Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e203136353839.roa
File: 33372e3233302e35362e302f32342d3234203d3e203136353839.roa (raw, json)
Hash identifier: 7cKdAwv4kbNRTGOe7FUqYocgu8mQyWoyi+lSZEis/Ac=
Subject key identifier: 75:9F:35:F0:61:3B:FF:D0:FA:7E:A8:C8:A5:15:F7:0B:F1:A8:05:E7
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 3A45781D12D3B54FA1B95682A8F86D55D0FBCE6F
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e203136353839.roa
Signing time: Thu 23 Nov 2023 01:16:28 +0000
ROA not before: Thu 23 Nov 2023 01:11:28 +0000
ROA not after: Thu 21 Nov 2024 01:16:28 +0000
asID: 16589
IP address blocks: 37.230.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:45:78:1d:12:d3:b5:4f:a1:b9:56:82:a8:f8:6d:55:d0:fb:ce:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 23 01:11:28 2023 GMT
Not After : Nov 21 01:16:28 2024 GMT
Subject: CN=759F35F0613BFFD0FA7EA8C8A515F70BF1A805E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:51:61:82:eb:8d:65:ea:31:1a:fd:b4:6f:
fc:d0:8e:fb:8e:86:5d:18:45:04:8d:e5:05:bd:8e:
76:52:5a:a6:0f:61:fb:af:07:ce:45:da:91:a9:24:
17:fc:fc:ed:13:c2:a6:c7:4c:52:4b:0e:52:b2:f8:
86:cb:7a:b6:8b:f1:19:08:e0:a4:6b:3e:fe:c7:9a:
46:c6:4f:95:fc:93:34:43:97:21:5c:aa:89:c4:61:
95:57:1b:90:9f:1b:81:f9:05:31:c9:51:db:17:56:
c0:71:44:7a:71:75:1f:99:fa:5f:4c:c7:fd:db:55:
7e:09:33:85:66:60:55:0e:72:1f:c8:4f:46:db:29:
89:77:41:50:cb:8f:ed:a4:60:c9:95:17:50:db:65:
67:b4:5b:f2:2c:a6:c0:41:b8:bd:13:cc:58:4f:71:
58:c4:fd:39:3d:c4:49:ff:79:d3:6c:62:42:91:9a:
c0:ac:a0:e0:ba:f6:9b:de:e6:a0:be:82:94:44:ef:
8e:3c:9b:fc:1b:e5:87:73:59:1b:61:c9:42:bd:3e:
08:79:68:9c:f9:6d:f4:b3:57:d0:96:5b:0b:e5:86:
5d:1d:0d:fd:d1:f5:62:db:4b:92:ec:cb:07:bd:6b:
63:ac:f3:ea:48:cc:d5:79:23:68:6a:5e:65:b3:fe:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9F:35:F0:61:3B:FF:D0:FA:7E:A8:C8:A5:15:F7:0B:F1:A8:05:E7
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e203136353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.56.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b3:4a:9b:6e:33:1a:d3:c8:a0:a4:94:48:a7:09:23:da:b3:
23:98:1e:27:2b:34:71:7b:2e:55:e0:4c:21:6d:e5:53:67:a4:
ac:d4:b1:fe:df:7f:d4:4b:00:90:6c:66:0a:7a:47:92:57:67:
5c:db:25:38:2d:96:c7:ae:ec:b6:5d:95:2f:50:5a:d6:f7:e9:
6e:71:cf:c8:cd:f3:d7:13:79:3a:ac:8e:22:22:46:56:1e:4e:
85:48:38:2c:ba:5a:97:75:42:89:6d:5b:ef:5c:1f:2f:37:2c:
30:a1:a9:fa:56:55:b8:e2:e4:e4:db:7c:93:0e:18:90:0d:44:
63:b7:e0:28:97:f9:53:3b:26:46:76:9e:05:5e:5c:a9:fd:e4:
3c:75:d6:6f:df:2e:1c:68:b8:e0:a2:46:ba:35:be:da:90:a6:
fa:c8:89:5a:22:ee:d1:3b:36:8e:cf:64:05:24:69:f6:aa:d1:
51:fa:44:4a:51:4a:a8:04:6d:b5:ac:b9:c4:25:d4:d5:5c:cd:
c2:13:52:cc:ec:a8:a1:58:bf:22:a8:27:b4:34:43:01:c2:3f:
0f:53:7f:78:92:a0:d7:19:cf:cb:2e:9a:c1:eb:68:1d:e4:9f:
1d:46:4d:d3:cf:e5:f7:51:0c:62:05:d1:91:4e:e2:f5:d4:c5:
06:5a:30:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 04:38:33 2024 by rpki-client on console-ams.rpki-client.org