Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20383334.roa
File: 33372e3233302e35312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +lbyK/VD/Me+0NMnIePMrrd0d+kTqizeVX/ptap4hec=
Subject key identifier: 35:3E:2B:86:39:06:55:67:4F:2E:18:18:14:65:71:1B:85:AC:C5:25
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 5289C8942B25AD140344EF2D7A0D9392D2EC952A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20383334.roa
Signing time: Thu 29 Feb 2024 00:00:40 +0000
ROA not before: Wed 28 Feb 2024 23:55:40 +0000
ROA not after: Thu 27 Feb 2025 00:00:40 +0000
asID: 834
IP address blocks: 37.230.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 07:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:89:c8:94:2b:25:ad:14:03:44:ef:2d:7a:0d:93:92:d2:ec:95:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 28 23:55:40 2024 GMT
Not After : Feb 27 00:00:40 2025 GMT
Subject: CN=353E2B86390655674F2E18181465711B85ACC525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:10:f1:0c:2a:ad:69:ea:f5:98:97:71:3a:
d6:bf:f2:70:03:20:87:98:be:97:84:0f:11:a5:7d:
8d:2b:62:be:7a:2f:b3:57:17:3e:62:1b:0b:41:f3:
54:7b:95:37:7b:ab:fa:b2:d2:9c:8d:e6:9e:b2:35:
f0:b6:08:f7:b1:3e:e6:5b:a4:d5:ac:b8:59:b1:6d:
0b:db:38:cb:0d:75:3a:14:71:28:6d:de:c4:b3:e4:
13:11:36:ca:fc:15:d3:8f:88:97:5c:da:5c:20:63:
9d:7a:59:1e:a0:dd:f1:86:5a:cf:e9:fd:62:23:b8:
c8:f9:ed:f1:d8:2d:3f:ec:79:15:e4:be:cc:81:f8:
70:c4:96:54:80:15:c1:88:28:38:f4:a5:44:15:0d:
e0:94:0d:b9:65:f8:15:99:14:de:61:86:65:fe:96:
22:48:e5:d9:01:06:f3:9f:1d:d5:d6:46:b7:e4:74:
eb:8f:af:de:ab:a0:94:99:6f:e2:fa:1e:eb:d8:1b:
d5:48:99:f5:84:ec:ee:80:3a:90:ef:c2:b9:05:62:
9d:41:14:f1:4c:43:6a:22:9f:b4:f9:3f:b7:31:f3:
01:0d:f5:91:6c:d4:94:4c:44:55:95:9e:05:bc:65:
b7:25:c0:18:6d:ba:87:21:f9:76:11:c2:f3:e4:f6:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:2B:86:39:06:55:67:4F:2E:18:18:14:65:71:1B:85:AC:C5:25
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.51.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f3:a0:d5:68:12:fe:77:30:d7:3e:c1:ea:df:d9:35:9d:48:
27:d7:e3:87:19:ae:d9:3e:e0:34:cc:fe:a9:e5:ba:c1:41:e6:
43:35:07:d7:b7:47:28:9b:88:d0:45:24:ac:8f:b4:02:f1:00:
b1:c5:b6:83:ac:61:84:1a:9a:79:52:2f:a5:43:0b:a7:2f:f2:
4b:7f:85:6c:c7:92:60:6d:2d:33:10:2a:08:25:e1:21:14:f7:
e1:32:81:4a:70:3e:c4:f7:23:5a:3e:4b:42:d7:56:c8:89:c8:
2a:3e:66:ad:a5:b9:55:c6:46:8d:51:ec:02:c1:76:42:c0:df:
ce:2d:c4:bd:24:7a:8a:5a:eb:37:0b:4b:49:13:03:8d:32:00:
17:3a:20:3e:a9:9c:08:b0:1a:de:a6:37:0b:10:09:77:f5:36:
71:5b:18:7b:a4:b8:b9:b6:c4:23:24:71:fc:e0:f9:8e:ce:e8:
60:a7:3d:40:a9:50:05:8e:48:c0:c5:74:74:31:ec:ce:47:44:
c6:1d:28:c3:28:97:d9:93:0f:f9:30:62:81:3a:d4:70:f8:b3:
18:5d:bf:a8:c6:04:95:92:2a:fd:27:27:17:68:08:0e:16:37:
9d:6d:40:88:f9:42:68:6f:61:cd:8f:d5:e6:cc:4d:ba:8b:2e:
c0:be:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 10:51:32 2024 by rpki-client on console-fra.rpki-client.org