Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32322d3234203d3e20383334.roa
File: 352e38332e3231362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: KO3mJOa1bUiegmdlYAyl0aQ2FT7HpUnZVWycEZBPJvE=
Subject key identifier: E8:5F:45:AC:B6:51:B0:4F:30:02:2D:36:72:B1:30:29:10:16:C2:08
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 66BE7570562136F26D1466F7B8C04C3EE0AF6591
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32322d3234203d3e20383334.roa
Signing time: Mon 26 Feb 2024 00:39:13 +0000
ROA not before: Mon 26 Feb 2024 00:34:13 +0000
ROA not after: Mon 24 Feb 2025 00:39:13 +0000
asID: 834
IP address blocks: 5.83.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 18:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:be:75:70:56:21:36:f2:6d:14:66:f7:b8:c0:4c:3e:e0:af:65:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 26 00:34:13 2024 GMT
Not After : Feb 24 00:39:13 2025 GMT
Subject: CN=E85F45ACB651B04F30022D3672B130291016C208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:13:51:99:a8:11:80:08:14:27:83:b8:1e:
38:81:1a:8f:52:e7:13:69:29:d6:a3:64:93:ad:c0:
0d:6b:b2:47:95:9d:ab:a8:d4:8d:f7:d2:90:98:19:
8d:1b:9a:85:78:fd:d1:49:f5:55:d0:27:0b:25:6a:
a8:cd:09:74:1f:20:94:32:f4:ac:d6:2b:23:4d:cc:
5e:11:07:7a:c5:5b:4a:98:7a:c8:18:3e:c5:45:68:
04:73:8d:89:46:fd:1d:01:28:3c:e3:7e:c2:dd:3b:
76:d9:1d:82:6c:0d:06:85:bf:5c:27:36:7a:e6:c3:
2d:aa:01:55:de:65:29:60:77:7c:57:52:d3:79:3a:
bb:50:aa:f2:75:0a:08:3a:5c:df:c7:be:4c:0e:b6:
52:59:c5:21:1f:58:f4:4f:5c:ba:ef:9f:ee:05:63:
73:df:b4:27:e9:67:df:fa:05:8e:90:b6:2f:30:ff:
ca:a4:87:a4:75:11:65:08:b4:fa:a3:65:67:e7:f6:
fa:0a:ea:91:f0:5f:b6:66:f4:56:76:af:f0:95:a5:
a7:c7:f2:40:fe:73:4f:bd:f0:3c:d2:c4:32:04:b4:
15:4d:25:0f:c1:19:cb:fd:82:25:eb:e9:b9:b3:d2:
e7:35:e1:ed:54:8d:b5:8a:6b:29:e4:d7:81:7b:9b:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5F:45:AC:B6:51:B0:4F:30:02:2D:36:72:B1:30:29:10:16:C2:08
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.216.0/22
Signature Algorithm: sha256WithRSAEncryption
80:d0:f2:0a:c7:43:4b:0f:e3:ee:f9:96:39:e8:3f:6f:40:5d:
0a:87:28:ce:c5:7d:09:6b:f3:69:0f:bc:70:c0:b5:9f:ac:28:
9a:19:59:2d:85:64:df:a8:fc:cc:e2:ce:a4:ec:a7:8c:44:ce:
5b:c8:e7:ba:b3:22:5d:4c:1e:d7:e5:db:82:66:55:07:bd:86:
c4:a4:a1:6f:89:5a:c4:1a:5f:da:f0:9f:59:ef:e5:80:63:32:
b4:79:15:69:7b:fb:02:16:fe:12:2d:9d:80:f4:7c:f0:fa:0d:
d1:2c:c0:d1:e1:4a:cf:78:ca:fa:cd:12:39:78:2a:e4:72:dd:
0b:9d:5a:ec:4c:3a:29:02:86:6e:6e:a4:b0:6a:1b:2b:b0:9b:
16:14:5e:5f:84:42:89:82:71:46:b9:52:a8:b4:cc:fe:81:b7:
9d:3d:7a:d7:df:74:66:3b:2c:26:b1:b8:dc:34:88:2a:8a:fa:
e9:a5:0e:36:07:2e:51:a8:9d:8c:3b:13:d4:e6:fa:a7:e8:92:
3c:de:80:8b:5b:c0:30:69:1b:24:a4:e8:aa:75:89:8b:a6:23:
65:7a:5f:af:1c:56:32:0a:9a:c4:a5:0d:0c:bb:ce:7f:95:3f:
c3:00:59:b9:e2:e8:ff:8e:10:08:54:42:9b:f3:9e:2d:34:86:
c8:12:dc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 22:11:11 2024 by rpki-client on console-ams.rpki-client.org