Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20383334.roa
File: 352e38332e3231342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8+S6pZQFKOA/yN6s24zGyB4276AqpgjwIziXwZXl3L0=
Subject key identifier: F0:EA:28:7F:B1:6F:DA:8D:FB:9F:90:D4:04:60:E3:E1:7A:46:AB:A0
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 732122AE7003DD2BD09CBABD82131DF2A50E12A2
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20383334.roa
Signing time: Sun 03 Mar 2024 17:02:38 +0000
ROA not before: Sun 03 Mar 2024 16:57:38 +0000
ROA not after: Sun 02 Mar 2025 17:02:38 +0000
asID: 834
IP address blocks: 5.83.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 19:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:21:22:ae:70:03:dd:2b:d0:9c:ba:bd:82:13:1d:f2:a5:0e:12:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Mar 3 16:57:38 2024 GMT
Not After : Mar 2 17:02:38 2025 GMT
Subject: CN=F0EA287FB16FDA8DFB9F90D40460E3E17A46ABA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:3a:ea:64:7a:c4:4d:54:c2:d8:0b:53:16:
22:fd:49:01:49:79:53:0c:79:a9:e5:03:57:68:18:
2a:98:31:21:f7:3b:84:44:38:e2:a8:1f:85:3c:94:
5a:34:ed:32:ab:9c:45:68:ed:cd:60:e3:8f:ac:2b:
4c:51:00:ed:da:b6:9b:8d:67:11:bc:53:e4:1c:4a:
4b:85:75:22:d8:8a:33:a9:19:fa:3b:3c:0d:c9:c0:
1a:be:5c:25:c0:ec:19:b6:81:cc:d3:3c:70:e9:19:
d7:77:bd:23:f1:e1:91:eb:c5:14:e7:c2:ba:db:2b:
de:33:10:5e:e7:aa:e5:47:a8:91:1d:5d:cf:06:8f:
d6:9f:8c:b2:cd:6a:c3:cc:5f:b5:84:04:6d:f8:01:
a2:49:ef:49:47:1b:e6:7a:d3:1c:d0:40:06:e6:68:
22:3f:84:ef:d5:f8:fa:bb:75:b8:d8:76:5e:76:44:
32:a3:c3:30:c7:56:23:f3:27:02:bd:b4:1c:1a:59:
1d:b0:5b:3b:36:72:4e:c1:62:13:56:45:1c:86:27:
c9:45:ef:1d:b1:08:a0:b9:60:71:2b:70:f7:72:18:
af:70:2e:30:c2:ae:16:74:4d:82:3d:69:fc:11:04:
ac:34:c7:38:af:62:93:69:6d:bd:79:6a:54:8e:76:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EA:28:7F:B1:6F:DA:8D:FB:9F:90:D4:04:60:E3:E1:7A:46:AB:A0
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.214.0/24
Signature Algorithm: sha256WithRSAEncryption
27:23:e9:0f:0c:71:28:95:0b:76:4b:3e:52:c5:2e:47:96:29:
c0:8e:17:bc:54:0f:34:e4:fa:5f:b6:68:11:21:7b:cb:ec:03:
d0:ef:f5:f5:42:90:26:bd:95:06:bb:9a:dd:1f:ee:4b:7b:2d:
b2:f1:c9:e8:83:f1:2d:f5:09:e0:37:6e:6e:ee:91:d9:88:55:
35:1f:e2:b7:e9:9e:15:43:e2:27:f1:01:c4:14:cd:c0:ba:3b:
b7:07:b7:85:98:63:1e:69:6b:24:62:4d:f9:28:1c:94:3a:b6:
40:61:8d:ca:49:12:60:4b:ce:43:c0:46:16:55:af:43:7b:8d:
e4:4c:f0:a0:fe:46:92:cb:f3:25:ce:c2:e2:5b:5f:1c:74:d7:
92:7f:5c:ea:08:5f:21:61:d0:71:df:4f:5a:0b:2c:be:76:9d:
c9:8f:15:5b:5f:22:77:e5:32:eb:19:34:83:ba:ae:ae:dd:0f:
d1:9b:f8:de:95:c1:19:c9:45:c2:4f:bb:06:7e:f7:e5:68:87:
90:05:79:aa:37:ad:00:f6:bd:fa:8f:08:35:c1:87:8f:76:be:
86:33:40:0b:21:d8:16:d8:3c:32:a0:d8:cc:62:b9:2d:67:be:
6d:e5:b0:9d:1e:e4:be:1f:71:e7:c1:cd:22:88:e5:80:64:ed:
4b:28:64:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcyEirnAD3SvQnLq9ghMd8qUOEqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDAzMDMxNjU3MzhaFw0yNTAzMDIxNzAyMzhaMDMxMTAvBgNV
BAMTKEYwRUEyODdGQjE2RkRBOERGQjlGOTBENDA0NjBFM0UxN0E0NkFCQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hDrqZHrETVTC2AtTFiL9SQFJ
eVMMeanlA1doGCqYMSH3O4REOOKoH4U8lFo07TKrnEVo7c1g44+sK0xRAO3atpuN
ZxG8U+QcSkuFdSLYijOpGfo7PA3JwBq+XCXA7Bm2gczTPHDpGdd3vSPx4ZHrxRTn
wrrbK94zEF7nquVHqJEdXc8Gj9afjLLNasPMX7WEBG34AaJJ70lHG+Z60xzQQAbm
aCI/hO/V+Pq7dbjYdl52RDKjwzDHViPzJwK9tBwaWR2wWzs2ck7BYhNWRRyGJ8lF
7x2xCKC5YHErcPdyGK9wLjDCrhZ0TYI9afwRBKw0xzivYpNpbb15alSOdli/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8Ooof7Fv2o37n5DUBGDj4XpGq6AwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzNDJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAVT1jANBgkqhkiG9w0BAQsFAAOC
AQEAJyPpDwxxKJULdks+UsUuR5YpwI4XvFQPNOT6X7ZoESF7y+wD0O/19UKQJr2V
Brua3R/uS3stsvHJ6IPxLfUJ4Ddubu6R2YhVNR/it+meFUPiJ/EBxBTNwLo7twe3
hZhjHmlrJGJN+SgclDq2QGGNykkSYEvOQ8BGFlWvQ3uN5EzwoP5GksvzJc7C4ltf
HHTXkn9c6ghfIWHQcd9PWgssvnadyY8VW18id+Uy6xk0g7qurt0P0Zv43pXBGclF
wk+7Bn735WiHkAV5qjetAPa9+o8INcGHj3a+hjNACyHYFtg8MqDYzGK5LWe+beWw
nR7kvh9x58HNIojlgGTtSyhk8g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org