Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35382e302f32332d3234203d3e2033333230.roa
File: 33372e3233302e35382e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: aw8TRGQu+8ywGis/6HSnVTNZ79fAAYnCQjcGBUO28vQ=
Subject key identifier: E1:C0:70:BF:8D:6C:73:46:96:E0:9C:66:E8:EE:51:0F:19:6B:16:8F
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 4DF437DD20E5BA6477A36AEBFF34E057EA1821FD
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35382e302f32332d3234203d3e2033333230.roa
Signing time: Tue 28 Nov 2023 23:11:11 +0000
ROA not before: Tue 28 Nov 2023 23:06:11 +0000
ROA not after: Tue 26 Nov 2024 23:11:11 +0000
asID: 3320
IP address blocks: 37.230.58.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f4:37:dd:20:e5:ba:64:77:a3:6a:eb:ff:34:e0:57:ea:18:21:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 28 23:06:11 2023 GMT
Not After : Nov 26 23:11:11 2024 GMT
Subject: CN=E1C070BF8D6C734696E09C66E8EE510F196B168F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:ae:25:e7:94:2b:45:f1:84:c1:aa:7b:60:
9e:a0:e4:27:21:92:3e:29:1d:fc:6d:2e:84:26:47:
43:9a:9c:78:70:94:a2:00:64:ff:1b:b1:07:81:35:
f2:7d:ce:19:7e:ce:26:4f:14:d2:23:da:a8:11:ab:
15:00:5e:6e:7e:6b:26:bb:70:48:f3:fd:c5:d3:4c:
87:c6:53:37:d6:40:f9:f5:33:d4:03:17:41:70:6f:
f0:ff:57:9e:3e:2e:9d:3f:13:0b:b8:5b:aa:79:72:
d3:48:18:60:c6:42:fc:74:4b:92:70:43:16:2e:11:
86:96:00:1a:3c:90:40:70:b4:74:86:02:72:bf:dc:
99:a5:18:5b:28:51:7e:23:7d:b5:7a:b0:53:ed:0f:
fb:97:24:0e:c3:ec:5f:32:83:c0:61:48:15:7f:62:
f0:6f:95:b1:e9:70:c1:46:db:5a:7d:13:55:c5:18:
49:81:30:81:ae:86:4b:46:af:b7:e7:66:3b:8a:8e:
53:60:53:57:4a:3d:34:f9:b0:3e:53:2f:9f:a9:92:
48:2e:8c:47:5b:81:29:5e:9f:d2:57:d9:56:4c:2c:
c9:a7:db:fe:62:c1:6e:44:f2:d8:13:b6:dd:bb:70:
62:14:69:e2:cb:1a:ca:b7:08:9d:62:7f:2b:46:2f:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C0:70:BF:8D:6C:73:46:96:E0:9C:66:E8:EE:51:0F:19:6B:16:8F
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35382e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.58.0/23
Signature Algorithm: sha256WithRSAEncryption
03:fc:92:dd:97:97:f5:2d:50:eb:02:f4:e5:0b:c1:08:19:08:
fa:ac:4b:4b:91:73:00:ea:69:72:17:8b:4e:83:46:55:10:82:
5a:e6:9f:e3:3b:24:57:d1:e3:d9:1b:67:38:6d:fe:2d:a5:7d:
10:87:5d:89:58:b4:7f:dc:39:75:52:5e:b3:30:98:06:f1:74:
4a:36:c0:b4:a7:6e:ec:5c:3a:de:e8:c8:d7:8b:9d:0c:27:3b:
8a:e3:cf:ec:23:2c:c3:15:6e:cd:2c:43:8e:c3:0a:12:6d:14:
e2:ad:16:b9:17:5c:16:53:bc:bf:3c:67:7d:b7:b2:df:38:a4:
3d:4c:fb:5c:13:9f:53:ab:da:5b:55:15:86:fb:58:50:ad:79:
96:03:6c:17:49:62:b0:5d:92:a5:46:4a:8a:ac:39:40:03:a1:
dd:a2:1c:9b:ff:ee:8e:20:ee:81:4c:b5:39:1d:9d:4e:94:ba:
13:a5:48:d7:35:d0:31:d7:9a:3c:26:19:22:e8:6a:fd:e6:1f:
ca:76:19:e6:dd:49:6f:a9:ab:7f:2a:33:dc:d6:5a:a3:8e:71:
94:db:56:c9:9c:9e:81:60:9f:86:c3:04:d1:33:b8:1a:1f:be:
64:28:e9:a5:94:a1:24:ae:98:55:76:f6:a5:45:a7:34:db:ea:
c9:26:8d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 28 01:08:56 2024 by rpki-client on console-ams.rpki-client.org