Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20393936.roa
File: 352e38332e3231322e302f32342d3234203d3e20393936.roa (raw, json)
Hash identifier: T3es8ujNVlPqJC/SCmalPSe8bohmunC1nrdffCgjbqE=
Subject key identifier: D8:7D:FB:18:7B:BA:0E:4F:CE:2F:99:91:A5:EC:A9:81:95:FB:70:9A
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 2D4236E9A1314ED8C3B2C30900CC9600480A1F3D
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20393936.roa
Signing time: Thu 29 Feb 2024 14:10:09 +0000
ROA not before: Thu 29 Feb 2024 14:05:09 +0000
ROA not after: Thu 27 Feb 2025 14:10:09 +0000
asID: 996
IP address blocks: 5.83.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 15:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:42:36:e9:a1:31:4e:d8:c3:b2:c3:09:00:cc:96:00:48:0a:1f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 29 14:05:09 2024 GMT
Not After : Feb 27 14:10:09 2025 GMT
Subject: CN=D87DFB187BBA0E4FCE2F9991A5ECA98195FB709A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:e8:ad:3c:2f:38:2f:70:21:2b:89:3a:80:
bc:69:ee:b6:2a:49:e9:8d:52:68:32:68:b9:bd:68:
1e:70:03:f7:b5:e8:50:73:b8:d5:6d:ce:8b:8e:ac:
b7:30:85:f5:ca:22:ac:f9:93:67:9b:91:fc:b4:41:
38:99:ea:24:f4:ac:53:1d:c7:00:46:7e:e1:ec:24:
20:54:ca:99:af:ed:28:8c:29:1f:68:73:27:1b:bf:
d8:fa:9e:8b:d1:4a:2d:20:a3:59:81:3d:7b:3c:29:
22:e4:28:15:14:4e:99:fe:7c:19:58:b6:55:72:e0:
1f:cf:e8:a7:73:67:04:06:e1:86:22:5d:77:d5:10:
f4:d7:24:d8:9f:fa:c4:d0:86:0a:f6:4b:e3:3a:e9:
64:17:23:8f:ef:80:0f:de:ab:31:47:e6:b5:e8:0c:
24:b4:19:96:5b:c6:e3:9f:7b:52:60:c7:0e:f3:85:
5b:31:59:2a:90:5a:30:a1:8a:b7:c5:ea:8b:85:11:
f0:e6:20:bb:0d:16:e7:3b:b4:2d:ba:f2:bf:5c:03:
c2:3d:85:05:48:85:ab:a7:08:e2:5b:c1:6a:35:a6:
f2:45:bb:b6:f5:9f:de:34:6d:be:bf:ef:b7:ee:c2:
cc:8d:a0:7a:37:8b:b9:a0:e1:f5:ef:5e:94:e1:db:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:FB:18:7B:BA:0E:4F:CE:2F:99:91:A5:EC:A9:81:95:FB:70:9A
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.212.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6f:64:34:52:b1:fc:d0:1b:da:2d:25:ae:4f:4d:32:06:1d:
dd:55:94:c6:3c:67:22:f1:c8:f1:c5:db:cc:f2:b9:26:0e:ea:
cd:c1:44:c8:56:99:91:27:ad:39:b4:c8:dc:08:51:b8:9c:7b:
b5:06:86:52:f2:9f:de:68:2f:50:55:d6:c7:73:48:d0:a1:d6:
6b:b4:9d:6e:77:6f:9c:ce:97:44:e3:2b:b5:ff:8c:fc:b9:76:
b3:df:d5:50:5a:5a:c4:93:b2:09:f6:6f:3a:70:b8:9d:1b:68:
16:8e:d5:5e:12:36:92:1d:42:5c:e9:10:e8:db:99:4e:b4:e2:
14:0b:a0:56:9d:da:78:16:79:b6:2b:25:9c:9c:53:55:73:55:
4d:7d:89:59:99:84:f8:f6:ee:22:8d:ee:d9:dc:cf:d5:dc:bb:
16:b5:d5:96:18:c1:a8:ca:f0:a5:d9:33:af:d5:8e:08:67:8f:
60:26:8e:a1:cd:d7:c2:46:b7:24:ea:1b:1e:d7:ac:3e:5a:e2:
7f:5d:f2:ac:32:0c:03:81:3f:84:86:d4:98:e0:ca:01:aa:13:
41:44:0d:51:a4:ea:e5:e5:52:06:68:6a:53:8d:55:9a:6f:b7:
89:45:8a:60:2f:49:3d:f2:6d:f0:d5:27:43:44:ba:43:60:0d:
48:c1:ed:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 19:04:09 2024 by rpki-client on console-ams.rpki-client.org