Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e20383334.roa
File: 352e38332e3231352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: UY188Ont5j4y8eMfs46fos9LNx1YpneiURGc9A+/prY=
Subject key identifier: CC:5D:56:55:45:E9:01:49:11:8B:45:26:EA:5B:A0:68:1D:1F:93:90
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 09F6C7CD76B58686B0F742A0066949D85AD2A73D
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e20383334.roa
Signing time: Mon 26 Aug 2024 00:01:12 +0000
ROA not before: Sun 25 Aug 2024 23:56:12 +0000
ROA not after: Mon 25 Aug 2025 00:01:12 +0000
asID: 834
IP address blocks: 5.83.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f6:c7:cd:76:b5:86:86:b0:f7:42:a0:06:69:49:d8:5a:d2:a7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Aug 25 23:56:12 2024 GMT
Not After : Aug 25 00:01:12 2025 GMT
Subject: CN=CC5D565545E90149118B4526EA5BA0681D1F9390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:aa:ea:2c:58:d2:bd:32:af:54:d6:05:69:
1b:e6:95:b0:f1:ad:a6:b5:90:fe:bf:83:b8:1d:73:
bb:56:4d:15:9e:62:5a:61:b3:bc:4a:db:a7:01:43:
76:39:97:23:38:c3:b2:9c:81:9b:c7:cd:7f:00:be:
29:ba:c7:9d:11:93:5b:c0:20:6a:6a:c4:e0:30:9d:
50:48:db:0d:c5:bd:ac:76:42:15:f9:c7:f3:1f:bf:
6b:da:60:07:bc:87:a7:ed:75:68:14:dd:d7:8d:0a:
53:3f:6b:91:d8:21:36:f9:89:3d:26:09:29:1f:26:
c7:7f:08:85:ee:e6:67:9a:73:da:5a:23:3b:29:a6:
c9:3d:10:68:fc:d1:49:ab:17:4a:ca:82:4a:98:4c:
e0:80:d4:50:8f:4a:2b:29:62:17:c8:63:cf:e1:7c:
86:01:4e:cc:38:bb:19:1d:37:48:dc:5c:e1:98:d1:
5e:78:1b:8c:ef:2f:63:3d:6f:44:40:52:a3:e2:95:
cb:90:eb:58:37:4e:8b:18:45:f3:28:2a:3a:00:7a:
66:e8:25:43:fb:2e:76:20:2c:e4:6b:3d:1e:bf:14:
e6:42:a9:9d:7c:69:6f:68:ac:a0:99:12:71:4f:5b:
99:c8:dc:b8:4b:6f:67:7a:e4:c6:e3:a8:48:15:f9:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5D:56:55:45:E9:01:49:11:8B:45:26:EA:5B:A0:68:1D:1F:93:90
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a1:96:b8:90:ab:9c:87:31:89:4f:43:3a:6c:11:74:8f:b0:
b6:cc:ee:90:29:0a:46:3e:d6:87:ce:66:a6:ab:ae:db:80:70:
6b:11:a0:7e:c0:1e:17:d8:4e:dd:65:39:6a:0e:2c:73:84:a1:
3c:21:ac:7c:79:8b:9d:e4:34:f3:c1:25:6a:70:3e:66:25:54:
56:bb:46:4c:9f:df:7e:46:46:4f:f0:6a:a5:e2:cf:67:a9:ac:
7d:49:f9:a8:7e:49:e2:da:f1:df:f1:99:23:4e:71:76:27:d5:
b0:bf:dd:6e:39:e2:90:88:4e:6c:1f:1b:e2:0e:46:0d:9b:49:
8b:71:57:6b:4f:0d:0a:9f:16:52:e2:f9:1e:1f:06:d1:23:97:
11:5a:df:45:9f:21:d5:7d:07:70:f1:e4:8a:2f:67:bd:a3:6a:
51:ba:a0:61:f0:54:28:2c:b9:da:bb:bd:75:3d:4f:64:48:20:
8c:1a:18:bd:5d:1f:e4:f8:30:42:69:3d:2b:28:4f:66:a5:18:
fc:b7:be:89:20:7a:42:cb:54:be:56:45:31:aa:59:ec:a9:c8:
cc:58:c1:c1:4b:3b:5b:80:8e:3a:d4:69:fa:24:cd:b1:38:67:
8f:0e:1e:4a:0b:9f:1e:24:cf:ec:ae:8b:c5:55:3e:84:bc:be:
cd:c7:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 14:50:20 2024 by rpki-client on console-fra.rpki-client.org