Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32312d3231203d3e20383334.roa
File: 33372e3233302e35362e302f32312d3231203d3e20383334.roa (raw, json)
Hash identifier: D/bF0YYdgjmjib9bKvLWBa94em3n7p6Hp/UD7W7fkFM=
Subject key identifier: 5A:1C:F5:23:37:02:B9:A7:1C:4E:D2:87:F1:61:46:AD:C5:1B:B4:54
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 7BC3A1FF3522E629E98065556104A30C1C1DEAA9
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32312d3231203d3e20383334.roa
Signing time: Tue 07 Nov 2023 11:43:02 +0000
ROA not before: Tue 07 Nov 2023 11:38:02 +0000
ROA not after: Tue 05 Nov 2024 11:43:02 +0000
asID: 834
IP address blocks: 37.230.56.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 23 Jan 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c3:a1:ff:35:22:e6:29:e9:80:65:55:61:04:a3:0c:1c:1d:ea:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 7 11:38:02 2023 GMT
Not After : Nov 5 11:43:02 2024 GMT
Subject: CN=5A1CF5233702B9A71C4ED287F16146ADC51BB454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:61:c7:50:ee:f3:6b:7a:3e:a4:81:b5:2f:
09:74:86:23:7e:4e:d8:72:cb:15:50:c3:9a:24:c3:
90:99:0c:09:e7:2b:db:4e:b4:f5:fc:eb:5f:c0:24:
77:58:02:c4:8c:97:e2:e8:6b:bd:8c:8c:43:ad:3b:
12:63:e4:c4:72:10:6e:eb:cb:24:e6:61:b0:5c:3b:
18:4d:dc:23:76:97:66:4e:0e:09:64:46:48:cf:80:
e2:d7:d9:8e:3c:09:ed:00:f2:31:cb:1e:dd:01:a6:
a6:6c:74:67:20:c0:2f:3e:97:50:1d:c8:d9:62:5b:
c5:44:71:8f:d5:07:3c:6f:ff:1a:f5:98:a7:45:63:
8a:a5:59:ff:19:96:e3:48:81:95:18:e6:ba:07:e7:
88:5f:1b:56:5c:92:34:68:49:5c:9a:d0:84:01:30:
63:90:05:3a:31:be:39:76:25:aa:60:d1:70:b4:b1:
ca:52:be:27:5a:8c:88:88:91:2c:38:db:dc:52:29:
74:b1:a2:51:64:d6:2d:cf:60:b5:69:ca:ee:c9:62:
8c:8b:ab:a7:cc:63:fc:23:f6:e8:92:12:e0:8b:e4:
bc:ae:ed:11:f4:67:f4:4c:c7:5f:6c:5a:ac:d1:8b:
78:db:be:8a:a6:c5:5b:ff:87:5b:82:56:25:3d:9b:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1C:F5:23:37:02:B9:A7:1C:4E:D2:87:F1:61:46:AD:C5:1B:B4:54
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32312d3231203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.56.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:af:a8:f0:18:f8:a9:46:c8:6c:72:9b:6d:4b:6b:7e:24:bf:
06:18:17:dd:52:78:2e:6c:07:1a:b1:8e:14:5b:c5:d4:a1:13:
b8:c7:b3:25:95:5a:96:37:94:d2:8f:ba:86:c3:27:10:0b:e4:
e1:f8:95:8a:bb:1f:ca:cb:90:6d:ba:27:68:dc:97:62:62:36:
6d:f0:90:a6:e0:87:94:4e:69:3d:30:69:0c:9a:01:b7:d2:0f:
e4:3d:ee:fc:87:11:16:d4:ce:f7:a1:f4:f7:c5:be:0e:1a:d0:
9a:ee:0e:91:f1:6c:fd:84:a8:4c:a0:23:a0:3c:d5:15:59:b4:
0e:53:cd:70:9f:28:70:78:b9:e5:db:40:7c:3e:83:41:18:84:
2b:6c:6d:12:81:49:83:79:d6:c6:72:c9:b3:47:54:87:bd:d0:
a0:e6:67:76:17:cd:b9:94:f2:af:34:b4:90:cc:4f:57:cc:63:
d8:5c:fa:33:60:8c:96:59:60:75:17:53:ff:9d:eb:7a:93:d7:
60:38:22:db:69:ad:28:fe:47:37:b3:06:b0:44:80:d1:cc:b8:
e3:b8:96:e1:f8:0f:58:67:12:c6:6f:41:49:06:b3:bd:a5:e7:
39:08:ae:4f:71:d9:ba:3d:0c:08:27:eb:c5:45:48:f1:f3:9b:
e0:cd:87:06
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUe8Oh/zUi5inpgGVVYQSjDBwd6qkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yMzExMDcxMTM4MDJaFw0yNDExMDUxMTQzMDJaMDMxMTAvBgNV
BAMTKDVBMUNGNTIzMzcwMkI5QTcxQzRFRDI4N0YxNjE0NkFEQzUxQkI0NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNWHHUO7za3o+pIG1Lwl0hiN+
TthyyxVQw5okw5CZDAnnK9tOtPX861/AJHdYAsSMl+Loa72MjEOtOxJj5MRyEG7r
yyTmYbBcOxhN3CN2l2ZODglkRkjPgOLX2Y48Ce0A8jHLHt0BpqZsdGcgwC8+l1Ad
yNliW8VEcY/VBzxv/xr1mKdFY4qlWf8ZluNIgZUY5roH54hfG1ZckjRoSVya0IQB
MGOQBToxvjl2Japg0XC0scpSvidajIiIkSw429xSKXSxolFk1i3PYLVpyu7JYoyL
q6fMY/wj9uiSEuCL5Lyu7RH0Z/RMx19sWqzRi3jbvoqmxVv/h1uCViU9m8QhAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUWhz1IzcCuaccTtKH8WFGrcUbtFQwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzIzMzMwMmUzNTM2MmUzMDJmMzIzMTJk
MzIzMTIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJeY4MA0GCSqGSIb3DQEBCwUA
A4IBAQAKr6jwGPipRshscpttS2t+JL8GGBfdUngubAcasY4UW8XUoRO4x7MllVqW
N5TSj7qGwycQC+Th+JWKux/Ky5Btuido3JdiYjZt8JCm4IeUTmk9MGkMmgG30g/k
Pe78hxEW1M73ofT3xb4OGtCa7g6R8Wz9hKhMoCOgPNUVWbQOU81wnyhweLnl20B8
PoNBGIQrbG0SgUmDedbGcsmzR1SHvdCg5md2F825lPKvNLSQzE9XzGPYXPozYIyW
WWB1F1P/net6k9dgOCLbaa0o/kc3swawRIDRzLjjuJbh+A9YZxLGb0FJBrO9pec5
CK5Pcdm6PQwIJ+vFRUjx85vgzYcG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org