Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230382e302f32302d3230203d3e20383334.roa
File: 352e38332e3230382e302f32302d3230203d3e20383334.roa (raw, json)
Hash identifier: uVoqfgGC9olii07qQOrl8Rb0Vs+G7EPD6JLkuoi1MbE=
Subject key identifier: 8C:81:7D:0B:54:01:8D:B7:0C:4C:8D:5C:8A:22:6B:3F:B5:16:1A:C4
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 66B0A43CD90ECB1F3D57036A92D40D2CEE809E6A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230382e302f32302d3230203d3e20383334.roa
Signing time: Tue 07 Nov 2023 11:41:29 +0000
ROA not before: Tue 07 Nov 2023 11:36:29 +0000
ROA not after: Tue 05 Nov 2024 11:41:29 +0000
asID: 834
IP address blocks: 5.83.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Sat 24 Feb 2024 20:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b0:a4:3c:d9:0e:cb:1f:3d:57:03:6a:92:d4:0d:2c:ee:80:9e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 7 11:36:29 2023 GMT
Not After : Nov 5 11:41:29 2024 GMT
Subject: CN=8C817D0B54018DB70C4C8D5C8A226B3FB5161AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:d4:90:03:c6:37:47:c7:8b:d5:5a:a4:da:
6f:2f:c8:cd:1d:cc:c9:cd:d1:13:37:43:ce:b7:59:
6d:84:b9:44:66:54:0f:81:86:06:c2:e4:fb:0e:4f:
7f:a1:5e:c5:d7:59:58:4f:41:6b:25:48:2a:2a:1d:
0a:f4:07:a5:71:4c:02:d4:ae:76:66:98:59:f3:22:
ef:09:6c:8d:17:00:8f:b8:e4:7b:33:78:a0:f2:20:
5c:11:37:b6:9a:0b:00:d2:33:05:45:5b:a9:af:89:
fa:57:86:da:97:a9:85:b1:c0:80:31:17:aa:d4:cb:
4d:77:80:e9:b1:84:4d:ec:62:cb:2c:2a:1c:50:2b:
6e:4e:b8:53:54:20:e5:46:df:f6:20:b3:39:1f:41:
79:22:1b:25:29:91:52:e1:f9:57:24:75:fb:2c:02:
7d:c0:21:69:a6:8a:7a:62:c3:ee:25:e6:e6:51:6c:
52:80:62:38:ed:cb:43:00:69:89:19:c3:a8:34:7b:
45:03:96:c1:37:52:3c:c4:2e:8f:cf:36:df:64:1e:
95:64:bd:8e:ec:37:9e:f2:86:09:99:a1:c2:1f:61:
26:c5:06:3a:c8:a9:d1:29:ec:22:16:05:ca:a5:68:
ff:1c:41:38:39:2c:cb:62:04:4a:a2:b7:d2:96:68:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:7D:0B:54:01:8D:B7:0C:4C:8D:5C:8A:22:6B:3F:B5:16:1A:C4
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230382e302f32302d3230203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.208.0/20
Signature Algorithm: sha256WithRSAEncryption
25:f9:f4:a1:0c:0e:fa:d0:74:f9:e6:e7:20:90:12:f2:b0:d4:
60:cd:24:9a:ca:f9:dd:ef:09:16:df:bc:c1:38:e3:a7:c7:01:
1a:c9:5d:ff:8e:a1:08:3e:4c:1a:07:55:4b:e6:dc:ba:21:b2:
e8:0c:d9:c3:36:ee:32:94:ed:23:75:9b:3f:f4:88:e0:a5:a9:
70:78:1a:82:8f:2f:96:54:8e:a1:06:4b:31:3a:5b:83:1b:78:
f6:55:a2:b6:fe:72:3e:0f:ce:80:97:5b:89:7f:73:95:29:a2:
7d:06:33:9b:1b:27:82:30:0d:d2:8a:6d:76:f4:ae:3a:f7:90:
6b:e9:01:76:14:2e:e7:54:f9:d6:4f:7b:d2:5d:4d:b7:9d:43:
ce:d1:91:e6:2a:95:b3:10:25:6f:f8:77:03:81:75:61:9f:7e:
7a:f2:6d:dc:03:f4:46:ea:74:97:71:4d:5b:eb:2f:5c:2b:79:
3c:c9:7b:43:58:b2:b8:f0:59:cc:72:5a:60:7e:24:e2:b7:27:
05:7c:f4:38:b3:02:4b:09:b7:09:2b:06:83:6d:2c:bb:be:f5:
ef:1e:27:78:f5:86:b0:ca:1c:3c:e1:99:d2:51:ea:e7:32:ec:
4c:c6:a8:4f:29:52:8e:a4:13:a3:86:58:3f:95:cd:39:9e:06:
d5:5c:a3:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZrCkPNkOyx89VwNqktQNLO6AnmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yMzExMDcxMTM2MjlaFw0yNDExMDUxMTQxMjlaMDMxMTAvBgNV
BAMTKDhDODE3RDBCNTQwMThEQjcwQzRDOEQ1QzhBMjI2QjNGQjUxNjFBQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuVtSQA8Y3R8eL1Vqk2m8vyM0d
zMnN0RM3Q863WW2EuURmVA+BhgbC5PsOT3+hXsXXWVhPQWslSCoqHQr0B6VxTALU
rnZmmFnzIu8JbI0XAI+45HszeKDyIFwRN7aaCwDSMwVFW6mvifpXhtqXqYWxwIAx
F6rUy013gOmxhE3sYsssKhxQK25OuFNUIOVG3/YgszkfQXkiGyUpkVLh+Vckdfss
An3AIWmminpiw+4l5uZRbFKAYjjty0MAaYkZw6g0e0UDlsE3UjzELo/PNt9kHpVk
vY7sN57yhgmZocIfYSbFBjrIqdEp7CIWBcqlaP8cQTg5LMtiBEqit9KWaJvlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjIF9C1QBjbcMTI1ciiJrP7UWGsQwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzAzODJlMzAyZjMyMzAyZDMy
MzAyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBAVT0DANBgkqhkiG9w0BAQsFAAOC
AQEAJfn0oQwO+tB0+ebnIJAS8rDUYM0kmsr53e8JFt+8wTjjp8cBGsld/46hCD5M
GgdVS+bcuiGy6AzZwzbuMpTtI3WbP/SI4KWpcHgago8vllSOoQZLMTpbgxt49lWi
tv5yPg/OgJdbiX9zlSmifQYzmxsngjAN0optdvSuOveQa+kBdhQu51T51k970l1N
t51DztGR5iqVsxAlb/h3A4F1YZ9+evJt3AP0Rup0l3FNW+svXCt5PMl7Q1iyuPBZ
zHJaYH4k4rcnBXz0OLMCSwm3CSsGg20su7717x4nePWGsMocPOGZ0lHq5zLsTMao
TylSjqQTo4ZYP5XNOZ4G1VyjCw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org