Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e2033333230.roa
File: 33372e3233302e35362e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: t6pkYp7UuqH1kmVCAhR8z4ZeiG014u6UQC/inH04Bvk=
Subject key identifier: 5F:9A:72:24:97:63:BF:0C:D9:76:06:E5:D2:3C:5C:04:21:1C:D8:EF
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 5BEF2788B8D436B9BF26F35FE371378BC2321C49
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e2033333230.roa
Signing time: Thu 23 Nov 2023 18:44:51 +0000
ROA not before: Thu 23 Nov 2023 18:39:51 +0000
ROA not after: Thu 21 Nov 2024 18:44:51 +0000
asID: 3320
IP address blocks: 37.230.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ef:27:88:b8:d4:36:b9:bf:26:f3:5f:e3:71:37:8b:c2:32:1c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 23 18:39:51 2023 GMT
Not After : Nov 21 18:44:51 2024 GMT
Subject: CN=5F9A72249763BF0CD97606E5D23C5C04211CD8EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:97:72:16:12:e5:15:63:cf:02:30:b5:3a:
0c:b3:83:81:a7:d4:7c:42:ec:77:4e:65:1c:59:cb:
0e:dc:d6:ea:67:93:0f:a3:78:89:4b:e6:95:61:c1:
89:79:dd:94:94:73:e2:26:c3:30:0c:57:f1:0b:62:
ab:56:3f:de:d5:9d:e3:9e:f0:16:6c:de:97:1b:17:
65:02:52:10:ae:7d:05:23:3d:3e:32:f4:5d:fd:07:
6c:fc:fc:de:0d:da:6a:89:79:93:18:d1:49:1c:7a:
8c:b8:ef:aa:c0:13:36:53:ac:41:21:af:58:4f:ac:
07:55:9d:38:7d:dc:fb:2f:80:a1:1f:78:bb:89:6a:
93:4a:41:23:47:5f:c3:8f:23:fb:dd:ed:7c:1f:29:
6b:38:45:b9:d7:01:c8:a9:74:51:70:39:a4:6d:f8:
f8:fb:0d:8b:08:2c:39:f9:fd:58:49:cb:1d:3d:c2:
70:a2:0f:80:6e:34:52:4b:8a:89:f6:13:8e:44:4b:
7f:0d:2e:d0:74:16:b3:ea:d3:21:5f:e7:d1:b7:11:
8a:3a:6c:f2:e5:8a:1e:5f:41:83:fc:17:5c:40:9a:
c5:a2:b2:70:28:9c:c1:53:39:de:0c:6c:90:5e:fa:
8e:a4:05:73:9d:4a:c7:e8:3b:1f:bb:e3:ec:ce:6b:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9A:72:24:97:63:BF:0C:D9:76:06:E5:D2:3C:5C:04:21:1C:D8:EF
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.56.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a8:3c:fe:ba:0b:aa:cc:b6:53:02:b5:a9:27:30:aa:a3:de:
45:c6:fc:79:70:fa:9e:ac:5e:e6:37:21:e6:2e:88:35:69:48:
3c:1d:50:9e:48:fb:1e:78:8d:5b:30:1a:00:07:6e:81:ac:ca:
86:e6:be:29:82:4d:99:c3:e8:5d:de:c7:9b:85:7b:54:99:01:
ff:68:72:59:9a:2f:f3:88:cd:bb:33:90:9f:61:9d:21:92:36:
1f:36:99:47:76:9a:b3:f6:55:86:b5:da:64:a7:cf:dc:e4:63:
31:53:c3:f0:0c:08:08:e2:23:ff:cc:d4:ee:ec:1e:ae:96:1e:
8e:c8:81:30:b8:b9:2f:c8:40:5b:e1:82:02:ef:2d:7d:5b:be:
5c:a6:a0:56:3a:60:a1:77:02:23:d1:41:e0:88:42:0b:98:6a:
e4:a9:6d:0f:7b:56:66:7f:61:51:3b:ca:20:fb:f0:cd:ac:33:
be:aa:04:f4:47:e6:c2:d9:e8:1a:ce:8d:cc:87:37:68:6f:5b:
eb:f0:ab:03:a3:61:69:aa:77:e7:03:fc:8e:9a:8c:6d:e1:27:
27:3b:77:3d:77:ed:68:dd:d3:cc:53:1a:74:f8:19:b9:da:16:
bf:0a:8d:61:5e:a0:01:2f:2c:3f:81:f9:5f:60:2a:06:7a:7d:
21:74:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 04:38:33 2024 by rpki-client on console-ams.rpki-client.org