Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203231383539.roa
File: 33372e3233302e35312e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: G4QpMEP4vf2xx8ftehMYETGQRqoewThKlWWM0YoQDhA=
Subject key identifier: 75:ED:32:14:0E:B9:2D:98:47:83:9C:BD:94:97:85:6F:A1:B9:71:FE
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 6DC1169AEE83A567748378147404B58A13B70C89
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203231383539.roa
Signing time: Wed 31 Jan 2024 10:51:33 +0000
ROA not before: Wed 31 Jan 2024 10:46:33 +0000
ROA not after: Wed 29 Jan 2025 10:51:33 +0000
asID: 21859
IP address blocks: 37.230.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c1:16:9a:ee:83:a5:67:74:83:78:14:74:04:b5:8a:13:b7:0c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Jan 31 10:46:33 2024 GMT
Not After : Jan 29 10:51:33 2025 GMT
Subject: CN=75ED32140EB92D9847839CBD9497856FA1B971FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:e1:65:f2:8b:fb:e4:cf:45:d7:87:a3:11:
a0:a2:22:a6:eb:64:e0:76:28:34:b3:5f:a0:15:55:
4a:1f:ec:e5:0e:54:b5:1a:51:4f:0a:e9:27:fa:2d:
c6:78:27:a6:d0:be:8f:76:ee:c5:54:39:73:ee:45:
b6:76:61:57:d5:a7:4e:2c:c6:73:26:da:ab:66:84:
d9:fa:f5:c2:a5:f7:d3:8f:05:cb:30:0f:63:61:32:
b5:1f:92:4e:49:38:ff:7e:12:0d:b6:5e:a3:e0:12:
15:00:43:51:49:8e:5d:fc:a6:3d:52:ef:d1:a5:a6:
87:41:87:87:94:71:d6:9f:6c:a6:34:ed:e2:e2:5d:
76:15:e8:df:ee:82:8c:13:c9:e1:49:8b:0e:cd:9d:
42:ca:f3:1a:bf:11:06:17:07:59:46:bb:8c:52:36:
d7:85:94:71:2c:80:51:fe:c3:a5:dc:5c:50:46:13:
3c:be:92:78:08:6d:e2:18:04:47:a2:1e:5f:a9:c7:
57:9c:ff:e0:69:ae:65:db:7f:b8:1d:84:78:68:15:
1e:ee:8e:39:a5:95:c0:19:0d:06:99:6b:68:e5:87:
ad:c7:5a:0b:19:32:78:51:ba:b4:e7:91:74:f7:56:
34:cd:0d:5e:ff:8b:4b:ca:6a:e7:0e:92:fd:e0:5d:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:ED:32:14:0E:B9:2D:98:47:83:9C:BD:94:97:85:6F:A1:B9:71:FE
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f6:29:54:63:5b:1e:44:73:53:74:ad:10:00:ae:cd:49:a6:
a3:fe:a9:1f:fa:2d:da:cb:c3:5e:01:3f:41:2c:c1:d1:fc:3c:
66:c1:c7:ab:29:fe:f4:c5:6a:0e:cb:af:46:86:b7:94:20:15:
69:c9:39:94:8b:25:22:30:a9:9c:50:bc:64:05:c4:54:eb:9c:
f4:dc:82:55:78:33:d7:39:40:63:52:7e:5e:bd:74:88:29:bf:
53:14:91:4c:39:2c:71:9a:83:24:66:ad:2f:e8:d5:7a:4d:5c:
48:e7:ef:83:9e:5b:02:7d:a7:26:b0:c4:c2:85:1d:33:60:32:
cc:90:d7:a6:88:1b:cf:5c:c5:bc:9e:9b:3a:df:e1:d5:06:ab:
d9:93:56:53:57:86:95:19:58:56:a3:7d:4e:d4:05:08:8c:e8:
6f:09:f4:72:eb:3f:67:8f:0c:21:0d:22:e2:25:cb:27:05:e2:
3f:44:6d:7d:52:a9:08:47:41:f8:0b:3f:35:9a:fd:c4:56:45:
df:8c:d4:a2:a5:8f:3e:bf:1f:ca:b8:9c:5e:0b:0b:e5:2f:45:
03:f6:1e:62:bd:97:e0:d3:03:55:54:4c:37:d7:e3:6d:cf:77:
02:9f:4b:fe:06:5b:0d:27:88:f5:33:31:ab:16:c9:f1:74:b3:
83:c8:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org