Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20383334.roa
File: 352e38332e3139322e302f32302d3230203d3e20383334.roa (raw, json)
Hash identifier: TL/LNSpPBRqzy3pxUydKRkHO5s6uHTFEzyrv5MU0agw=
Subject key identifier: 72:F3:A9:C3:C6:81:28:35:BD:B8:CF:42:E5:14:8A:9B:D6:78:5D:86
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 484B57A2D05EFC1379B42BEDF7C433ABAFA5FAF0
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20383334.roa
Signing time: Tue 07 Nov 2023 11:41:06 +0000
ROA not before: Tue 07 Nov 2023 11:36:06 +0000
ROA not after: Tue 05 Nov 2024 11:41:06 +0000
asID: 834
IP address blocks: 5.83.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 09 Nov 2023 16:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:4b:57:a2:d0:5e:fc:13:79:b4:2b:ed:f7:c4:33:ab:af:a5:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 7 11:36:06 2023 GMT
Not After : Nov 5 11:41:06 2024 GMT
Subject: CN=72F3A9C3C6812835BDB8CF42E5148A9BD6785D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:61:ea:ee:9c:f2:b4:5c:cc:d6:38:c4:8b:a8:
20:92:06:4e:d1:9d:47:9d:09:0f:eb:a5:d4:92:4a:
75:2d:67:44:11:0a:92:59:51:8f:cc:93:25:49:24:
c1:51:f9:11:1a:17:2a:aa:9c:2d:60:5f:0c:4d:24:
ad:09:fb:64:2b:2d:af:a0:cd:5d:c9:ac:d7:a2:0a:
70:9b:72:ed:f9:f3:8e:22:ad:a7:86:9f:10:60:b7:
55:2d:92:0f:c2:f0:58:c6:ae:b1:2e:b3:01:69:9e:
fe:46:d4:9b:2a:0e:ca:e8:04:17:c0:3e:ff:e0:52:
62:0c:09:cf:41:da:eb:fd:64:e9:1d:c9:c9:b2:10:
41:b6:10:1b:cc:b4:ce:6c:aa:1e:4c:7d:c7:a4:a0:
12:8f:04:ce:ad:86:8f:c2:11:10:b3:dd:4e:ad:3a:
a4:b2:f7:65:8c:a0:85:01:33:94:6a:96:2d:31:c7:
ff:7c:73:34:89:28:17:b6:29:2e:ae:d7:73:be:f5:
78:2e:fb:49:fb:65:df:bf:cc:77:19:ac:b6:35:e5:
e8:85:95:00:04:98:ec:87:1d:cc:65:dd:28:98:6b:
9d:1d:3f:84:af:d6:74:e3:2c:01:29:cb:30:f3:f6:
a7:5a:bf:99:0a:81:07:bc:b4:0b:ac:cb:7c:4d:0f:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F3:A9:C3:C6:81:28:35:BD:B8:CF:42:E5:14:8A:9B:D6:78:5D:86
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:6b:05:cf:0a:dc:5b:92:c3:56:e9:3d:05:df:2d:b7:76:f8:
6d:29:3f:26:64:b0:8c:a2:81:2f:f6:e5:f1:72:53:e5:86:b7:
75:f8:29:d3:83:8d:3a:4c:0e:9d:0b:82:c2:e1:ce:68:92:20:
68:45:1f:a2:18:99:18:28:8b:99:25:7a:4c:47:17:83:d9:5e:
66:51:a3:63:35:58:f9:d0:1c:c8:c3:77:f9:ec:f5:46:66:fd:
d4:bd:61:6d:b8:68:6c:4f:f6:b3:a7:f5:c4:50:ca:bf:20:84:
c8:59:de:94:74:5d:db:5e:b3:4a:e4:73:67:41:89:ec:7a:b6:
24:5e:53:a2:e2:a1:ff:3e:6c:38:fc:f4:c7:0f:0c:af:43:cd:
ed:08:d5:44:82:20:be:dc:1f:1b:18:09:35:a7:9a:1a:12:73:
2e:e3:b7:15:9e:1f:46:7d:fc:e7:be:99:6b:e6:eb:60:dc:f3:
63:be:75:b9:9d:49:45:49:c1:4b:b8:19:b1:e9:38:36:6f:24:
e4:96:d9:ff:6c:ae:c5:89:ef:61:46:da:bc:2f:de:24:d1:ed:
ad:94:66:1c:f8:fb:dd:78:e7:f9:66:5a:53:a4:42:45:c3:bf:
67:7a:f0:0a:a8:8c:78:89:31:03:9d:b3:95:0b:3a:35:d2:98:
df:f1:83:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSEtXotBe/BN5tCvt98Qzq6+l+vAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yMzExMDcxMTM2MDZaFw0yNDExMDUxMTQxMDZaMDMxMTAvBgNV
BAMTKDcyRjNBOUMzQzY4MTI4MzVCREI4Q0Y0MkU1MTQ4QTlCRDY3ODVEODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYerunPK0XMzWOMSLqCCSBk7R
nUedCQ/rpdSSSnUtZ0QRCpJZUY/MkyVJJMFR+REaFyqqnC1gXwxNJK0J+2QrLa+g
zV3JrNeiCnCbcu35844iraeGnxBgt1Utkg/C8FjGrrEuswFpnv5G1JsqDsroBBfA
Pv/gUmIMCc9B2uv9ZOkdycmyEEG2EBvMtM5sqh5MfcekoBKPBM6tho/CERCz3U6t
OqSy92WMoIUBM5Rqli0xx/98czSJKBe2KS6u13O+9Xgu+0n7Zd+/zHcZrLY15eiF
lQAEmOyHHcxl3SiYa50dP4Sv1nTjLAEpyzDz9qdav5kKgQe8tAusy3xND/JfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcvOpw8aBKDW9uM9C5RSKm9Z4XYYwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMxMzkzMjJlMzAyZjMyMzAyZDMy
MzAyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBAVTwDANBgkqhkiG9w0BAQsFAAOC
AQEAnWsFzwrcW5LDVuk9Bd8tt3b4bSk/JmSwjKKBL/bl8XJT5Ya3dfgp04ONOkwO
nQuCwuHOaJIgaEUfohiZGCiLmSV6TEcXg9leZlGjYzVY+dAcyMN3+ez1Rmb91L1h
bbhobE/2s6f1xFDKvyCEyFnelHRd216zSuRzZ0GJ7Hq2JF5TouKh/z5sOPz0xw8M
r0PN7QjVRIIgvtwfGxgJNaeaGhJzLuO3FZ4fRn38576Za+brYNzzY751uZ1JRUnB
S7gZsek4Nm8k5JbZ/2yuxYnvYUbavC/eJNHtrZRmHPj73Xjn+WZaU6RCRcO/Z3rw
CqiMeIkxA52zlQs6NdKY3/GDcg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org