Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e203134363138.roa
File: 352e38332e3231342e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: xNHR3zrOCV1WUvu5N6HuEOv42KTvhWBTkKkxdf1vz4A=
Subject key identifier: 6F:90:9D:2C:F8:9B:F9:0B:60:25:0E:FE:70:B9:A5:65:71:C1:F2:48
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 424EEC7FF4DEB283413F75B1C0B1F6A0DA1A0298
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e203134363138.roa
Signing time: Sun 03 Mar 2024 12:17:05 +0000
ROA not before: Sun 03 Mar 2024 12:12:05 +0000
ROA not after: Sun 02 Mar 2025 12:17:05 +0000
asID: 14618
IP address blocks: 5.83.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4e:ec:7f:f4:de:b2:83:41:3f:75:b1:c0:b1:f6:a0:da:1a:02:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Mar 3 12:12:05 2024 GMT
Not After : Mar 2 12:17:05 2025 GMT
Subject: CN=6F909D2CF89BF90B60250EFE70B9A56571C1F248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:35:cf:3e:35:11:f4:01:6f:42:81:b6:40:f0:
70:9e:06:d7:9c:17:d9:ca:3b:74:dc:db:72:b1:d9:
f8:f9:71:9c:f9:3a:cc:63:2c:27:38:67:91:01:54:
64:4e:34:9a:32:4d:c8:52:16:1c:17:61:b6:97:8b:
af:f5:6c:f0:8d:68:42:c0:9a:25:f2:8f:52:61:18:
73:d3:23:e9:79:7b:f6:72:39:bd:23:14:77:af:ec:
87:1f:5b:4c:3b:48:14:9e:2a:43:fd:61:f3:c6:e0:
7c:4e:1c:c8:76:50:63:7b:f7:44:f3:86:a9:38:38:
10:8c:3c:54:cd:44:8a:0c:61:c7:6f:d3:ec:35:d2:
90:ca:76:64:13:0b:ca:e8:2f:54:7d:ff:ed:b9:07:
91:54:dd:e9:ed:1b:86:be:b9:2e:25:1c:25:1f:9f:
12:e6:f6:11:d4:27:4e:f3:ef:08:76:ac:3e:51:5d:
1d:f4:21:78:be:6c:23:e9:74:f0:cf:f7:8f:08:11:
89:a9:eb:98:b2:d3:85:be:2f:71:45:0c:17:02:3b:
c5:a6:6f:0f:6a:a8:b6:43:e7:14:5f:9e:e7:ca:43:
d4:cf:c4:ba:bc:b7:35:00:10:c0:90:bf:5d:ef:ad:
5a:24:17:de:94:ba:7a:0e:b0:f4:65:03:db:01:45:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:90:9D:2C:F8:9B:F9:0B:60:25:0E:FE:70:B9:A5:65:71:C1:F2:48
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ac:54:3b:97:f1:dc:71:23:23:ef:c8:b4:17:a5:de:83:ca:
5a:f1:ab:2f:2e:b1:6b:7d:7f:0c:e3:40:f3:f2:46:7c:4a:37:
25:70:ac:f8:8c:db:73:0f:19:e3:25:27:78:e5:c3:1d:18:4b:
7b:1e:66:45:93:5f:c0:15:c6:9e:87:da:ab:eb:00:f6:c7:24:
74:2f:83:f6:0c:54:74:a3:26:04:17:8e:a0:80:87:99:2b:c0:
b9:56:37:54:f2:61:8a:54:df:44:53:25:90:cf:43:ad:94:04:
c4:33:fb:ae:cb:01:1c:e8:73:a2:db:40:44:95:d4:61:a5:31:
12:ed:eb:75:44:7b:09:1c:ad:89:a5:55:6b:29:49:37:98:8d:
11:fe:c6:67:f4:99:ff:bb:9c:53:87:73:38:89:73:10:e4:1c:
5e:8c:22:3c:33:32:44:e2:65:5b:d8:47:fa:28:51:5d:b4:94:
e9:1d:9c:e4:16:83:bf:96:b6:b5:5e:a3:60:9b:b3:f4:83:b9:
86:e1:37:c4:47:a0:27:ec:13:58:1d:95:28:1c:08:0a:62:bc:
fa:c2:c9:43:f2:55:50:10:82:de:65:96:6c:56:20:5c:3f:c0:
5a:7a:de:05:6b:1b:58:fa:92:b7:d6:db:58:ca:8b:8c:5c:f9:
ce:4e:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org