Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e2033333230.roa
File: 33372e3233302e36302e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: e471eavp5d4dm4n4HSCjDAsRzT4IZwFQgt8O3nvkQbI=
Subject key identifier: AF:22:E6:B3:64:72:1B:91:E8:33:1A:F6:A7:3B:9F:20:AA:34:05:CA
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 496256E03E83F8DD216DB746A1CE8C1DA8749C4E
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e2033333230.roa
Signing time: Tue 28 Nov 2023 23:11:12 +0000
ROA not before: Tue 28 Nov 2023 23:06:12 +0000
ROA not after: Tue 26 Nov 2024 23:11:12 +0000
asID: 3320
IP address blocks: 37.230.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:62:56:e0:3e:83:f8:dd:21:6d:b7:46:a1:ce:8c:1d:a8:74:9c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 28 23:06:12 2023 GMT
Not After : Nov 26 23:11:12 2024 GMT
Subject: CN=AF22E6B364721B91E8331AF6A73B9F20AA3405CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:2f:92:01:aa:0a:65:e0:ce:67:30:7d:37:
90:12:9a:c6:82:ab:d6:10:2e:9e:ad:56:0a:90:83:
20:90:2d:29:fb:67:4d:8d:4c:e0:46:22:c9:89:76:
6a:29:f6:bc:15:34:ec:b0:68:d3:39:80:f1:b3:ca:
95:a8:af:b1:02:af:13:e5:60:46:3e:8d:ec:53:9c:
b4:63:d6:f5:a8:96:1e:24:d8:5c:ed:4f:b3:9a:cd:
ac:f9:ec:fa:de:3b:74:d9:9e:c2:55:16:4d:bb:6d:
40:89:8c:9a:c1:12:04:b0:1d:e1:a2:bf:c5:d1:28:
28:ba:6a:5b:31:9d:69:56:65:b9:b3:69:23:6b:c3:
9c:fa:11:96:7b:d3:1c:d1:d1:de:b3:57:2e:6d:ab:
a2:05:88:56:c2:fa:f8:06:2b:08:bb:6b:25:83:d5:
e9:4e:4f:f2:0b:7f:a0:91:55:74:4e:96:08:64:07:
8e:b3:45:2d:9f:e2:64:6a:3a:14:78:fc:10:4c:5f:
a7:3c:cc:19:d8:8c:e8:aa:b5:38:91:5b:b5:21:0f:
f6:41:ba:b5:09:ea:bf:00:dd:dc:9e:d3:d1:b1:dc:
e3:d9:e0:5b:0d:d7:e8:99:7b:ed:d5:ce:4e:31:74:
34:29:62:97:4b:d1:92:27:c0:41:65:e7:6c:fb:4e:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:22:E6:B3:64:72:1B:91:E8:33:1A:F6:A7:3B:9F:20:AA:34:05:CA
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:61:ff:af:ed:1e:af:51:af:b2:4a:b1:9f:30:05:2c:c9:99:
ef:4d:16:4d:3e:d1:37:4b:ba:9b:17:93:14:d4:37:67:99:38:
dd:a1:1f:6e:dc:5e:46:46:c5:a1:2c:eb:6f:30:0d:15:ac:56:
0a:b4:2e:a7:70:04:39:34:54:59:8b:ee:ba:e3:d9:c4:46:67:
b2:90:ef:5c:24:48:c5:01:a1:97:f6:1a:8e:2a:02:a2:53:33:
57:ed:91:65:08:f2:48:8b:f8:d4:64:48:1e:0d:4e:90:2a:79:
60:df:fe:a7:8e:14:6a:a4:c9:63:5c:a8:50:79:92:75:99:6e:
30:18:20:b4:9e:6b:ec:0a:54:d4:3d:81:73:fb:41:3d:a9:e1:
b3:5d:cd:a0:4d:8f:e4:9e:05:16:ef:fe:15:6a:a7:20:5f:f1:
35:07:ad:ea:bb:77:0a:9b:fa:97:d5:3e:b4:70:2e:61:44:2d:
4f:4f:05:21:fc:f7:9c:93:d8:ae:28:84:bf:aa:ed:b8:ef:d0:
7a:03:67:42:c3:8d:d8:0b:df:a8:2c:30:e2:06:62:96:b8:bb:
b8:61:35:6d:e3:7b:6a:49:68:24:7d:50:0a:a8:ce:7b:18:7a:
ce:66:5e:8b:60:50:54:17:21:84:6c:86:f5:2a:67:21:1d:63:
b8:43:b5:42
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUSWJW4D6D+N0hbbdGoc6MHah0nE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yMzExMjgyMzA2MTJaFw0yNDExMjYyMzExMTJaMDMxMTAvBgNV
BAMTKEFGMjJFNkIzNjQ3MjFCOTFFODMzMUFGNkE3M0I5RjIwQUEzNDA1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdQC+SAaoKZeDOZzB9N5ASmsaC
q9YQLp6tVgqQgyCQLSn7Z02NTOBGIsmJdmop9rwVNOywaNM5gPGzypWor7ECrxPl
YEY+jexTnLRj1vWolh4k2FztT7Oazaz57PreO3TZnsJVFk27bUCJjJrBEgSwHeGi
v8XRKCi6alsxnWlWZbmzaSNrw5z6EZZ70xzR0d6zVy5tq6IFiFbC+vgGKwi7ayWD
1elOT/ILf6CRVXROlghkB46zRS2f4mRqOhR4/BBMX6c8zBnYjOiqtTiRW7UhD/ZB
urUJ6r8A3dye09Gx3OPZ4FsN1+iZe+3Vzk4xdDQpYpdL0ZInwEFl52z7TqmfAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUryLms2RyG5HoMxr2pzufIKo0BcowHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzYzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY8MA0GCSqGSIb3DQEB
CwUAA4IBAQBtYf+v7R6vUa+ySrGfMAUsyZnvTRZNPtE3S7qbF5MU1DdnmTjdoR9u
3F5GRsWhLOtvMA0VrFYKtC6ncAQ5NFRZi+6649nERmeykO9cJEjFAaGX9hqOKgKi
UzNX7ZFlCPJIi/jUZEgeDU6QKnlg3/6njhRqpMljXKhQeZJ1mW4wGCC0nmvsClTU
PYFz+0E9qeGzXc2gTY/kngUW7/4VaqcgX/E1B63qu3cKm/qX1T60cC5hRC1PTwUh
/Peck9iuKIS/qu2479B6A2dCw43YC9+oLDDiBmKWuLu4YTVt43tqSWgkfVAKqM57
GHrOZl6LYFBUFyGEbIb1KmchHWO4Q7VC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org