Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e20383334.roa
File: 33372e3233302e35362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: y+wyCxJOkJyOJVKxTF8cDoSulHAcai8uxKHA2gaw9N4=
Subject key identifier: 58:27:64:BB:79:3D:0F:25:0F:0D:8F:3C:B2:8E:52:3B:AE:EB:A4:24
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 09CFC26B8C19225FD13BA4ACB79C7FCA1122BDC8
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e20383334.roa
Signing time: Tue 23 Jan 2024 00:00:05 +0000
ROA not before: Mon 22 Jan 2024 23:55:05 +0000
ROA not after: Tue 21 Jan 2025 00:00:05 +0000
asID: 834
IP address blocks: 37.230.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 04:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:cf:c2:6b:8c:19:22:5f:d1:3b:a4:ac:b7:9c:7f:ca:11:22:bd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Jan 22 23:55:05 2024 GMT
Not After : Jan 21 00:00:05 2025 GMT
Subject: CN=582764BB793D0F250F0D8F3CB28E523BAEEBA424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:c9:6c:c8:88:e1:c8:28:37:7a:00:b9:8e:
c1:b2:c3:d5:c9:87:e5:f1:d3:08:5f:97:6a:d6:b2:
c5:aa:c6:aa:66:82:f8:14:1a:b5:76:3e:0c:56:3d:
a6:08:e5:19:e9:a3:86:92:52:3e:94:3d:ab:bb:bb:
38:25:ea:9e:98:49:af:4e:db:e7:ae:2e:09:1c:d6:
ab:f8:e0:6f:84:c8:77:6b:d4:d5:4f:4f:12:f6:1c:
4e:c7:d5:96:1b:0a:47:6f:c9:4c:fe:21:cc:2c:4a:
9c:75:2f:60:f3:7c:cf:b3:12:2f:aa:85:cb:45:ed:
8f:13:28:29:a3:71:5f:bd:6d:12:bd:b2:7c:6e:95:
9c:9d:65:33:50:9a:aa:2f:3f:a2:01:3d:5a:e7:0f:
56:f0:ba:5d:8a:95:79:32:a8:73:3f:c7:25:45:c2:
2e:ef:4c:2c:98:e1:46:83:f2:d9:be:1b:43:aa:c7:
a9:f1:b4:d4:ed:46:92:13:ab:ae:b7:e3:30:f7:fc:
fe:8c:03:78:03:84:20:41:22:14:a0:9e:57:79:2f:
af:ad:fc:23:5d:9d:df:2e:ed:f5:da:b2:1a:87:bb:
77:2c:73:80:89:88:14:9b:6f:90:4a:51:9d:d3:2c:
1d:58:2c:be:3a:b8:97:b7:71:64:bf:9b:ca:20:f9:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:64:BB:79:3D:0F:25:0F:0D:8F:3C:B2:8E:52:3B:AE:EB:A4:24
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fd:d4:a2:bb:61:d2:74:7b:a4:6a:60:dd:8d:dd:fb:7b:67:
e2:4f:78:6e:8f:cc:a6:d2:1d:37:0c:64:e5:18:7e:66:0d:a4:
ab:9b:1e:6c:f4:88:a3:73:18:e3:d2:48:e5:b2:e9:af:5b:72:
9b:6a:e0:29:35:68:92:61:c6:fa:fc:69:29:e0:aa:9d:43:42:
81:af:75:7a:b9:cf:e3:f7:53:56:4e:c8:de:dc:02:70:62:90:
27:4e:6f:f5:de:bb:18:5e:90:1b:28:d5:17:cb:a3:7a:ff:95:
21:04:f9:7d:c5:dc:91:c5:3f:71:ad:5c:9c:9d:bc:b2:91:83:
6a:25:8e:d2:8a:9d:11:72:51:f3:b1:2b:0b:1f:0f:6f:6e:50:
eb:88:98:88:02:36:8b:8e:6c:dd:c1:12:3d:ef:2c:e7:19:ea:
36:7c:18:09:16:fc:ce:e1:ac:d3:02:db:7a:8f:ac:5b:f3:eb:
10:56:29:95:bf:2c:77:a9:c9:da:82:c8:ec:e9:75:b8:27:77:
6a:a5:2e:e0:65:10:da:30:40:e9:eb:de:e3:f0:15:75:42:ec:
77:91:61:ab:ed:09:68:f8:d9:92:2d:d2:c9:8e:ab:31:e4:10:
48:e5:91:40:04:d7:ca:eb:b3:c7:c6:1f:b5:29:56:ac:d8:b1:
11:fe:df:45
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCc/Ca4wZIl/RO6Sst5x/yhEivcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDAxMjIyMzU1MDVaFw0yNTAxMjEwMDAwMDVaMDMxMTAvBgNV
BAMTKDU4Mjc2NEJCNzkzRDBGMjUwRjBEOEYzQ0IyOEU1MjNCQUVFQkE0MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cslsyIjhyCg3egC5jsGyw9XJ
h+Xx0whfl2rWssWqxqpmgvgUGrV2PgxWPaYI5Rnpo4aSUj6UPau7uzgl6p6YSa9O
2+euLgkc1qv44G+EyHdr1NVPTxL2HE7H1ZYbCkdvyUz+IcwsSpx1L2DzfM+zEi+q
hctF7Y8TKCmjcV+9bRK9snxulZydZTNQmqovP6IBPVrnD1bwul2KlXkyqHM/xyVF
wi7vTCyY4UaD8tm+G0Oqx6nxtNTtRpITq6634zD3/P6MA3gDhCBBIhSgnld5L6+t
/CNdnd8u7fXashqHu3csc4CJiBSbb5BKUZ3TLB1YLL46uJe3cWS/m8og+WZXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUWCdku3k9DyUPDY88so5SO67rpCQwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzIzMzMwMmUzNTM2MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY4MA0GCSqGSIb3DQEBCwUA
A4IBAQA+/dSiu2HSdHukamDdjd37e2fiT3huj8ym0h03DGTlGH5mDaSrmx5s9Iij
cxjj0kjlsumvW3KbauApNWiSYcb6/Gkp4KqdQ0KBr3V6uc/j91NWTsje3AJwYpAn
Tm/13rsYXpAbKNUXy6N6/5UhBPl9xdyRxT9xrVycnbyykYNqJY7Sip0RclHzsSsL
Hw9vblDriJiIAjaLjmzdwRI97yznGeo2fBgJFvzO4azTAtt6j6xb8+sQVimVvyx3
qcnagsjs6XW4J3dqpS7gZRDaMEDp697j8BV1Qux3kWGr7Qlo+NmSLdLJjqsx5BBI
5ZFABNfK67PHxh+1KVas2LER/t9F
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org