Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20383334.roa
File: 33372e3233302e34392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: X3CwVNNgrSGcFI3t/Qx3cAWtO3BjupagRAFU2W0TqDw=
Subject key identifier: 84:0C:53:41:54:36:84:7A:F6:4A:A6:2A:5F:08:42:DC:CD:2D:DC:E1
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 6304BADE85B00FF66629538D4B96535A5B700FB3
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20383334.roa
Signing time: Thu 29 Feb 2024 00:00:40 +0000
ROA not before: Wed 28 Feb 2024 23:55:40 +0000
ROA not after: Thu 27 Feb 2025 00:00:40 +0000
asID: 834
IP address blocks: 37.230.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 00:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:04:ba:de:85:b0:0f:f6:66:29:53:8d:4b:96:53:5a:5b:70:0f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 28 23:55:40 2024 GMT
Not After : Feb 27 00:00:40 2025 GMT
Subject: CN=840C53415436847AF64AA62A5F0842DCCD2DDCE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:70:91:0b:00:37:24:9a:ca:86:c1:27:df:
9f:97:a0:5a:28:48:d9:d5:7f:2f:45:17:a0:d9:87:
09:4d:6e:d2:5e:10:33:64:f1:ab:47:b9:0e:93:8b:
92:f8:80:f8:67:7e:c4:b9:3a:71:a3:e1:95:1a:02:
a6:7d:70:b4:fd:34:9a:60:0c:8a:74:e8:b7:de:94:
42:3e:84:71:44:29:55:f6:74:be:21:51:36:fb:10:
b4:a7:b6:d5:34:2b:55:59:a4:38:15:bb:41:49:96:
f4:53:a3:c5:9d:e0:9f:f2:89:1b:a0:33:e8:0a:10:
09:1c:3b:93:14:0f:48:c1:d5:35:f5:29:e8:e6:9a:
5b:ad:06:cd:32:bb:ba:32:96:7d:e0:a7:77:97:33:
1f:af:37:0e:a4:3d:3b:63:cc:e6:f2:f1:f6:67:fc:
a6:5d:e6:6b:f0:ff:0c:8c:88:34:a0:78:cc:37:f7:
41:a8:7c:6d:32:d4:53:a5:7a:6c:5d:3a:d9:f1:46:
1a:37:a2:5b:10:d0:b4:b6:f9:6d:1c:37:fe:14:46:
70:cc:b2:8b:5e:b5:be:5b:13:6f:14:53:ae:a1:36:
9e:7a:10:a4:6a:07:5a:05:2b:9e:1f:35:df:29:1f:
ba:45:38:35:79:4a:d4:b4:4b:c5:30:94:22:48:07:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0C:53:41:54:36:84:7A:F6:4A:A6:2A:5F:08:42:DC:CD:2D:DC:E1
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d1:5d:c6:81:39:8e:f9:48:ae:56:db:fd:c5:d6:40:51:cd:
0d:9a:ef:39:2c:16:cf:59:31:c3:4b:05:01:f4:48:dd:9a:9a:
8b:b7:86:b4:cd:7e:aa:38:c8:d8:c9:f2:51:e9:5e:c4:9b:6f:
01:80:d7:4c:5c:da:1a:aa:74:18:22:04:a3:fe:35:e7:0a:9e:
45:06:d3:bc:34:cb:2a:1a:90:02:ff:1f:66:95:b0:c4:2a:a3:
67:82:e8:27:5e:c1:fd:fd:61:1c:a1:d8:99:00:16:b4:0d:0d:
c7:f3:c2:3c:2a:c6:70:1e:bf:8e:a6:32:12:66:84:95:27:86:
e1:c5:62:36:e2:70:d2:74:b8:5e:50:c0:de:f9:6a:ee:32:3c:
b8:90:14:d5:31:cf:f4:34:ed:a1:4c:18:30:56:67:95:55:a5:
0c:5d:b3:81:f6:59:8a:ff:6a:18:6d:7b:dd:94:df:60:11:20:
bb:c0:41:92:13:69:19:61:ca:9d:58:35:85:38:9c:d8:5c:55:
75:3e:66:bc:8f:3c:a8:4e:b1:61:d1:26:db:0c:1c:a3:24:16:
f5:33:3c:c7:d1:c1:82:02:90:47:3b:58:21:63:c6:6c:68:08:
78:0d:3f:58:51:23:57:47:7c:f1:d5:ac:4d:ac:f8:28:ac:cc:
e3:99:34:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 02:05:17 2024 by rpki-client on console-ams.rpki-client.org