Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e203336313133.roa
File: 33372e3233302e36322e302f32342d3234203d3e203336313133.roa (raw, json)
Hash identifier: 3XGWwAzrcT0m01G6UFVaht/fYUHjfiQy9UbR0eLx4R8=
Subject key identifier: 61:61:3B:D6:ED:13:62:12:D6:D2:56:EF:80:ED:01:E8:18:02:6C:F3
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 657C494B465003ED95C9D06769A453E8A3B442FD
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e203336313133.roa
Signing time: Fri 24 Nov 2023 13:39:06 +0000
ROA not before: Fri 24 Nov 2023 13:34:06 +0000
ROA not after: Fri 22 Nov 2024 13:39:06 +0000
asID: 36113
IP address blocks: 37.230.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 12:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:7c:49:4b:46:50:03:ed:95:c9:d0:67:69:a4:53:e8:a3:b4:42:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 24 13:34:06 2023 GMT
Not After : Nov 22 13:39:06 2024 GMT
Subject: CN=61613BD6ED136212D6D256EF80ED01E818026CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:7f:57:03:3a:c9:e1:18:be:d3:df:c5:d1:
fd:16:46:01:5d:ff:d9:ee:f5:af:be:56:e4:c1:a8:
6a:0d:3c:2b:c8:85:16:5c:2b:e6:16:f7:d6:cb:22:
1f:68:a0:83:b2:7e:51:a4:87:69:aa:0e:99:30:be:
c4:62:04:77:78:4c:3b:26:64:ef:51:25:3d:d2:a5:
f2:2f:81:7c:d9:0f:43:62:cc:db:f3:ef:52:bc:69:
b0:c3:8b:49:1c:92:53:d7:06:50:ff:0f:b3:3e:de:
9e:f4:79:a5:e2:8a:d0:05:6d:96:e7:1e:94:aa:13:
62:ff:66:db:01:89:9d:ff:a7:21:1e:63:d7:4d:b4:
dc:26:b7:2d:dc:58:4a:cc:4b:51:77:fb:6c:cf:e3:
fa:01:e2:1a:62:92:e3:80:03:e2:f0:8a:a0:2a:0b:
d8:0b:97:7e:66:5f:42:2f:ab:01:f9:69:85:66:cd:
cb:70:b3:9a:e4:af:58:05:5c:47:7b:31:9a:6a:68:
d7:1b:9e:d4:2a:86:0d:7c:80:ad:16:9b:49:2d:f5:
34:74:a9:25:6d:45:46:75:9c:7b:e2:cd:c2:7f:46:
c6:6f:96:5c:cc:43:8b:aa:03:16:16:99:27:6b:2b:
68:53:90:aa:0e:89:16:a3:93:17:98:b2:41:fe:21:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:3B:D6:ED:13:62:12:D6:D2:56:EF:80:ED:01:E8:18:02:6C:F3
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e203336313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.62.0/24
Signature Algorithm: sha256WithRSAEncryption
46:27:33:9b:38:96:ed:ee:92:30:48:ce:eb:e8:ed:5d:a5:c7:
0c:fa:16:75:0d:62:af:a4:a1:c0:2a:c0:f0:d6:4c:c0:5b:39:
49:56:06:60:24:f0:35:7f:27:28:ed:b4:78:48:d7:20:c6:59:
29:8e:6b:d8:b0:ad:c0:97:86:ea:a7:41:5b:40:18:c4:b7:d5:
87:15:5e:fd:f3:ac:5a:ba:d9:97:b8:3a:df:14:81:e2:58:f9:
d3:55:67:33:41:04:cb:91:80:f7:bb:1b:b1:fb:66:59:13:3d:
3a:70:da:6c:aa:9d:80:97:ee:1a:90:b2:a5:4d:6f:30:be:81:
8f:66:e8:d1:10:58:ae:88:34:2d:26:21:68:aa:ad:97:f9:ff:
9b:88:dd:88:25:2c:16:27:25:e9:33:b3:69:ca:c4:96:d5:0a:
85:93:ba:75:8f:76:e4:a3:10:3a:1b:f1:f7:5d:c2:c2:15:af:
82:1d:52:6e:e6:5b:f4:e4:b4:b1:95:e1:22:18:57:ad:15:69:
93:cc:25:15:e9:fe:10:b7:df:7e:2d:e9:3e:c1:af:2a:2e:68:
d8:25:55:1a:44:a5:c7:77:e7:f0:9c:ed:5f:69:48:ca:0b:7f:
54:fe:bc:78:dd:ff:48:cd:47:03:52:44:60:6f:bf:e0:e9:4c:
64:56:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org