Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e203231373338.roa
File: 33372e3233302e36312e302f32342d3234203d3e203231373338.roa (raw, json)
Hash identifier: fHi6wUUfxXDaZrqtmxMtJ4fhK2Sg4EsqB8u4tvyle7o=
Subject key identifier: 83:FF:29:84:1B:5C:17:AD:6E:10:3C:FB:FC:10:22:F6:4B:8E:ED:E2
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 3E46638AD7D1A708314467F7AB35ABD2C2CB9D43
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e203231373338.roa
Signing time: Tue 06 Aug 2024 13:20:41 +0000
ROA not before: Tue 06 Aug 2024 13:15:41 +0000
ROA not after: Tue 05 Aug 2025 13:20:41 +0000
asID: 21738
IP address blocks: 37.230.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:46:63:8a:d7:d1:a7:08:31:44:67:f7:ab:35:ab:d2:c2:cb:9d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Aug 6 13:15:41 2024 GMT
Not After : Aug 5 13:20:41 2025 GMT
Subject: CN=83FF29841B5C17AD6E103CFBFC1022F64B8EEDE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:8b:12:66:1d:78:fe:33:db:70:d5:38:f9:
5e:d0:ad:95:c7:94:a6:67:4d:08:8d:dd:a6:89:f3:
eb:46:cc:f1:85:c0:d6:d5:3f:04:a9:2e:1a:4c:19:
b5:7c:69:ea:59:2f:dd:91:69:a9:4c:ce:ab:b3:9a:
33:28:72:dc:cf:89:de:a0:59:c2:51:c9:63:6f:59:
4f:d6:b9:89:97:95:84:fc:8d:23:4e:4f:65:ea:e2:
65:05:f4:79:c9:a9:f8:93:71:1a:05:25:b7:3e:69:
c3:89:a6:85:d6:a3:bc:5b:65:52:01:e4:88:d3:d2:
18:00:32:5e:08:00:b2:ae:ef:c7:d6:ec:3e:60:71:
a8:f0:0f:6c:58:7c:de:3b:0c:eb:08:3d:33:d8:8d:
c2:83:f5:61:e7:c7:18:5d:e0:c7:9c:73:79:89:0c:
33:e5:f0:e6:ce:7f:2f:bf:c7:dc:bc:ce:01:d0:9b:
53:30:66:34:65:90:a6:7a:78:87:42:50:2a:51:fb:
03:82:49:f9:63:5c:b0:96:60:02:90:c6:11:90:5a:
62:1b:fb:0c:d1:6c:aa:3f:4e:b8:ac:48:b1:7a:f8:
e1:69:46:b2:0a:9c:70:fa:ce:d1:98:12:34:f7:62:
8a:ce:56:ca:5e:88:a2:a0:c9:8f:14:df:7b:2b:24:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FF:29:84:1B:5C:17:AD:6E:10:3C:FB:FC:10:22:F6:4B:8E:ED:E2
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e203231373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:92:fc:ed:ba:2d:be:0b:65:0c:04:a1:37:ac:53:b4:dc:d1:
fd:29:9d:57:3c:c4:fb:5a:06:f8:ef:b7:e5:bd:c1:8d:fb:f9:
46:52:ad:0e:0b:93:23:8e:d9:f9:8e:97:5e:37:c4:2f:96:a5:
d6:28:81:3b:60:d8:ae:2b:49:48:4f:e9:b8:28:7f:b4:46:50:
da:f0:da:83:20:dd:e9:36:80:cb:92:42:91:75:d0:db:98:61:
f3:ab:78:e5:b5:60:86:fd:9b:f0:68:bc:dd:58:92:8d:a3:35:
aa:5d:bc:df:ac:2b:8b:28:36:8c:ae:7b:67:65:c0:d4:5e:54:
cc:05:55:a0:1c:48:cd:ca:20:5e:17:e5:00:a2:e2:58:dd:e5:
fd:2a:9c:14:66:d0:20:de:72:ac:97:ae:e9:a5:c1:b6:7b:cd:
e5:2b:5f:d6:35:84:99:92:cf:9c:bb:38:66:b1:17:2c:a9:96:
49:ed:bc:b6:24:f6:c0:7e:f6:5a:ed:51:0b:b1:d5:cd:38:87:
fd:94:bc:30:be:7b:ab:e5:8b:74:7d:70:f9:96:f4:91:4f:d3:
3c:19:e3:40:80:8e:0f:80:a3:95:59:d1:28:e4:31:eb:19:38:
77:50:ef:97:a1:ce:ef:38:2c:8f:1b:6e:f3:cb:4c:bd:28:b3:
b0:d6:ed:7e
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUPkZjitfRpwgxRGf3qzWr0sLLnUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDA4MDYxMzE1NDFaFw0yNTA4MDUxMzIwNDFaMDMxMTAvBgNV
BAMTKDgzRkYyOTg0MUI1QzE3QUQ2RTEwM0NGQkZDMTAyMkY2NEI4RUVERTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOosSZh14/jPbcNU4+V7QrZXH
lKZnTQiN3aaJ8+tGzPGFwNbVPwSpLhpMGbV8aepZL92RaalMzquzmjMoctzPid6g
WcJRyWNvWU/WuYmXlYT8jSNOT2Xq4mUF9HnJqfiTcRoFJbc+acOJpoXWo7xbZVIB
5IjT0hgAMl4IALKu78fW7D5gcajwD2xYfN47DOsIPTPYjcKD9WHnxxhd4Mecc3mJ
DDPl8ObOfy+/x9y8zgHQm1MwZjRlkKZ6eIdCUCpR+wOCSfljXLCWYAKQxhGQWmIb
+wzRbKo/TrisSLF6+OFpRrIKnHD6ztGYEjT3YorOVspeiKKgyY8U33srJG7NAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUg/8phBtcF61uEDz7/BAi9kuO7eIwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzYzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzEzNzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5j0wDQYJKoZIhvcN
AQELBQADggEBABqS/O26Lb4LZQwEoTesU7Tc0f0pnVc8xPtaBvjvt+W9wY37+UZS
rQ4LkyOO2fmOl143xC+WpdYogTtg2K4rSUhP6bgof7RGUNrw2oMg3ek2gMuSQpF1
0NuYYfOreOW1YIb9m/BovN1Yko2jNapdvN+sK4soNoyue2dlwNReVMwFVaAcSM3K
IF4X5QCi4ljd5f0qnBRm0CDecqyXrumlwbZ7zeUrX9Y1hJmSz5y7OGaxFyyplknt
vLYk9sB+9lrtUQux1c04h/2UvDC+e6vli3R9cPmW9JFP0zwZ40CAjg+Ao5VZ0Sjk
MesZOHdQ75ehzu84LI8bbvPLTL0os7DW7X4=
-----END CERTIFICATE-----
Generated at Fri Sep 6 01:30:16 2024 by rpki-client on console-fra.rpki-client.org