Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa
File: 33372e3233302e36322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: LyC7qCw3OxgXy8YyQ3aB3yYtna+BQsWEcao/vfoEUGE=
Subject key identifier: 48:9E:E6:E0:11:1D:76:0F:F9:54:5F:B6:80:0D:5B:37:4C:EE:6E:14
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 78978E45DA40CBA734E5AB49D8C082FC2F72C31E
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa
Signing time: Thu 04 Apr 2024 12:10:48 +0000
ROA not before: Thu 04 Apr 2024 12:05:48 +0000
ROA not after: Thu 03 Apr 2025 12:10:48 +0000
asID: 834
IP address blocks: 37.230.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 22:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:97:8e:45:da:40:cb:a7:34:e5:ab:49:d8:c0:82:fc:2f:72:c3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Apr 4 12:05:48 2024 GMT
Not After : Apr 3 12:10:48 2025 GMT
Subject: CN=489EE6E0111D760FF9545FB6800D5B374CEE6E14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:30:48:d7:2e:9a:03:2f:29:fb:6e:68:f3:
66:d3:8e:e0:d4:8b:34:03:bc:05:ec:a3:98:15:35:
1d:a8:a2:b5:9a:a7:9f:a1:59:73:e2:83:35:cb:10:
4c:25:d0:ff:c0:b7:af:d2:44:41:97:d2:77:b9:83:
8e:8c:11:c5:d9:97:60:f1:9a:6a:64:fd:75:ba:58:
20:f3:d9:01:85:83:5d:0d:10:26:7b:d3:6c:40:58:
46:66:53:f3:8a:77:19:ae:af:b1:82:46:53:12:f3:
ad:ef:c1:e7:cb:28:0c:2d:1b:3d:56:f1:10:cc:32:
7f:86:dd:9b:03:37:95:98:a2:a5:48:e4:73:c8:94:
53:e5:4e:35:2e:3b:8f:be:83:2e:78:0e:c9:db:c7:
79:d0:d1:d8:e2:8f:fc:0e:60:08:ca:9a:89:ed:50:
d0:77:30:05:e3:5c:54:0c:57:9f:df:ca:2a:4b:8b:
41:3a:8f:4a:fc:cb:e7:ec:54:d6:cb:b7:45:6a:3e:
b3:0f:d2:ed:a6:0a:96:46:04:12:6d:0f:eb:4e:b8:
35:9a:81:e3:10:e7:bc:8f:51:31:a3:9d:7c:aa:a5:
40:77:e0:e6:bf:2d:3d:4b:60:ae:ad:fa:2e:8d:45:
91:79:9c:a2:df:b9:20:54:83:90:d1:8d:ba:7e:7a:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9E:E6:E0:11:1D:76:0F:F9:54:5F:B6:80:0D:5B:37:4C:EE:6E:14
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.62.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c9:69:b1:13:03:dc:81:7f:f1:40:16:f1:b9:b6:57:6e:6e:
da:40:10:82:05:2d:ec:c6:b1:fa:db:8a:51:e7:21:62:95:3f:
5e:a4:8a:2e:d9:a1:8e:b7:4e:fd:f7:bb:7a:5c:aa:d3:93:9c:
cc:86:91:72:9a:b6:7a:95:6a:c8:c7:78:42:4c:24:6f:12:9a:
83:f2:8d:d1:52:09:1e:ab:a6:69:91:fd:e2:b7:87:8e:58:7b:
92:61:8c:00:47:ba:ec:01:cf:d2:36:7f:9e:76:68:b6:83:79:
5d:11:c9:d7:ea:d4:98:9a:99:d2:be:15:9c:89:c2:c4:3c:44:
b9:19:21:ef:65:3f:97:34:22:7e:51:69:5c:cd:ac:b6:d5:5e:
a0:24:82:f7:8a:86:40:e6:50:64:68:32:6c:7e:e9:b9:86:7f:
d6:0c:f7:f1:24:ab:53:68:ba:1d:1d:3a:f2:06:19:1d:62:50:
a3:84:20:6c:1d:b3:b2:82:62:17:99:0d:04:9f:b5:b3:e5:29:
fd:0b:c6:9f:1a:ed:60:ce:13:33:7c:d5:62:02:5a:61:b0:eb:
7e:2b:b3:1b:94:11:28:68:ec:92:e5:41:0f:d4:80:3e:2d:ec:
54:ab:72:e2:c3:e7:31:9d:23:41:3f:8d:d5:c7:8b:02:5e:26:
8c:11:c4:b6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeJeORdpAy6c05atJ2MCC/C9ywx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDA0MDQxMjA1NDhaFw0yNTA0MDMxMjEwNDhaMDMxMTAvBgNV
BAMTKDQ4OUVFNkUwMTExRDc2MEZGOTU0NUZCNjgwMEQ1QjM3NENFRTZFMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/DBI1y6aAy8p+25o82bTjuDU
izQDvAXso5gVNR2oorWap5+hWXPigzXLEEwl0P/At6/SREGX0ne5g46MEcXZl2Dx
mmpk/XW6WCDz2QGFg10NECZ702xAWEZmU/OKdxmur7GCRlMS863vwefLKAwtGz1W
8RDMMn+G3ZsDN5WYoqVI5HPIlFPlTjUuO4++gy54Dsnbx3nQ0djij/wOYAjKmont
UNB3MAXjXFQMV5/fyipLi0E6j0r8y+fsVNbLt0VqPrMP0u2mCpZGBBJtD+tOuDWa
geMQ57yPUTGjnXyqpUB34Oa/LT1LYK6t+i6NRZF5nKLfuSBUg5DRjbp+ehy3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSJ7m4BEddg/5VF+2gA1bN0zubhQwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzIzMzMwMmUzNjMyMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY+MA0GCSqGSIb3DQEBCwUA
A4IBAQBwyWmxEwPcgX/xQBbxubZXbm7aQBCCBS3sxrH624pR5yFilT9epIou2aGO
t07997t6XKrTk5zMhpFymrZ6lWrIx3hCTCRvEpqD8o3RUgkeq6Zpkf3it4eOWHuS
YYwAR7rsAc/SNn+edmi2g3ldEcnX6tSYmpnSvhWcicLEPES5GSHvZT+XNCJ+UWlc
zay21V6gJIL3ioZA5lBkaDJsfum5hn/WDPfxJKtTaLodHTryBhkdYlCjhCBsHbOy
gmIXmQ0En7Wz5Sn9C8afGu1gzhMzfNViAlphsOt+K7MblBEoaOyS5UEP1IA+LexU
q3Liw+cxnSNBP43Vx4sCXiaMEcS2
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org