Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32332d3234203d3e20383334.roa
File: 352e38332e3231362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: mjsesRIc7rLzvrItEMLvDlMxMGyRqEA/BJ11TaUksf8=
Subject key identifier: D1:49:78:3B:60:35:94:2F:29:54:CC:1B:3B:23:CC:7F:4B:2F:47:7B
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 47D8E0AF563295020964CB3EA7AA978E7F5A5BE5
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32332d3234203d3e20383334.roa
Signing time: Tue 27 Feb 2024 18:11:28 +0000
ROA not before: Tue 27 Feb 2024 18:06:28 +0000
ROA not after: Tue 25 Feb 2025 18:11:28 +0000
asID: 834
IP address blocks: 5.83.216.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 20:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d8:e0:af:56:32:95:02:09:64:cb:3e:a7:aa:97:8e:7f:5a:5b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 27 18:06:28 2024 GMT
Not After : Feb 25 18:11:28 2025 GMT
Subject: CN=D149783B6035942F2954CC1B3B23CC7F4B2F477B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:da:33:68:22:f9:3c:d3:b4:91:a1:ec:44:
7c:65:6a:73:30:56:85:92:28:87:03:4b:e2:e2:ee:
ba:19:c6:cc:d5:a3:c3:f9:09:64:b9:22:ff:dd:92:
d1:31:1c:07:d5:7e:85:e0:33:d5:a1:1b:f5:5a:36:
0e:85:a3:df:a8:61:21:10:a7:7c:aa:f0:60:32:a8:
b3:55:01:3e:e9:2e:c6:ff:67:73:f4:45:70:78:16:
9f:94:6e:91:89:86:64:d4:90:e2:31:2b:30:3c:3e:
fe:25:a9:10:8c:1b:06:86:7d:cb:d9:6e:dd:6e:8b:
61:6c:a7:77:f7:13:aa:12:c9:eb:e0:e6:11:46:60:
ec:59:3c:54:06:48:96:29:83:3f:2d:3c:ca:5b:2e:
e6:99:15:13:24:35:e3:ef:47:e4:ec:7d:57:60:8a:
e9:67:50:0d:82:08:9e:dd:7a:18:f5:d5:b3:9b:50:
51:50:f6:73:c3:d6:b9:9d:d2:b7:b5:f5:8f:38:1f:
24:16:be:fa:f5:83:d2:ac:31:4f:e7:23:82:20:6a:
db:83:0f:76:a8:8d:24:78:81:3d:93:19:39:f3:51:
42:25:c6:76:b2:cf:2f:a6:47:e4:fa:39:b1:08:d9:
4f:2b:c0:e4:1a:91:f0:f5:0d:45:4a:89:c7:24:5a:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:49:78:3B:60:35:94:2F:29:54:CC:1B:3B:23:CC:7F:4B:2F:47:7B
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.216.0/23
Signature Algorithm: sha256WithRSAEncryption
07:28:57:c3:8d:8e:a8:98:fa:42:e2:a0:53:23:5e:7c:b9:2e:
18:2f:96:0b:d6:1d:c7:8f:09:47:0e:a5:04:2a:69:4d:c1:ae:
bc:22:57:a6:c5:3c:1c:7b:75:3c:22:be:0e:3a:2f:35:71:28:
06:3d:3d:89:ca:58:28:a0:6f:b9:e9:bc:77:63:a8:41:8a:fe:
e8:c7:95:2b:9c:bd:8c:e8:20:47:a3:c4:c3:20:d3:cf:31:ee:
d1:78:99:cf:99:0c:b5:c7:62:47:18:ca:86:6b:f1:6b:69:ba:
b0:18:17:cb:48:13:98:cd:f2:22:3d:6c:27:f9:04:ae:c5:7c:
04:b5:0d:47:42:b1:18:4f:6a:4d:3a:ce:bb:33:21:02:c0:89:
14:a4:e9:51:35:21:18:05:e0:be:51:58:c3:77:e6:74:c0:85:
b1:b3:f2:63:86:ef:fb:86:cc:ee:7e:8b:98:9f:d3:2f:49:09:
a8:c6:82:7e:80:6f:5e:79:06:4c:03:9a:e2:3e:30:78:87:10:
d5:28:dd:31:ec:c1:96:f6:fc:27:73:9b:b8:f8:22:90:2c:fd:
58:18:d0:11:37:3e:08:12:bc:40:fa:a6:5d:0f:80:5b:9b:db:
95:8a:de:91:4f:33:64:a0:66:6e:14:d4:e4:b4:0a:c1:aa:28:
8e:ce:06:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org