Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32312d3234203d3e20383334.roa
File: 352e38332e3231362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: eQFNmEmX1eb9BBQ2pgz9TX1Fovs98D+uRq8ePdb/DG4=
Subject key identifier: D5:58:A6:39:5B:7A:6F:20:4D:6F:3E:0E:B8:8F:3F:3F:EC:F1:9C:AE
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 5C950B57ABA8D33B69D73F7F71BF34FBC33F1FB8
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32312d3234203d3e20383334.roa
Signing time: Sat 24 Feb 2024 20:56:13 +0000
ROA not before: Sat 24 Feb 2024 20:51:13 +0000
ROA not after: Sat 22 Feb 2025 20:56:13 +0000
asID: 834
IP address blocks: 5.83.216.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 00:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:95:0b:57:ab:a8:d3:3b:69:d7:3f:7f:71:bf:34:fb:c3:3f:1f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 24 20:51:13 2024 GMT
Not After : Feb 22 20:56:13 2025 GMT
Subject: CN=D558A6395B7A6F204D6F3E0EB88F3F3FECF19CAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:4d:d2:a1:af:5b:5d:9f:87:8e:14:ad:c1:
0c:a8:79:cc:95:23:7d:9b:21:e8:0e:89:3d:52:20:
5e:16:67:f9:25:00:30:8e:c8:74:5c:38:e8:cf:b1:
1d:73:af:c3:bb:fb:06:b0:a6:fd:d7:18:78:ac:f3:
2c:5d:a8:74:51:3b:96:6f:96:91:42:78:b4:05:e7:
04:ff:ce:ee:f2:af:4b:09:32:22:fb:27:b9:1e:57:
01:63:ef:4b:36:6c:54:be:76:f8:3a:66:e5:76:77:
49:c7:e0:8a:41:8c:48:c6:4f:e2:47:0c:f9:96:ef:
9f:b1:ea:0c:84:dc:07:0b:f8:f0:8f:37:49:f1:a5:
3d:cc:e1:f8:21:a1:14:c7:98:07:a0:08:55:69:f4:
24:13:bb:bf:93:fa:01:f2:f1:90:9d:63:3e:48:51:
b0:a3:c1:aa:0b:03:5b:19:d7:30:22:c8:c1:17:f4:
10:6b:21:70:7d:5d:1b:68:60:4d:64:77:57:c5:c5:
f5:fb:78:99:38:68:f6:36:b8:8b:69:09:b7:5a:e6:
90:2b:10:72:cf:93:78:57:25:ec:ee:f5:d7:85:a4:
18:42:1b:67:79:b3:aa:43:aa:d1:a7:fa:d2:c4:c0:
c4:96:da:76:f3:f9:c8:9c:61:66:a6:dc:5a:5e:c6:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:58:A6:39:5B:7A:6F:20:4D:6F:3E:0E:B8:8F:3F:3F:EC:F1:9C:AE
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.216.0/21
Signature Algorithm: sha256WithRSAEncryption
28:ec:35:8a:a9:3c:a7:0c:64:73:60:f4:b0:d8:cd:5d:e4:47:
5f:68:1a:c1:8c:be:4b:79:60:23:9c:c5:1f:76:46:8b:17:9c:
64:25:c0:a0:ce:8f:f8:56:0c:1f:fb:2a:71:88:56:91:95:8b:
ed:ab:4a:d6:56:c7:c1:fd:08:e7:3b:44:b1:fb:82:d9:b4:8c:
da:ef:f3:e4:5a:d5:20:e4:05:9b:3d:88:c8:3c:5a:e6:6f:95:
3b:0e:93:ae:a3:d5:36:e2:9e:6c:59:d4:63:04:77:ac:d2:df:
fb:a3:69:92:7e:c7:a4:24:60:6f:f1:27:f6:01:c7:4a:a3:4e:
6f:98:bd:bc:b8:d0:4f:1f:13:b1:6b:ae:1b:0f:04:79:86:d9:
c9:5e:ff:20:ac:4a:98:1f:5a:4e:b6:bd:24:c5:86:f3:a1:ba:
5d:8f:8c:6e:db:b8:e8:a1:6a:9a:9b:a1:6e:e1:f9:cf:81:db:
2d:30:f1:35:66:30:6c:f1:3f:36:46:ce:da:82:6b:e8:cc:1c:
f7:bc:aa:00:cc:6b:fa:14:8c:71:f7:b3:ae:b6:0d:75:12:f8:
ec:ed:d7:81:24:c0:e6:89:66:4e:9d:11:e4:ea:e6:8e:79:a2:
2c:7c:45:66:9a:df:98:f7:6c:93:07:5e:fc:a9:a4:eb:fa:9d:
f7:55:34:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXJULV6uo0ztp1z9/cb80+8M/H7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDAyMjQyMDUxMTNaFw0yNTAyMjIyMDU2MTNaMDMxMTAvBgNV
BAMTKEQ1NThBNjM5NUI3QTZGMjA0RDZGM0UwRUI4OEYzRjNGRUNGMTlDQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBE3Soa9bXZ+HjhStwQyoecyV
I32bIegOiT1SIF4WZ/klADCOyHRcOOjPsR1zr8O7+wawpv3XGHis8yxdqHRRO5Zv
lpFCeLQF5wT/zu7yr0sJMiL7J7keVwFj70s2bFS+dvg6ZuV2d0nH4IpBjEjGT+JH
DPmW75+x6gyE3AcL+PCPN0nxpT3M4fghoRTHmAegCFVp9CQTu7+T+gHy8ZCdYz5I
UbCjwaoLA1sZ1zAiyMEX9BBrIXB9XRtoYE1kd1fFxfX7eJk4aPY2uItpCbda5pAr
EHLPk3hXJezu9deFpBhCG2d5s6pDqtGn+tLEwMSW2nbz+cicYWam3Fpexv6xAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1VimOVt6byBNbz4OuI8/P+zxnK4wHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzNjJlMzAyZjMyMzEyZDMy
MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAwVT2DANBgkqhkiG9w0BAQsFAAOC
AQEAKOw1iqk8pwxkc2D0sNjNXeRHX2gawYy+S3lgI5zFH3ZGixecZCXAoM6P+FYM
H/sqcYhWkZWL7atK1lbHwf0I5ztEsfuC2bSM2u/z5FrVIOQFmz2IyDxa5m+VOw6T
rqPVNuKebFnUYwR3rNLf+6Npkn7HpCRgb/En9gHHSqNOb5i9vLjQTx8TsWuuGw8E
eYbZyV7/IKxKmB9aTra9JMWG86G6XY+Mbtu46KFqmpuhbuH5z4HbLTDxNWYwbPE/
NkbO2oJr6Mwc97yqAMxr+hSMcfezrrYNdRL47O3XgSTA5olmTp0R5OrmjnmiLHxF
ZprfmPdskwde/Kmk6/qd91U07w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org