Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20323132323338.roa
File: 33372e3233302e35312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 2ITMN/oVOwq/vmea6uftIAW0zjCKYh1AnES8kKS4N0U=
Subject key identifier: D7:AF:4F:D6:0A:BE:DF:40:60:74:7B:2E:3B:2B:26:8E:BE:6A:D9:26
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 160F75DED729A904766D894084D006FBF4375F7A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 19 Apr 2024 07:41:47 +0000
ROA not before: Fri 19 Apr 2024 07:36:47 +0000
ROA not after: Fri 18 Apr 2025 07:41:47 +0000
asID: 212238
IP address blocks: 37.230.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 00:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0f:75:de:d7:29:a9:04:76:6d:89:40:84:d0:06:fb:f4:37:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Apr 19 07:36:47 2024 GMT
Not After : Apr 18 07:41:47 2025 GMT
Subject: CN=D7AF4FD60ABEDF4060747B2E3B2B268EBE6AD926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:e8:fc:76:77:71:20:78:aa:9e:3f:4d:2f:
a4:2f:50:71:3d:dd:dd:26:18:db:45:f4:76:1e:72:
8c:fa:91:ad:2f:05:79:8d:30:96:57:41:bd:53:68:
1d:5f:7a:4a:26:f5:83:1c:42:06:ca:df:b3:13:d8:
53:60:db:e6:9e:e2:28:a9:0a:c7:77:56:e3:c3:d6:
2d:a1:1f:dc:c2:59:a9:2b:c4:9d:fc:46:4b:8c:c7:
41:85:b5:10:9e:45:b8:c6:5b:e1:cf:0f:5f:7d:f7:
a7:25:44:1c:fb:85:83:f7:9b:db:45:4e:f9:37:8b:
99:94:aa:a4:34:96:82:81:df:1e:29:be:bc:58:36:
25:08:f2:60:b1:87:fe:cd:ed:90:81:63:5e:dc:a6:
3f:7f:4f:ed:51:06:da:9f:df:ce:88:d7:f3:8f:fe:
1d:28:bd:8e:cd:0c:69:82:3c:a0:f3:31:b4:b9:39:
55:15:fe:7b:e8:30:c7:73:a3:7f:25:5b:9f:88:0d:
fa:cf:4e:15:12:54:fc:8f:b7:c2:e5:d1:ad:8a:71:
9a:ff:2c:3b:43:b3:29:66:3c:70:ed:68:3d:0c:bf:
dd:f8:97:ba:5b:c5:39:6b:30:44:86:5c:8e:5b:54:
89:40:a4:75:6d:a7:53:bc:46:a2:9a:63:f7:65:63:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AF:4F:D6:0A:BE:DF:40:60:74:7B:2E:3B:2B:26:8E:BE:6A:D9:26
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:14:d5:5f:3c:94:c2:fe:76:32:3a:d8:0f:9c:d7:36:24:bb:
37:86:6a:0a:87:8a:2c:10:b7:b8:8e:5e:38:71:7b:73:21:fc:
80:62:14:37:eb:54:0e:1a:21:8f:b5:f3:95:65:58:8c:08:24:
1a:4f:d7:6f:ca:a4:22:19:3e:3c:85:a3:ee:4c:2e:60:78:0d:
83:3e:54:45:ce:15:1c:41:57:b7:38:82:2a:be:33:da:b3:dd:
fa:21:b5:c1:67:a1:7d:e8:3e:ef:8e:26:61:ab:8b:94:9a:a4:
bc:bf:92:5a:52:9c:fc:92:62:c9:d6:bf:84:e3:b6:98:4e:20:
ad:bd:a8:61:f2:c5:a0:6e:56:30:eb:01:64:ff:0f:7f:67:a8:
05:d1:df:7d:cf:99:5b:b1:ea:6d:00:23:d0:72:06:87:d0:48:
f7:28:f0:5d:80:7d:98:89:f9:0f:53:f2:4d:de:46:b0:7f:39:
0b:34:b1:03:8c:04:a7:0d:fc:22:59:c9:58:97:c2:38:b3:6c:
4b:78:8a:f1:9c:3d:a7:97:0b:c7:c9:0b:3e:34:99:7d:49:21:
9a:c9:8f:67:c2:95:b0:a1:b7:66:43:c7:8f:59:f2:18:50:a9:
fd:9f:e9:a0:cd:48:f2:1d:05:dd:ec:96:4c:82:e4:01:6f:ca:
7b:56:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:28 2025 by rpki-client