Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3232203d3e20323132323338.roa
File: 33372e3233302e35362e302f32322d3232203d3e20323132323338.roa (raw, json)
Hash identifier: ntdiBwbHTO9Q/3mHpKA4CxtjJQb8C2asq1kU0u0/Lek=
Subject key identifier: 08:CD:06:B8:01:E5:06:77:14:52:84:18:EA:84:A4:02:2D:FA:5B:46
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 0BEDFEF3B5AF8F386325670B014B0E1F01E62302
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3232203d3e20323132323338.roa
Signing time: Thu 01 Feb 2024 04:17:05 +0000
ROA not before: Thu 01 Feb 2024 04:12:05 +0000
ROA not after: Thu 30 Jan 2025 04:17:05 +0000
asID: 212238
IP address blocks: 37.230.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 31 Mar 2024 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ed:fe:f3:b5:af:8f:38:63:25:67:0b:01:4b:0e:1f:01:e6:23:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 1 04:12:05 2024 GMT
Not After : Jan 30 04:17:05 2025 GMT
Subject: CN=08CD06B801E5067714528418EA84A4022DFA5B46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:09:a6:27:56:15:fb:31:6a:a2:dd:dd:a9:c6:
53:90:c6:c0:a6:a1:1d:85:dd:6d:1c:ee:a7:b3:8e:
56:fc:c0:f2:ec:da:63:7e:91:bd:64:64:a6:cb:dd:
4d:7c:12:cf:ba:dd:d2:bb:47:64:b4:cc:97:91:34:
29:1e:4d:fb:88:61:fe:0f:ce:0e:de:d2:7f:12:16:
53:c3:62:ce:db:13:db:5f:a9:eb:d1:14:3d:f9:c2:
20:55:07:b9:c0:8a:76:90:12:8f:1c:e6:36:27:e4:
b3:06:79:bc:56:2f:2e:a6:88:46:7d:c2:ea:07:d1:
cb:e9:3d:6d:7b:f7:0a:6f:bf:c0:0a:40:86:17:ae:
25:cc:7a:42:3d:bc:1d:9f:3b:fe:e8:f5:7d:26:1c:
9c:8c:68:81:b7:04:a7:7d:13:a1:ee:1f:8b:53:29:
50:f3:2d:b4:3e:c7:d3:c1:a5:a6:8b:3e:e5:c3:d3:
56:e6:3c:85:d2:a9:0e:35:80:19:37:12:be:2b:78:
af:54:43:78:91:56:01:74:66:44:23:a5:fd:52:a1:
7e:f8:22:9e:83:38:9b:95:78:51:bc:b7:48:e1:a0:
f5:39:21:99:d3:b6:4c:71:0f:04:2b:2f:87:69:a8:
3b:43:af:6c:bf:9f:14:fd:37:48:f4:6b:5f:05:e3:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CD:06:B8:01:E5:06:77:14:52:84:18:EA:84:A4:02:2D:FA:5B:46
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32322d3232203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.56.0/22
Signature Algorithm: sha256WithRSAEncryption
72:60:bd:9c:1c:a9:b8:ee:28:d8:e6:35:1d:19:c8:f1:24:10:
e0:29:e3:e6:c0:aa:a3:d3:7b:3d:9f:68:55:2a:40:9c:37:70:
9b:54:d5:05:84:5c:18:3e:65:ea:8c:2c:dc:d9:cb:92:fb:73:
c9:a1:04:52:c4:c0:a6:d0:f0:bd:74:e1:a1:05:6a:8a:36:c6:
3a:f2:89:a1:36:eb:92:fc:e0:81:3b:27:6d:e0:b2:63:f6:5a:
bc:e3:06:83:75:e9:9d:ca:52:de:7d:97:cc:1a:64:e4:17:7e:
fa:e7:75:10:ac:37:53:98:3c:da:a6:1a:19:a9:fa:1c:8f:6e:
b1:de:9d:e6:31:30:cf:e9:39:12:a3:2a:eb:b5:d4:39:16:6f:
eb:1c:25:16:1c:49:d0:36:86:ee:ea:f1:90:d5:6e:4f:c2:2a:
65:18:a8:ea:fa:af:5b:53:fe:0b:de:c9:5b:67:6c:5c:6f:55:
9b:fa:f1:f4:ad:c7:32:f4:f2:1e:66:89:cb:ed:6b:80:e1:ee:
2d:c0:83:86:17:ff:0b:65:06:68:c6:c2:f9:4a:7f:66:71:fc:
68:ae:7b:41:0d:90:5d:1d:08:a1:df:1b:bf:b2:66:d2:c3:69:
9d:20:26:e7:0d:5a:f5:a4:9a:1b:d7:64:0e:39:66:72:71:31:
52:a5:d1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 00:47:47 2024 by rpki-client on console-ams.rpki-client.org