Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20383334.roa
File: 352e38332e3231392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: o7vJMWcqBkl6vZ2JmjvQkDWdDTjyGJs6cDuBWnPmsQ8=
Subject key identifier: B3:A5:6C:DE:E8:B9:43:67:94:5E:B6:B6:51:16:63:44:D8:ED:BD:17
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 1A0E7E24575463EC9F81D6689931148DAF199DFE
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20383334.roa
Signing time: Tue 27 Feb 2024 18:11:28 +0000
ROA not before: Tue 27 Feb 2024 18:06:28 +0000
ROA not after: Tue 25 Feb 2025 18:11:28 +0000
asID: 834
IP address blocks: 5.83.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 20:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:0e:7e:24:57:54:63:ec:9f:81:d6:68:99:31:14:8d:af:19:9d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 27 18:06:28 2024 GMT
Not After : Feb 25 18:11:28 2025 GMT
Subject: CN=B3A56CDEE8B94367945EB6B651166344D8EDBD17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:64:13:44:b5:33:bf:59:ca:e6:b0:db:a3:
37:6e:90:80:5c:79:16:d2:46:81:ca:c8:00:9b:90:
de:8e:99:c6:98:57:cd:a3:37:11:da:e0:93:c5:98:
cd:37:44:4b:b0:7d:eb:67:a0:61:93:50:68:b6:03:
c9:ef:5d:95:42:18:7b:f6:26:26:b3:e7:ae:e9:a6:
2e:c9:f5:11:fb:0b:6a:12:cf:ce:5e:47:bf:66:a9:
a1:0f:29:88:4c:05:18:45:8d:e6:4a:44:10:61:37:
b9:ad:98:e6:15:17:64:ba:49:0e:bc:93:03:2b:da:
44:13:0b:c1:f3:02:73:28:c2:b9:54:81:0f:c5:a9:
6d:0c:ff:cc:c1:05:fb:41:2f:40:c5:e9:55:77:45:
da:8d:d0:2c:df:97:68:68:3d:7b:03:80:ce:af:13:
b9:14:78:5a:8d:95:44:41:b8:ba:e1:60:80:8a:e9:
e1:04:e4:60:0f:ae:f8:07:d2:34:f6:38:ef:75:36:
a1:21:cc:b0:08:4e:2e:47:ca:83:5f:4b:f1:71:ab:
e2:eb:c8:b5:b6:e8:cd:a4:29:e3:83:38:25:1d:25:
aa:39:85:e6:27:17:51:84:d0:2f:fa:f6:55:88:d2:
7f:ce:33:42:46:81:41:2a:dc:e5:93:bb:ae:db:22:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:6C:DE:E8:B9:43:67:94:5E:B6:B6:51:16:63:44:D8:ED:BD:17
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:42:2e:7b:f2:d1:a5:80:e8:66:5f:77:04:cf:1e:41:8f:7f:
03:ec:36:82:45:58:1c:39:d2:2a:72:7e:5b:85:c9:5e:cf:20:
a4:02:89:52:e2:f0:05:39:dd:67:db:0f:6f:d4:18:bd:cf:62:
c7:4d:68:11:4f:1b:6b:58:8c:84:14:af:be:03:91:8b:4f:33:
bc:73:dd:6e:f4:9e:aa:d5:26:9d:a2:98:1b:c9:54:5d:a8:fe:
7e:a9:58:ed:f1:2d:94:73:7a:56:17:33:fe:2d:34:0d:cc:c9:
f8:c4:3c:66:30:64:20:82:2b:6c:6f:0c:82:6e:d9:fa:e1:f3:
94:3e:ff:59:03:1f:19:79:5c:dc:55:38:d1:da:5a:8e:7c:7a:
24:b2:ad:35:ce:b1:e6:53:36:6b:46:43:a5:4d:72:8a:0d:0e:
29:17:46:9e:cb:d5:6a:e0:4a:0d:5e:dd:33:98:7b:0d:14:21:
c9:91:ff:a5:a2:0d:4a:b6:66:17:0e:60:ab:a8:46:d4:4e:15:
f7:1c:14:7d:ff:ae:dc:4b:0b:e9:83:4d:c0:95:5d:b0:24:ed:
de:ff:ac:99:e2:e3:5a:c2:37:0f:ae:07:c4:53:c0:4c:c2:03:
4e:6f:12:a1:c9:2d:55:44:ed:c5:f2:13:27:06:45:bf:6f:b2:
9f:73:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org