Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35382e302f32332d3234203d3e20383334.roa
File: 33372e3233302e35382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 7+rvoeYYQlObkNUy+3ZtqUpiJzky/gaOwSLS2AqrqXs=
Subject key identifier: 95:1E:C6:4C:90:62:D1:DA:7B:72:F3:60:DB:03:8E:AD:D7:A9:E0:CC
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 0BFCEFD51287529EC64FC9530D352CF564FF3913
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35382e302f32332d3234203d3e20383334.roa
Signing time: Sun 28 Jan 2024 00:00:07 +0000
ROA not before: Sat 27 Jan 2024 23:55:07 +0000
ROA not after: Sun 26 Jan 2025 00:00:07 +0000
asID: 834
IP address blocks: 37.230.58.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 04:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:fc:ef:d5:12:87:52:9e:c6:4f:c9:53:0d:35:2c:f5:64:ff:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Jan 27 23:55:07 2024 GMT
Not After : Jan 26 00:00:07 2025 GMT
Subject: CN=951EC64C9062D1DA7B72F360DB038EADD7A9E0CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:38:ad:9d:06:a4:05:97:c8:c4:db:11:8c:
eb:66:e1:a6:07:3b:d3:c7:eb:ff:f1:04:d1:52:7c:
d8:ea:86:a1:3f:d1:b9:60:61:35:11:c9:a7:75:08:
5b:14:d2:01:ec:e6:d7:9a:ee:a7:9e:5b:dc:99:5f:
69:db:fd:c3:41:d4:da:c8:0d:12:3d:89:cd:b9:04:
01:af:3f:b2:4a:e0:79:05:92:31:d9:a3:f2:28:b5:
e6:f5:35:d1:ff:44:05:5e:8a:0b:0c:ee:8e:97:de:
82:64:71:b0:e9:95:d0:ca:25:44:44:b5:ae:14:4b:
34:71:87:60:cd:81:67:60:4d:7b:ff:51:e0:dd:71:
c7:c5:6a:1b:37:0e:9f:94:7d:52:4e:31:bd:45:fe:
ba:45:b6:2d:38:11:1c:30:6a:4d:3c:a5:98:04:fb:
0f:24:11:09:11:98:e4:4c:71:0e:97:91:ef:76:72:
06:2c:13:30:94:24:f5:90:2b:81:0f:6c:28:cf:16:
50:7a:1d:38:48:58:54:f6:cc:b2:c8:9e:3c:c5:57:
00:73:c6:bf:09:5b:ae:b5:60:af:a7:9c:59:d8:0a:
a8:33:be:83:43:0f:31:e8:f5:40:3f:ae:f6:36:2d:
35:14:e6:ee:a4:66:fb:83:4c:55:19:2b:4c:b2:f1:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1E:C6:4C:90:62:D1:DA:7B:72:F3:60:DB:03:8E:AD:D7:A9:E0:CC
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.58.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:9a:0e:ca:4f:e7:db:d8:e1:78:ba:77:29:e5:d7:bc:77:c6:
13:3b:32:9d:8c:82:0b:09:20:40:21:b7:14:9f:40:63:f5:01:
9f:dd:40:1e:7c:c0:66:87:02:a7:fe:4f:dc:ec:89:cf:20:4e:
ba:f7:ca:7c:72:b8:b8:b8:f2:ee:3f:a3:51:c3:a9:16:68:99:
2e:5e:53:7b:13:50:ac:4a:1f:2b:13:2d:9e:50:86:7d:42:10:
4b:ad:fe:e0:e7:88:ca:9d:a2:f5:48:28:16:98:f9:cb:54:cf:
7c:a7:18:cc:a9:7f:73:8b:76:aa:18:01:bb:88:67:e7:93:7e:
ad:c9:d5:77:fb:26:30:17:db:81:34:2f:46:f5:9e:67:e4:7b:
62:c3:e0:7a:73:d2:bb:7a:3b:d4:e5:d0:bb:28:2f:0e:b1:94:
2b:c8:eb:e4:46:cc:31:e6:b3:c3:97:80:c8:99:9b:6d:39:14:
e1:a2:20:38:49:59:a0:9d:b2:27:6c:78:6d:ba:36:15:ca:c7:
7f:cc:09:0e:22:a8:3f:5d:eb:38:c3:30:86:76:de:61:d7:85:
98:cc:01:2f:62:c2:f0:d6:18:4f:f3:a8:3a:b2:ec:c0:68:b0:
1b:f9:ee:e7:6f:f9:cc:22:a7:8a:e2:09:94:dd:3f:75:8c:ea:
31:2d:4c:99
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUC/zv1RKHUp7GT8lTDTUs9WT/ORMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDAxMjcyMzU1MDdaFw0yNTAxMjYwMDAwMDdaMDMxMTAvBgNV
BAMTKDk1MUVDNjRDOTA2MkQxREE3QjcyRjM2MERCMDM4RUFERDdBOUUwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSTitnQakBZfIxNsRjOtm4aYH
O9PH6//xBNFSfNjqhqE/0blgYTURyad1CFsU0gHs5tea7qeeW9yZX2nb/cNB1NrI
DRI9ic25BAGvP7JK4HkFkjHZo/Ioteb1NdH/RAVeigsM7o6X3oJkcbDpldDKJURE
ta4USzRxh2DNgWdgTXv/UeDdccfFahs3Dp+UfVJOMb1F/rpFti04ERwwak08pZgE
+w8kEQkRmORMcQ6Xke92cgYsEzCUJPWQK4EPbCjPFlB6HThIWFT2zLLInjzFVwBz
xr8JW661YK+nnFnYCqgzvoNDDzHo9UA/rvY2LTUU5u6kZvuDTFUZK0yy8Vo3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUlR7GTJBi0dp7cvNg2wOOrdep4MwwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzIzMzMwMmUzNTM4MmUzMDJmMzIzMzJk
MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJeY6MA0GCSqGSIb3DQEBCwUA
A4IBAQCamg7KT+fb2OF4uncp5de8d8YTOzKdjIILCSBAIbcUn0Bj9QGf3UAefMBm
hwKn/k/c7InPIE6698p8cri4uPLuP6NRw6kWaJkuXlN7E1CsSh8rEy2eUIZ9QhBL
rf7g54jKnaL1SCgWmPnLVM98pxjMqX9zi3aqGAG7iGfnk36tydV3+yYwF9uBNC9G
9Z5n5Htiw+B6c9K7ejvU5dC7KC8OsZQryOvkRswx5rPDl4DImZttORThoiA4SVmg
nbInbHhtujYVysd/zAkOIqg/Xes4wzCGdt5h14WYzAEvYsLw1hhP86g6suzAaLAb
+e7nb/nMIqeK4gmU3T91jOoxLUyZ
-----END CERTIFICATE-----
Generated at Thu Feb 1 05:18:58 2024 by rpki-client on console-ams.rpki-client.org