Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e20383334.roa
File: 352e38332e3231382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jKcBPXP6ZXQCeqWXO5RWQk/4VoJkLNiILtvzLNDZIg4=
Subject key identifier: 36:66:C2:23:E1:B5:C7:0C:91:E7:C0:16:CC:43:D5:B8:EE:71:DB:F8
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 21B5A4A6D0175F4B74B545285E1A3E2B56518CC7
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e20383334.roa
Signing time: Thu 29 Aug 2024 00:01:44 +0000
ROA not before: Wed 28 Aug 2024 23:56:44 +0000
ROA not after: Thu 28 Aug 2025 00:01:44 +0000
asID: 834
IP address blocks: 5.83.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 17:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b5:a4:a6:d0:17:5f:4b:74:b5:45:28:5e:1a:3e:2b:56:51:8c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Aug 28 23:56:44 2024 GMT
Not After : Aug 28 00:01:44 2025 GMT
Subject: CN=3666C223E1B5C70C91E7C016CC43D5B8EE71DBF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:cb:1a:b5:97:e2:50:eb:26:64:b1:2d:ec:
98:f9:f5:37:47:c4:c5:6d:d8:12:36:22:f4:56:c6:
ee:d9:0e:0c:73:f5:72:39:7a:2f:70:73:36:a7:0c:
d1:8f:1c:f7:fd:c3:03:72:08:d2:88:3f:20:2c:52:
f6:e3:41:28:0c:9c:56:25:62:41:f5:5f:42:b3:7d:
32:b9:3e:51:06:0c:7d:44:cf:3b:9c:75:e3:15:ab:
4e:f3:56:26:e7:eb:91:75:80:5e:17:8f:db:28:99:
12:be:af:24:7c:54:b9:84:f1:8c:a5:d1:1c:6d:2c:
f3:31:3b:c7:75:1c:1b:6e:8d:e6:72:08:48:c7:80:
be:53:d0:7a:a4:ca:dc:2c:45:75:26:6c:70:81:d2:
ae:56:0b:3b:3a:85:ef:ae:dd:29:41:7f:ba:d7:41:
5c:cb:29:45:ab:ec:7a:33:e2:16:1f:4a:be:d7:fc:
2e:f0:ff:e0:f2:22:8e:a2:82:2b:27:56:c3:f4:34:
70:d9:a6:fa:ad:25:76:24:7b:51:02:28:c3:1e:7f:
17:ba:90:a3:b0:75:b0:69:50:6d:45:73:64:ad:fc:
f6:51:22:fc:12:71:c1:50:43:74:33:a2:78:68:c1:
35:a6:ca:e1:fc:2f:17:9f:05:b1:b4:9a:79:b9:ba:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:66:C2:23:E1:B5:C7:0C:91:E7:C0:16:CC:43:D5:B8:EE:71:DB:F8
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f4:53:e7:28:90:5e:68:30:e8:44:6f:f6:04:a6:b7:ce:60:
ac:2c:48:c6:41:44:33:02:4b:8a:dc:99:15:8a:1e:9b:e0:18:
c6:a9:f7:4e:08:9a:ed:d0:d1:ed:1f:eb:2b:40:7d:48:01:87:
3f:14:7b:06:fb:75:d4:ba:cb:70:1c:62:d4:07:18:10:0f:48:
7b:a4:18:56:41:37:d6:b0:39:2e:ba:98:77:6a:7d:27:1d:b3:
a2:88:88:b9:df:65:54:f6:2b:37:39:6a:7e:95:0e:80:15:29:
7d:98:16:e8:87:80:8e:4a:98:8d:51:ea:67:79:9e:b0:7d:41:
80:e2:6e:42:b6:91:bd:43:e0:41:bc:09:f5:a8:46:de:ff:15:
bd:bd:57:d4:0c:8c:63:a8:d3:7c:fa:03:b3:3f:be:e3:99:0e:
03:8c:0d:37:98:ba:32:13:7f:54:dd:05:d8:51:86:42:17:e1:
ac:f6:32:ed:04:31:ba:3d:4c:cb:4d:c5:80:00:7e:cd:f4:7c:
f9:ef:fc:d5:de:24:2c:52:a8:85:64:aa:81:b3:ed:08:03:16:
e5:5b:2d:50:79:3e:44:6d:1a:39:72:eb:fc:08:03:79:b3:16:
ce:5d:cf:ac:a7:a8:fa:41:09:99:cd:f0:5a:05:99:17:4c:02:
c6:fe:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 20:33:47 2024 by rpki-client on console-ams.rpki-client.org