Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20383334.roa
File: 33372e3233302e35312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: M12ZP9YV9/7qtH/bS0t4xsbyeZ4JiWUAAjUoa0zDrI8=
Subject key identifier: 5B:9C:8D:59:8E:A1:26:DC:53:AA:6C:A3:C9:C5:6E:C0:EE:7F:42:17
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 349079F9CCBBB15063A16DFFC956180914D556A2
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20383334.roa
Signing time: Wed 19 Feb 2025 00:02:08 +0000
ROA not before: Tue 18 Feb 2025 23:57:08 +0000
ROA not after: Wed 18 Feb 2026 00:02:08 +0000
asID: 834
IP address blocks: 37.230.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 22:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:90:79:f9:cc:bb:b1:50:63:a1:6d:ff:c9:56:18:09:14:d5:56:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 18 23:57:08 2025 GMT
Not After : Feb 18 00:02:08 2026 GMT
Subject: CN=5B9C8D598EA126DC53AA6CA3C9C56EC0EE7F4217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:01:fc:36:52:40:6c:c2:b2:cb:33:0b:fa:
9f:bc:ff:d9:c2:79:fa:91:f4:a3:05:b7:70:e3:7a:
f8:7d:d9:a7:74:4a:21:42:b2:a3:1c:ee:fa:19:d0:
4a:d5:30:04:f9:5f:76:07:cb:da:60:c3:1d:e9:49:
06:f4:37:1c:8c:a5:2b:1b:48:59:0b:c4:9f:1b:f7:
86:c4:28:e4:82:29:dc:9b:8f:9b:9a:b0:d7:67:de:
ad:1c:3f:20:ff:0d:c3:0c:a9:09:a2:a5:29:5e:ea:
dc:1c:e0:88:ae:8f:96:7b:fc:d6:23:38:19:8a:af:
74:7d:4e:fd:2f:df:b4:e3:c2:e9:c9:20:a2:55:3e:
d8:7e:c8:ad:98:33:5c:93:f4:84:fc:b3:1e:b4:cc:
d8:21:ab:de:c0:87:f5:de:d3:68:9a:eb:1e:8e:8f:
14:7f:a3:39:4d:4f:26:99:6c:18:bf:b1:03:f7:dd:
42:cc:e1:f4:9c:e3:6b:68:da:ed:d7:9e:0f:c2:db:
85:b1:85:b0:33:6e:ec:32:a0:9f:73:5a:21:96:2f:
92:e7:a8:1c:5b:4a:93:1c:0b:48:64:70:00:d8:ba:
b9:2f:b0:f2:62:df:47:8a:80:31:e6:49:0e:6c:19:
7e:c3:50:bc:cd:70:19:fe:df:63:5a:cf:2c:9a:c7:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9C:8D:59:8E:A1:26:DC:53:AA:6C:A3:C9:C5:6E:C0:EE:7F:42:17
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.51.0/24
Signature Algorithm: sha256WithRSAEncryption
30:56:77:eb:dc:ac:6d:68:8c:1a:0c:76:ad:cd:70:f0:65:7f:
39:71:6d:8f:60:37:7d:99:7a:0c:56:6f:77:af:45:26:bd:b5:
87:f7:bb:68:d7:01:ea:08:64:ba:34:4f:c8:28:7b:af:aa:c3:
63:69:fd:41:d1:84:7c:b5:cf:40:05:f1:3f:03:9e:a8:d1:e9:
66:a6:89:ed:4c:07:11:7b:02:38:94:82:03:38:cb:a4:5f:08:
5d:2f:bb:e6:58:e2:92:ff:66:31:8b:2a:da:09:42:60:a2:9a:
a5:5e:bb:33:96:ed:c7:a6:e3:59:c3:cf:a3:fa:79:11:8d:aa:
67:e3:cc:a2:12:f9:0b:58:9a:57:c1:a4:a8:31:22:90:a1:ab:
7d:bc:e1:60:9a:14:2c:03:e3:4c:c5:23:4d:e2:ff:ff:aa:d8:
49:6d:ea:3d:15:41:85:90:06:ee:69:4e:c6:81:12:a6:93:34:
24:58:1a:9c:1e:0d:f3:98:c8:d6:cc:01:cd:c6:c6:dd:7a:e4:
e8:f5:34:70:27:ed:e8:26:ff:69:fc:6c:26:34:f8:90:4e:f8:
c9:1e:23:3b:a9:46:c5:04:f3:6e:19:83:6f:17:5c:44:df:81:
31:8e:af:17:70:65:0d:42:2a:01:44:8d:44:5e:d0:49:dd:cc:
05:89:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:02:51 2025 by rpki-client