Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e203231383539.roa
File: 33372e3233302e36302e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 6f0vHok1ujFV1a3h9hfokRKlPm2mXeA1kxysRfwK+30=
Subject key identifier: 47:03:5E:41:FC:65:AE:36:69:BB:22:91:41:47:EB:32:09:A8:29:7E
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 4E85BAC4D5399737BE1AFFB0A3806EE0247DB005
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e203231383539.roa
Signing time: Wed 31 Jan 2024 10:52:06 +0000
ROA not before: Wed 31 Jan 2024 10:47:06 +0000
ROA not after: Wed 29 Jan 2025 10:52:06 +0000
asID: 21859
IP address blocks: 37.230.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:85:ba:c4:d5:39:97:37:be:1a:ff:b0:a3:80:6e:e0:24:7d:b0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Jan 31 10:47:06 2024 GMT
Not After : Jan 29 10:52:06 2025 GMT
Subject: CN=47035E41FC65AE3669BB22914147EB3209A8297E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:3b:8e:fb:24:93:c0:9e:12:15:e1:0e:e0:
21:a1:94:6a:a2:37:1c:b5:de:3f:23:96:04:19:ef:
80:a3:99:c4:d2:d7:77:5b:55:b6:03:f2:e5:ef:e7:
c3:44:a2:86:58:4d:d2:b5:d1:d9:d5:c0:ac:f5:60:
19:ec:65:2c:81:47:a2:85:13:d0:e1:cc:24:34:05:
cd:70:0e:29:52:7e:e6:2f:7c:1c:ae:04:63:b6:5e:
0d:48:16:d9:a9:c5:2a:bf:69:bb:3c:02:86:f0:06:
06:84:95:a5:f8:2d:fa:55:6b:78:8c:02:b8:b2:8a:
ac:01:9b:2f:ae:c4:05:4f:d0:b0:6f:a3:56:b7:9f:
0d:c7:5b:f0:de:72:fe:f5:d8:14:99:f7:1e:db:2b:
b4:0e:9e:7c:20:77:db:af:1e:ee:c7:65:5d:11:c6:
48:7a:f5:8a:ba:bc:d1:32:26:d2:90:da:c7:64:0d:
c0:32:2d:10:48:fa:e6:ac:f2:60:0b:7e:4b:c8:00:
07:8f:d0:64:70:f6:11:15:ae:6e:0e:db:9e:11:31:
9e:c3:dd:3d:45:ec:db:ab:db:e8:80:58:78:d0:f8:
33:30:15:6a:2b:07:84:38:6b:02:ab:4f:5e:a7:b9:
2b:f9:d1:6c:61:90:57:83:2c:00:75:5b:71:8f:38:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:03:5E:41:FC:65:AE:36:69:BB:22:91:41:47:EB:32:09:A8:29:7E
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7e:44:c7:07:72:69:1a:6c:68:57:7d:37:8e:42:b5:95:1f:
28:fd:34:5f:dc:f8:02:23:bb:81:18:28:73:d4:9a:5f:8e:04:
6f:53:31:3b:d0:39:0f:c7:94:a3:3b:14:1e:ec:fd:21:98:90:
a7:7a:2c:9e:e2:85:f2:9e:7a:98:57:06:73:4a:d7:05:0e:17:
17:aa:6b:4f:69:98:ac:ad:13:e5:4a:62:b5:32:43:34:fe:d7:
6a:75:bf:ea:49:5a:c8:04:bc:6e:41:42:10:49:43:76:3b:9e:
52:4d:68:40:37:68:ac:50:a7:c7:20:74:0c:2d:86:c5:c1:07:
c3:6d:25:72:ab:e5:60:66:86:af:3f:85:fc:dd:7c:35:97:fb:
81:ed:42:77:ea:c4:49:38:e1:d6:7e:d8:ec:a0:56:26:49:e5:
b7:2b:f7:bc:d6:08:a0:f5:b7:e0:b5:99:34:87:e6:b9:24:35:
48:ad:a2:8a:0d:2c:12:ec:69:3c:fe:d0:53:78:ec:e2:c4:8b:
11:c7:27:6f:a8:6d:83:20:b1:db:62:0a:ba:27:6a:4e:71:d4:
7f:33:ba:ce:45:0d:7e:ed:0d:ec:3b:dd:82:3a:c1:e1:52:af:
6a:dd:b7:37:3e:ba:eb:89:43:93:3b:4e:f7:ee:22:77:6f:d1:
ad:b6:d3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 00:47:47 2024 by rpki-client on console-ams.rpki-client.org