Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20323135323837.roa
File: 33372e3233302e36332e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: B/9kMyznXG7lzmHXR9Gphw37R4WECwQ2fhekKohu35w=
Subject key identifier: 6A:B8:89:72:BE:10:7B:A4:D2:68:9D:A6:72:F9:F4:AD:FA:39:85:18
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 7DB8497B2A78CF625F999ACB8EB4CC038DAB7A2B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20323135323837.roa
Signing time: Sun 22 Dec 2024 12:10:11 +0000
ROA not before: Sun 22 Dec 2024 12:05:11 +0000
ROA not after: Sun 21 Dec 2025 12:10:11 +0000
asID: 215287
IP address blocks: 37.230.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 00:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b8:49:7b:2a:78:cf:62:5f:99:9a:cb:8e:b4:cc:03:8d:ab:7a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Dec 22 12:05:11 2024 GMT
Not After : Dec 21 12:10:11 2025 GMT
Subject: CN=6AB88972BE107BA4D2689DA672F9F4ADFA398518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:d5:30:60:2f:4e:d2:ed:5c:34:ea:55:f6:
81:e8:6f:d8:30:ee:49:85:dd:65:34:ea:0b:00:6b:
c6:25:cd:99:73:42:23:8b:e7:5c:6c:c7:bb:fa:d1:
9d:04:15:2d:f8:93:17:69:bb:ee:ef:91:0e:ce:09:
6d:f6:a0:8a:f9:52:ab:38:b1:c9:cc:2d:1c:67:89:
f4:a9:03:85:08:4d:74:6b:68:05:38:f0:5b:40:7d:
6c:32:6d:f0:b2:64:a2:d4:fd:e9:4f:2c:41:58:c1:
b4:11:32:fb:3b:77:58:bf:44:02:8d:4e:a9:30:2b:
05:1d:2d:0a:a4:71:41:87:71:e7:da:00:ba:98:64:
be:e2:c4:f0:ec:1b:06:25:1e:3e:d6:52:9f:61:89:
0f:be:7c:72:3c:a2:11:38:8b:ed:5c:93:79:20:48:
0f:dc:ba:10:43:ab:8b:9c:63:64:4f:28:8f:9e:21:
be:38:c0:9d:59:87:39:56:64:78:d5:3c:99:b3:e1:
3a:70:b0:4f:fc:e3:de:05:62:c8:76:cf:9c:72:94:
76:36:ac:1b:0a:9e:d3:de:00:25:26:60:61:eb:b1:
ef:12:9b:a7:af:ad:45:75:4b:f9:88:0b:40:bc:ab:
31:1c:4f:3c:72:1e:0c:1b:f8:4e:f7:45:14:16:20:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B8:89:72:BE:10:7B:A4:D2:68:9D:A6:72:F9:F4:AD:FA:39:85:18
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.63.0/24
Signature Algorithm: sha256WithRSAEncryption
99:62:9c:af:bf:74:88:b2:95:f9:4f:ef:89:a9:46:62:5d:af:
e6:aa:c7:c9:0a:35:11:91:a0:5b:ab:20:40:78:83:15:0d:10:
c9:17:95:74:44:1e:3f:8c:3d:f1:5e:ca:0c:b9:e0:6b:3c:5c:
fa:00:d0:1f:64:4a:0b:34:9d:14:4e:24:8d:a3:e5:66:00:87:
88:4c:b5:0e:0b:5c:09:fa:3d:94:36:89:95:5e:bb:34:c9:df:
7f:e2:98:bd:57:05:97:ca:e4:ea:11:f9:f5:74:78:d2:85:36:
bb:21:bf:16:ff:37:43:8e:df:f7:02:bc:6a:47:19:3e:a6:94:
3e:92:7c:a6:e7:c5:98:a0:00:0f:2f:fb:17:f1:8b:3c:fa:91:
f3:7d:81:48:7d:07:27:8c:4d:8b:e2:2a:0c:4c:e1:45:f0:6e:
49:bd:bb:a2:bb:b9:8d:e3:41:e0:57:bd:6f:68:55:73:c5:b9:
06:32:ac:26:c4:9f:71:9a:f0:09:6e:b1:48:04:c0:a1:51:60:
46:86:b8:47:9a:b8:70:92:a4:51:94:22:ba:03:a7:db:9a:10:
f8:6b:8c:5b:34:3d:c7:9e:20:63:bf:71:6b:10:96:61:44:21:
cf:9c:09:44:d5:49:45:db:c1:01:ed:f5:74:95:48:6f:3f:88:
b5:c1:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:38:23 2025 by rpki-client