Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e203231383539.roa
File: 352e38332e3231382e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: YG3Lu17nrTpe3UF8Zv85CUL7s3bAVqtmV34Puuv0Jh4=
Subject key identifier: 3A:C6:3E:7D:3A:02:20:75:80:56:51:D5:22:EB:63:24:BC:93:35:01
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 71B32F0D54392BAD4DFBC9EB55A2AA378D56C65A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e203231383539.roa
Signing time: Sat 29 Jun 2024 14:41:11 +0000
ROA not before: Sat 29 Jun 2024 14:36:11 +0000
ROA not after: Sat 28 Jun 2025 14:41:11 +0000
asID: 21859
IP address blocks: 5.83.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b3:2f:0d:54:39:2b:ad:4d:fb:c9:eb:55:a2:aa:37:8d:56:c6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Jun 29 14:36:11 2024 GMT
Not After : Jun 28 14:41:11 2025 GMT
Subject: CN=3AC63E7D3A022075805651D522EB6324BC933501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:36:64:db:77:c6:e4:b8:d3:fa:e6:5e:c1:
04:2f:5e:53:56:be:fb:fd:93:c3:64:aa:5c:03:d2:
19:f2:cf:ec:36:33:fe:3e:f3:73:43:d9:9f:24:4a:
22:f0:ef:dc:ef:24:8c:be:a6:54:11:cf:8f:62:5c:
c1:e9:ae:9d:f7:e6:28:78:33:d1:86:c9:24:2e:79:
5a:4b:f1:0f:94:2c:5b:a7:19:fb:17:8e:27:b4:08:
ac:e7:70:4e:aa:66:ae:e1:93:6b:97:e9:41:76:90:
3e:28:f1:3d:83:de:ce:6e:ba:78:13:dc:a2:0a:5b:
11:f5:2c:ef:2a:4b:3f:95:cf:ed:ed:d8:d7:32:4b:
dd:34:9e:74:88:8b:95:cc:ad:ed:f5:68:dc:2b:60:
a8:86:80:f4:4d:4a:94:fc:7b:b2:fb:47:92:4d:fa:
d3:1a:f2:e8:79:24:81:ac:a3:44:36:4f:85:a5:af:
de:24:be:c0:a8:a5:b8:d9:75:af:aa:b2:a5:90:8d:
61:a8:ca:d7:a2:36:03:94:81:cf:7f:d2:c8:50:79:
ee:bc:53:ec:a1:64:c3:71:37:c4:4e:d7:09:87:64:
02:13:52:e7:df:bc:09:f1:a1:2f:5b:cb:90:b0:ab:
21:0a:89:fb:12:f0:52:cc:44:11:ca:3b:c7:59:34:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:3E:7D:3A:02:20:75:80:56:51:D5:22:EB:63:24:BC:93:35:01
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.218.0/24
Signature Algorithm: sha256WithRSAEncryption
96:85:2a:a4:dd:7b:a0:f3:df:bb:a4:28:92:3c:16:68:a3:b0:
95:b1:5f:3d:90:33:69:cc:4f:a4:38:a1:3f:73:1e:f1:0e:01:
db:4d:25:0f:4d:3f:05:25:c2:ea:aa:17:26:5a:a3:78:02:81:
94:88:91:37:9f:b4:90:93:36:2f:f9:ea:fd:81:d8:69:c3:e9:
29:1e:9b:0e:ec:20:f3:21:cf:76:ff:d2:9d:d5:41:78:da:f4:
1a:56:45:61:43:96:7f:89:8a:74:c6:1d:4c:a4:77:6d:f8:6c:
30:da:5d:14:55:55:12:7e:de:64:5a:58:9a:69:59:ac:58:e1:
13:4f:33:75:ac:39:a4:6b:81:0e:6a:ca:32:cc:e4:fe:b2:29:
7e:04:ac:5e:20:cd:92:c8:e0:6b:b6:aa:a6:89:b9:4f:9a:c7:
a2:81:bf:fb:26:37:02:d1:a5:55:a9:82:88:82:4d:60:e2:79:
dc:b1:68:ce:e8:e0:c4:1b:95:09:ab:b1:bd:1b:0e:15:f2:13:
f5:a0:aa:f4:ef:df:fc:c0:8d:b5:5c:76:c9:7b:f9:79:3f:24:
dd:99:0d:65:c6:bd:56:c4:cc:15:71:73:05:a4:23:4d:2f:b4:
20:2d:80:75:5b:03:4c:51:7f:2a:75:f9:f3:79:00:c6:ad:42:
c8:c5:a9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 01:57:43 2024 by rpki-client on console-fra.rpki-client.org