Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323135333433.roa
File: 352e38332e3232312e302f32342d3234203d3e20323135333433.roa (raw, json)
Hash identifier: aBCTR6pjTInvucQs31dNR8gaoZdsaGPJ+IcTIqv1vtg=
Subject key identifier: AF:5F:67:1B:1F:35:D1:97:91:DD:22:75:BC:E7:96:A5:E0:E3:AA:39
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 10E196ECDBC79FC1483870182BBDC3ECC8BC43DC
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323135333433.roa
Signing time: Thu 14 Mar 2024 03:49:05 +0000
ROA not before: Thu 14 Mar 2024 03:44:05 +0000
ROA not after: Thu 13 Mar 2025 03:49:05 +0000
asID: 215343
IP address blocks: 5.83.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e1:96:ec:db:c7:9f:c1:48:38:70:18:2b:bd:c3:ec:c8:bc:43:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Mar 14 03:44:05 2024 GMT
Not After : Mar 13 03:49:05 2025 GMT
Subject: CN=AF5F671B1F35D19791DD2275BCE796A5E0E3AA39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:ae:a9:1d:f2:88:20:a1:c8:78:98:a3:13:
74:0a:12:c1:ac:dc:29:f3:23:05:ea:bd:61:41:5c:
23:81:92:31:50:da:60:64:fd:86:4e:01:44:f4:58:
c9:1e:79:24:6f:02:02:93:2b:0b:d0:a4:04:19:66:
b5:54:f4:05:80:fa:d0:5e:08:80:d5:a3:3e:d6:81:
3e:ed:18:51:fa:e1:a0:33:4b:f0:2b:d6:e7:01:22:
52:a0:8e:20:1c:02:dd:53:cf:49:c8:db:95:6f:57:
dd:60:53:9f:0b:16:e4:b8:d0:75:29:14:a5:a1:e1:
00:64:a3:14:28:9e:6d:eb:7d:9a:02:19:e1:82:5e:
68:74:8e:ef:f9:a6:7b:9c:ba:69:3f:a8:47:84:02:
14:e6:01:ef:7b:1a:20:10:4a:bb:48:4b:fd:a2:b4:
ed:c5:55:b2:6f:c3:8f:7f:4c:8d:69:fc:95:3e:16:
45:70:a2:4d:d4:5f:88:8c:7c:b8:d5:75:0e:bc:b6:
0e:b1:f9:1f:b3:42:f6:84:ed:a5:10:fb:ee:46:f0:
65:26:a8:f3:10:c0:62:d4:8b:67:62:25:1a:37:c9:
c4:89:d6:59:aa:8b:36:80:27:8c:e3:74:46:0e:41:
f8:aa:4c:fe:39:16:51:62:88:fb:48:43:b7:26:a9:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5F:67:1B:1F:35:D1:97:91:DD:22:75:BC:E7:96:A5:E0:E3:AA:39
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323135333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:07:d4:e7:ad:f0:c8:21:ca:b1:f1:5f:39:6f:07:79:e5:1b:
79:1c:3e:74:4c:ad:b4:56:40:0a:e5:06:c5:a5:c7:22:59:27:
26:aa:25:70:d5:dc:ec:35:65:cc:55:8c:15:04:31:5b:40:88:
e8:7e:24:48:38:35:d6:38:5c:34:58:82:19:3a:be:c9:7c:7d:
e8:5e:32:84:f1:d0:61:6c:e5:5e:c1:65:3a:72:00:87:da:33:
68:82:bc:7c:c2:b8:3a:da:d5:15:96:6f:3c:0a:10:99:63:7c:
58:0e:86:9c:2d:6a:75:5d:94:2e:3a:24:7e:f4:47:d3:44:6f:
64:2e:f0:dc:6b:f6:4e:3a:25:59:67:3e:7d:32:70:9a:5b:7f:
a2:c8:24:bb:4d:59:e6:ff:3f:75:63:3c:45:90:8b:bc:c0:14:
19:fa:e3:c4:54:6c:af:6c:06:95:b5:0a:88:07:f2:41:f5:53:
70:9a:db:95:63:02:3e:1d:71:63:ef:94:0f:67:fa:5b:13:41:
1b:23:00:8f:44:45:7d:3a:33:88:95:7a:48:41:e7:1e:a8:64:
95:56:8e:95:25:3f:33:c3:a6:81:9e:55:a6:93:a9:aa:d7:8b:
18:ee:7c:89:ad:2a:19:3c:65:1d:dd:57:6d:e2:18:2a:4e:72:
a9:fe:84:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org