Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e203634323637.roa
File: 33372e3233302e36332e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: rxX9+YK5v4YIlff34suFVxLUlkx9O4vTxY5iBf/gJYs=
Subject key identifier: 8F:3C:2E:EA:AB:17:D9:16:78:DC:EF:BC:AB:78:9E:9D:C3:88:B0:10
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 5E7FD22599FCD5C2443DD54E8EC8268E963189D0
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e203634323637.roa
Signing time: Mon 16 Dec 2024 13:29:31 +0000
ROA not before: Mon 16 Dec 2024 13:24:31 +0000
ROA not after: Mon 15 Dec 2025 13:29:31 +0000
asID: 64267
IP address blocks: 37.230.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7f:d2:25:99:fc:d5:c2:44:3d:d5:4e:8e:c8:26:8e:96:31:89:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Dec 16 13:24:31 2024 GMT
Not After : Dec 15 13:29:31 2025 GMT
Subject: CN=8F3C2EEAAB17D91678DCEFBCAB789E9DC388B010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:ff:39:c9:ad:da:46:58:d8:fb:06:90:4f:
fd:1b:a0:88:b1:dd:c6:23:fa:75:4a:36:0d:5e:8f:
e0:77:9b:17:f4:22:cd:db:b7:71:09:3d:77:d1:fb:
22:3c:5a:0e:22:c7:ac:10:03:1e:99:88:6a:bf:1a:
52:8e:f5:9a:a7:59:f2:d6:e5:24:a7:12:48:b7:51:
c1:6c:da:dc:22:83:48:b7:ec:e2:1c:d5:89:b3:31:
2c:5d:be:b0:97:31:81:3c:19:7f:6c:92:fa:c3:00:
59:4f:0e:95:5b:23:50:f5:7b:01:3e:41:d8:92:1e:
d3:6c:1d:e8:dc:a1:3f:cd:8b:06:2d:d3:bb:13:03:
0a:70:cb:02:aa:9d:f2:7e:96:12:c5:b8:7f:cf:77:
b4:a0:c8:ed:d7:9f:b3:ab:3c:92:73:47:cc:97:36:
77:f3:af:6e:7b:d2:3a:cc:05:73:8d:12:2d:3b:e3:
17:3b:09:44:ab:30:c5:a6:e6:aa:61:1a:f5:78:2e:
ff:f8:16:b8:38:01:50:84:dd:f7:c1:76:e6:8e:d4:
1a:1e:ab:12:a7:5d:a4:f1:2a:b6:a5:b0:2e:76:7c:
d2:a6:29:3b:6e:38:18:db:86:46:39:e9:5c:04:1c:
34:4f:b6:3f:c3:5e:dc:b9:4c:b5:ce:49:a9:ea:01:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3C:2E:EA:AB:17:D9:16:78:DC:EF:BC:AB:78:9E:9D:C3:88:B0:10
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.63.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e1:37:dd:e5:68:41:a8:9c:b7:24:87:36:99:8d:aa:50:b8:
44:bd:d4:eb:6a:43:14:a7:2e:af:18:c9:34:fd:17:88:cc:58:
91:97:af:1e:6f:73:41:1d:e3:ef:8c:56:c9:cb:9f:31:fa:e7:
c6:fc:03:da:1f:61:4f:f5:96:cf:cd:97:d3:29:cc:cd:d3:4f:
a7:51:b0:44:4a:fa:41:f3:f5:87:31:8f:e1:55:c5:06:3e:89:
4a:af:a9:1d:c3:73:73:3b:dd:cb:fe:78:c0:02:b1:30:ee:b1:
65:ca:1a:ba:54:9c:1b:5c:32:8c:a2:53:9a:61:ce:d8:c3:ef:
9d:f6:ad:0d:de:42:2e:a6:29:e2:90:5d:41:b5:00:8c:37:30:
53:db:c8:78:88:37:c0:0c:f6:05:fa:bd:03:f0:9c:a1:55:8b:
ec:49:ad:23:de:f5:bf:8a:02:49:84:11:7a:fd:43:2e:89:65:
65:40:3f:32:1a:3b:45:a3:16:ae:f5:f3:22:c1:b1:3b:70:2d:
3b:37:24:6b:78:6e:49:51:ad:cc:35:de:71:49:00:a3:a3:cf:
40:98:ab:28:a6:fa:2d:ad:14:16:1a:d7:ba:e6:53:99:db:6d:
d1:2d:b7:67:7e:aa:bc:97:95:4e:63:86:f6:1a:20:49:ff:2a:
3e:80:52:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 04:42:23 2025 by rpki-client