Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32332d3234203d3e20383334.roa
File: 352e38332e3231322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: Mo7AtY6HFDWqfZkQe3Jq8UPAV7hSd2jjtIavyT6pOmI=
Subject key identifier: B2:4E:16:19:4C:A2:57:C0:F5:93:03:4E:E1:D8:16:A3:C3:AD:F7:97
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 309B29C943BB0533390BD60FCC0F9EC9C0C6AA3A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32332d3234203d3e20383334.roa
Signing time: Tue 27 Feb 2024 00:55:23 +0000
ROA not before: Tue 27 Feb 2024 00:50:23 +0000
ROA not after: Tue 25 Feb 2025 00:55:23 +0000
asID: 834
IP address blocks: 5.83.212.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 14:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9b:29:c9:43:bb:05:33:39:0b:d6:0f:cc:0f:9e:c9:c0:c6:aa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 27 00:50:23 2024 GMT
Not After : Feb 25 00:55:23 2025 GMT
Subject: CN=B24E16194CA257C0F593034EE1D816A3C3ADF797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:56:7f:12:33:90:75:76:95:1e:bc:bb:97:
0b:48:35:29:75:fb:47:fd:89:9c:4d:10:97:f4:ee:
13:48:07:88:66:20:7e:01:66:08:e6:53:6d:11:7e:
04:2d:43:93:1b:83:1c:47:65:67:e9:a2:a0:4c:a4:
7a:e0:91:03:33:e1:2b:0b:9c:28:22:1a:d3:17:f9:
10:93:38:3b:2b:92:fb:a2:b1:8a:ea:32:aa:d9:1a:
54:c5:48:ff:3d:7b:9f:e5:83:59:3e:52:bd:7b:1e:
45:06:a5:b0:cf:e4:81:d9:c0:4d:d0:4a:ee:3e:82:
6b:24:29:0a:48:35:25:97:1c:56:91:5c:84:33:f6:
22:34:b9:14:32:a7:9a:2d:47:67:9c:71:e9:46:1a:
32:99:8a:34:66:d7:96:b6:a7:78:16:b0:e3:de:65:
2e:07:6b:d2:54:d9:c0:58:67:51:6d:bf:8f:3a:f0:
10:fe:76:4b:44:a2:4c:f7:16:a1:66:db:90:04:5f:
31:d7:81:ea:da:38:82:dd:0d:34:f9:d3:ae:32:f6:
00:9c:fd:39:9f:7f:f1:80:15:d6:37:c1:ad:69:c8:
3c:19:59:f1:29:58:ed:6f:98:a0:23:2e:0e:78:61:
cd:da:6c:a3:62:19:3c:ad:94:e7:6a:e5:9f:15:54:
95:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4E:16:19:4C:A2:57:C0:F5:93:03:4E:E1:D8:16:A3:C3:AD:F7:97
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.212.0/23
Signature Algorithm: sha256WithRSAEncryption
02:70:52:3a:71:b6:b6:f6:39:5e:81:dd:02:3a:17:d3:d7:6b:
e4:85:b3:f2:6d:0c:2f:3b:2d:98:9f:91:2d:03:97:bf:b2:a9:
aa:2c:af:e1:f1:f6:1a:82:4e:f7:03:4f:6b:1c:9f:16:ed:1f:
ce:ce:f6:7d:1a:5a:23:43:0c:16:51:ec:69:07:e5:93:30:2e:
45:f8:be:e0:f1:0a:ac:19:17:44:e5:96:43:1d:ce:a1:a7:4f:
c4:3e:70:1f:f9:50:95:6e:69:00:81:46:24:ca:13:87:09:73:
f6:d9:90:96:13:5f:1b:db:43:13:2a:ca:ae:eb:9a:9c:4c:2b:
56:ae:58:69:cd:d7:2d:cc:4a:e0:9b:76:26:b4:10:cc:d6:91:
fa:a2:b3:9f:93:be:20:b3:b6:bf:1c:34:79:fc:82:c8:fe:5e:
93:11:f5:7f:57:99:b0:d2:0e:3e:a3:1a:47:73:f3:a4:05:1d:
47:d1:0b:80:40:dd:61:c3:30:82:67:7a:1e:ea:00:5c:c4:23:
d3:d6:d9:a2:92:6c:b5:20:35:7f:f7:d8:12:2f:64:04:35:cd:
44:f6:5a:d6:e0:0a:4f:31:d9:5c:51:41:e4:b5:57:d6:71:f6:
d7:c1:81:76:ac:a3:8c:63:ea:ad:d2:88:21:c6:74:5e:8d:79:
81:2a:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 16:38:59 2024 by rpki-client on console-ams.rpki-client.org