Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa
File: 33372e3233302e36332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5Iq23ZeLBZQEaLb2CUm64V7639o5oZ9YgxoSAjmd0OY=
Subject key identifier: 8B:AC:B1:D1:08:AF:CE:E4:4F:09:2F:97:3C:38:E4:3C:DF:F6:A7:E8
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 7A23C2C914D978408886625AB174E424B1068B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Jan 2025 00:04:14 +0000
ROA not before: Tue 21 Jan 2025 23:59:14 +0000
ROA not after: Wed 21 Jan 2026 00:04:14 +0000
asID: 834
IP address blocks: 37.230.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 13:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:23:c2:c9:14:d9:78:40:88:86:62:5a:b1:74:e4:24:b1:06:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Jan 21 23:59:14 2025 GMT
Not After : Jan 21 00:04:14 2026 GMT
Subject: CN=8BACB1D108AFCEE44F092F973C38E43CDFF6A7E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:1d:fc:29:02:d5:62:9e:29:0f:47:47:20:
ef:cf:b3:49:67:71:bc:bb:f6:9e:4e:42:e5:30:ac:
29:3a:e7:82:33:00:00:48:4f:45:a5:1c:9d:73:98:
af:ca:b1:d8:b8:6b:72:ab:c8:3c:e1:c4:5a:58:9a:
14:d6:c8:7f:5f:7f:a4:37:9c:b7:49:05:b5:93:a1:
cd:95:9b:16:a7:c1:4b:70:06:4e:85:48:fb:32:70:
67:8a:16:eb:ca:02:92:e2:03:d3:80:3f:25:81:47:
bd:3b:a7:e9:02:8c:37:01:f0:c9:99:4a:fc:bc:fa:
81:10:06:97:15:93:32:c6:03:76:6d:d1:d5:f1:34:
d4:4c:29:b8:18:f5:37:69:c5:a2:5c:b3:31:2a:b6:
a1:6d:0c:a4:a5:4a:13:78:a6:0b:51:96:af:68:cb:
d7:5f:6e:b9:e3:a5:f5:a5:89:2d:d9:68:12:b4:81:
dd:73:48:ca:b9:9b:65:ad:40:74:cb:71:72:99:5c:
d4:89:aa:e5:ea:52:e4:64:62:86:de:16:dd:f2:c1:
ee:dd:c3:be:b5:0e:19:11:00:d0:d8:2c:ca:14:21:
9b:67:4f:12:30:4b:9a:24:a0:48:d4:24:d8:7a:87:
94:8b:ac:b0:95:e5:8f:fc:1c:82:3e:94:59:99:ae:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AC:B1:D1:08:AF:CE:E4:4F:09:2F:97:3C:38:E4:3C:DF:F6:A7:E8
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d9:e4:78:a2:dc:ce:68:88:97:4b:0c:50:a6:1a:98:1e:2c:
b7:08:19:c5:eb:36:32:89:17:3b:e8:2d:e3:75:1d:d4:0b:bf:
be:8d:63:b8:97:7f:39:ee:45:84:9b:c7:f0:93:34:68:43:87:
50:b9:f8:45:ec:d7:60:11:81:92:04:00:d5:5e:ca:a3:f8:20:
cb:49:39:fc:d3:43:df:2b:83:4c:11:3c:35:12:9b:6b:be:3b:
5b:e4:16:9b:ec:ae:39:93:75:5a:71:b2:51:10:95:e0:69:a3:
6e:a4:19:7c:43:5a:16:67:c5:65:d8:15:32:a0:26:61:90:2c:
d3:e4:1f:ac:d6:88:9d:01:21:c2:fb:77:7e:7b:56:de:12:2b:
37:25:7e:35:d3:16:9c:8b:ef:39:cf:4a:0b:da:63:f2:1f:3c:
45:c9:4c:f6:22:74:f2:da:ac:c1:90:1d:69:c2:74:b4:49:2b:
c4:2c:6e:08:49:32:fe:b0:98:f0:ef:54:3c:ef:6e:63:0e:46:
8e:8c:78:f0:4a:21:f2:b2:a3:30:2a:b0:de:1b:5a:a8:ca:50:
ca:e5:96:33:8c:d4:2c:3e:d5:04:f5:95:7f:ee:a2:c6:8d:b9:
c9:3a:88:6a:e9:d1:d5:50:35:c0:0b:d9:e8:02:16:63:7b:e4:
5f:ed:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:33 2025 by rpki-client