Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e20383334.roa
File: 33372e3233302e36302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cqcIgFCEVS7VxjWL/qZYv5s/+3Hs/2qycLUg/O+doL8=
Subject key identifier: 50:8D:5A:3A:A0:FB:6C:24:14:09:6A:0F:58:45:B9:52:B2:BC:7B:2D
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 26A872A86999156C9CEBC8D7BC813189F80E6384
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e20383334.roa
Signing time: Thu 19 Sep 2024 00:07:13 +0000
ROA not before: Thu 19 Sep 2024 00:02:13 +0000
ROA not after: Thu 18 Sep 2025 00:07:13 +0000
asID: 834
IP address blocks: 37.230.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 09:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a8:72:a8:69:99:15:6c:9c:eb:c8:d7:bc:81:31:89:f8:0e:63:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Sep 19 00:02:13 2024 GMT
Not After : Sep 18 00:07:13 2025 GMT
Subject: CN=508D5A3AA0FB6C2414096A0F5845B952B2BC7B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:92:ee:c1:dc:90:30:6c:d8:03:3e:89:92:
a4:a4:f8:2f:53:52:9c:53:42:9a:0a:33:22:25:f9:
0a:d1:3a:8a:46:4e:de:86:d3:5a:a7:a2:71:8f:8a:
a7:9b:f5:c8:d0:82:31:78:f2:4b:3a:5a:07:a3:8c:
06:7b:a8:0c:7b:bb:6e:c1:35:be:e2:24:20:2b:06:
a2:e0:f1:6c:0e:97:2e:b4:1d:f4:5f:67:bc:c7:91:
e1:de:eb:8f:40:90:83:20:f0:1e:18:15:84:aa:87:
86:c1:f7:cb:75:d5:a1:32:2a:0d:2f:f1:e3:63:9b:
40:66:19:4c:32:c7:ec:34:08:6f:d5:3d:1a:dc:ec:
a2:5b:c7:de:ed:ec:8c:f1:67:08:52:2f:b9:1f:5e:
c0:74:40:09:df:fb:a0:2a:dd:24:1f:83:ab:fb:9f:
a4:f3:b0:6a:a8:ae:61:f7:06:e7:e8:2b:6c:76:90:
cf:3c:fc:4d:8d:14:a9:e1:fe:f9:87:92:0a:ff:93:
c5:2b:90:4e:4e:1e:6c:b1:64:25:5f:aa:9c:0b:41:
e1:ac:19:14:c2:aa:73:fa:d8:68:ed:59:6c:e4:9f:
fc:59:6c:ef:c2:b9:16:ef:41:87:26:2d:c9:a6:d4:
64:02:9e:0b:43:f2:98:eb:17:4e:1c:7e:b0:47:0e:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8D:5A:3A:A0:FB:6C:24:14:09:6A:0F:58:45:B9:52:B2:BC:7B:2D
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.60.0/24
Signature Algorithm: sha256WithRSAEncryption
37:65:72:b9:d6:18:36:a7:da:e1:fb:8b:05:5d:02:16:ba:7c:
bf:f2:c4:84:bd:e6:25:1b:9c:05:7c:a1:50:ea:08:75:8c:f5:
0f:97:46:c4:be:bc:d2:ec:4e:a3:01:30:96:bb:06:16:bf:7e:
de:f2:1a:aa:d0:2d:48:7a:a6:fa:8f:87:0c:1b:c5:2c:24:fb:
9e:33:87:6d:00:10:e9:92:f7:e2:91:bd:8e:12:6c:51:bc:18:
bc:84:b5:73:4e:da:c2:20:e9:8f:49:ee:76:4c:ae:89:82:a4:
3b:04:ef:6d:b2:61:dc:66:f6:52:b2:98:82:99:85:76:51:d5:
c1:fa:7e:ae:fc:3d:ea:5c:65:8a:5d:22:a0:53:22:ef:8c:1d:
05:88:ea:c3:cc:4a:24:86:86:28:bd:e0:13:83:57:26:e0:19:
37:da:9d:ac:14:f6:e4:16:1b:e5:6f:d0:73:7f:00:6e:f6:9b:
56:e7:b3:4d:f3:bf:7e:47:1e:83:fc:6a:dc:ea:22:6c:41:c3:
7c:82:35:22:36:ba:67:5c:31:65:84:99:db:b8:86:e3:d2:c5:
84:9a:fc:e9:59:7e:6c:20:38:89:5e:e6:c8:15:ea:1b:1b:cb:
50:77:71:01:6f:c3:e0:97:72:83:2a:5e:20:9b:eb:13:ec:e2:
8c:81:1a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 12:20:03 2024 by rpki-client on console-ams.rpki-client.org