrmCIhkW6Pg2vVHTv22f8FXPh7Ew4QiW83G3MMwhUGnpsSdA0QJwnNg
epBPMQf7CKabdK+CvbVI+6OWJf9x3Tk7tK4m3Jsj/rmLJ+fU35PxVW8mZzcYTuI1
6TnhHp6frSc8T/4OweUmTaz8BJXHXM4wGgk2N6XAMB4hYFO5jA37uqJbwxo1be9/
IFZUNocbA3Ks1Pm1hfgvZu/j3qO9FEWydec7AwnNWOdh8G3fApaHPIirB+Gxp2oy
G7WxdqhXFXOE4VSTqC77y1iKs52mEc9AhHM=
-----END CERTIFICATE-----
Generated at Thu Feb 29 01:19:04 2024 by rpki-client on console-ams.rpki-client.org