Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e2033333230.roa
File: 33372e3233302e36332e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: SekstUytZhfY3pOskN76X3NrCQKmeNvODVakUHd4f7I=
Subject key identifier: FB:5C:C4:0F:48:52:D4:0D:43:57:AF:D9:1B:08:89:32:C8:6A:2B:33
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 468F2DA3EC3447A2D8F1E107AA75F2AB2371A9A4
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e2033333230.roa
Signing time: Tue 28 Nov 2023 23:11:13 +0000
ROA not before: Tue 28 Nov 2023 23:06:13 +0000
ROA not after: Tue 26 Nov 2024 23:11:13 +0000
asID: 3320
IP address blocks: 37.230.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8f:2d:a3:ec:34:47:a2:d8:f1:e1:07:aa:75:f2:ab:23:71:a9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 28 23:06:13 2023 GMT
Not After : Nov 26 23:11:13 2024 GMT
Subject: CN=FB5CC40F4852D40D4357AFD91B088932C86A2B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:45:a5:31:13:f9:00:af:ac:be:13:52:3c:
d0:ed:21:45:4a:4d:69:c6:17:58:40:f0:bb:62:9b:
fa:c0:48:35:78:61:24:24:6e:ef:88:be:2e:28:f4:
3b:d7:a2:9a:a6:04:6c:90:0b:e0:43:86:2a:4e:3a:
8f:37:a3:b1:dc:f8:7b:bd:a7:75:31:55:14:5e:5b:
1d:2c:c5:d0:37:d0:3d:61:3f:5a:9b:7e:75:40:95:
c6:c4:8a:f8:90:f0:f5:22:67:bd:12:b7:4e:e9:77:
27:4f:34:d0:b5:d9:d3:81:8e:dc:55:94:2c:d5:48:
57:fa:c3:30:ba:8a:44:ce:06:c8:7a:4a:0e:df:fb:
56:00:c4:bb:83:e6:c6:9a:de:bf:94:97:fa:f1:bd:
94:39:4b:c8:20:3a:84:f9:a2:8b:a8:65:17:a8:65:
cb:77:b2:6f:af:fb:fe:7c:f3:2f:93:2d:f5:ad:a8:
62:a9:d7:f4:37:5c:d5:90:6f:fb:1d:8d:f4:c5:fb:
c2:83:b8:96:eb:a3:f4:c9:a6:60:5e:0b:5c:1e:8a:
2a:25:e1:b0:af:4d:ae:78:82:78:a1:49:65:24:ba:
1e:b7:e0:96:b6:e2:95:80:7a:8a:c2:e5:72:1a:1b:
db:13:9e:29:a4:b5:af:45:74:78:f1:78:3d:a3:de:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5C:C4:0F:48:52:D4:0D:43:57:AF:D9:1B:08:89:32:C8:6A:2B:33
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:aa:54:ec:09:a6:a1:ba:93:49:13:b0:ce:cc:2f:48:1e:86:
fa:a8:d0:cc:8d:0c:43:33:bf:ff:b6:5b:da:ad:f5:fd:e8:2b:
a5:e8:92:7a:b8:13:ce:51:77:f2:20:fe:16:5c:a7:9c:e9:5a:
35:19:75:79:11:b2:18:4e:fc:7a:37:a5:11:b7:5f:c2:c3:66:
ad:53:7f:07:36:cb:36:2d:99:39:e0:c3:16:80:ee:dc:30:eb:
ea:96:8d:5c:dc:c0:d3:c9:ba:1a:c3:c0:5d:04:5d:a7:16:c6:
be:4a:76:ea:f6:f4:86:bd:48:10:21:1e:94:4b:1b:f3:3a:3a:
ec:b8:a0:9a:d5:5c:c0:38:5e:b4:8c:ba:4d:9f:d9:6a:6d:11:
0a:fb:83:ad:e7:8e:ec:ee:82:c4:33:08:c1:c8:a6:b5:d7:25:
b3:7d:93:b8:22:56:6e:d9:1b:8d:67:99:90:cb:bb:fc:f2:d9:
6f:a5:08:14:72:3f:84:e2:16:64:29:2a:a9:5c:35:e2:ae:96:
86:de:1b:0e:b0:c6:b1:03:11:b1:a4:ff:e0:13:be:02:ad:0e:
3a:9f:46:53:b8:f6:00:dd:b0:d4:aa:f0:7d:3c:46:1e:ef:94:
59:dd:10:1b:7d:fe:e8:04:76:7d:cf:fc:e0:dc:06:e1:68:8d:
1f:1a:fb:6e
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIURo8to+w0R6LY8eEHqnXyqyNxqaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yMzExMjgyMzA2MTNaFw0yNDExMjYyMzExMTNaMDMxMTAvBgNV
BAMTKEZCNUNDNDBGNDg1MkQ0MEQ0MzU3QUZEOTFCMDg4OTMyQzg2QTJCMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmEWlMRP5AK+svhNSPNDtIUVK
TWnGF1hA8Ltim/rASDV4YSQkbu+Ivi4o9DvXopqmBGyQC+BDhipOOo83o7Hc+Hu9
p3UxVRReWx0sxdA30D1hP1qbfnVAlcbEiviQ8PUiZ70St07pdydPNNC12dOBjtxV
lCzVSFf6wzC6ikTOBsh6Sg7f+1YAxLuD5saa3r+Ul/rxvZQ5S8ggOoT5oouoZReo
Zct3sm+v+/588y+TLfWtqGKp1/Q3XNWQb/sdjfTF+8KDuJbro/TJpmBeC1weiiol
4bCvTa54gnihSWUkuh634Ja24pWAeorC5XIaG9sTnimkta9FdHjxeD2j3ollAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQU+1zED0hS1A1DV6/ZGwiJMshqKzMwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzYzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY/MA0GCSqGSIb3DQEB
CwUAA4IBAQBdqlTsCaahupNJE7DOzC9IHob6qNDMjQxDM7//tlvarfX96Cul6JJ6
uBPOUXfyIP4WXKec6Vo1GXV5EbIYTvx6N6URt1/Cw2atU38HNss2LZk54MMWgO7c
MOvqlo1c3MDTyboaw8BdBF2nFsa+Snbq9vSGvUgQIR6USxvzOjrsuKCa1VzAOF60
jLpNn9lqbREK+4Ot547s7oLEMwjByKa11yWzfZO4IlZu2RuNZ5mQy7v88tlvpQgU
cj+E4hZkKSqpXDXirpaG3hsOsMaxAxGxpP/gE74CrQ46n0ZTuPYA3bDUqvB9PEYe
75RZ3RAbff7oBHZ9z/zg3AbhaI0fGvtu
-----END CERTIFICATE-----
Generated at Sun Jan 28 01:08:58 2024 by rpki-client on console-ams.rpki-client.org