Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323136343235.roa
File: 352e38332e3232312e302f32342d3234203d3e20323136343235.roa (raw, json)
Hash identifier: +C8xiedfFoMUJcHFh9DAd277TvZtzWT0exVBe+TvZVc=
Subject key identifier: FF:07:E6:E1:D1:82:7A:9F:48:BB:C2:94:40:8A:7E:BA:60:AF:7F:76
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: F809A4F7B4A6D33F01211DBCCA80DB0644A34A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323136343235.roa
Signing time: Sun 14 Apr 2024 07:04:26 +0000
ROA not before: Sun 14 Apr 2024 06:59:26 +0000
ROA not after: Sun 13 Apr 2025 07:04:26 +0000
asID: 216425
IP address blocks: 5.83.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f8:09:a4:f7:b4:a6:d3:3f:01:21:1d:bc:ca:80:db:06:44:a3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Apr 14 06:59:26 2024 GMT
Not After : Apr 13 07:04:26 2025 GMT
Subject: CN=FF07E6E1D1827A9F48BBC294408A7EBA60AF7F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:89:f6:31:f5:b8:b4:19:4f:88:58:a7:10:
b7:66:40:0d:0c:76:b1:55:74:c9:f5:2f:6d:38:09:
62:f4:7e:de:92:eb:c1:84:21:8a:13:cd:e0:2a:c1:
42:96:dd:9a:86:d3:3e:bd:e7:4f:3f:43:86:6d:d2:
f9:b0:28:99:a0:f9:dc:29:75:12:28:df:39:bc:e3:
5d:09:5c:10:4b:c7:4e:e3:0d:b1:11:f2:87:d2:a7:
48:63:50:86:95:2d:8f:17:f7:c4:cf:6f:a6:a4:3a:
62:20:7b:00:8e:de:6d:9e:b5:7e:01:ea:c9:94:53:
b6:0d:c1:67:36:b9:43:e1:22:ca:ee:99:05:20:40:
78:7b:01:98:59:65:d1:b0:80:c7:a4:78:13:86:40:
9a:5a:29:07:dc:78:7b:8e:14:52:eb:70:1e:be:3a:
11:0c:d4:74:7d:2e:47:c8:a0:be:8f:e5:b4:63:77:
40:b1:da:f4:1f:50:a4:e5:c3:68:7a:59:1e:3e:95:
6e:b7:6f:1a:25:f2:19:4b:00:59:f4:a1:f5:00:8b:
33:af:20:e9:0e:d3:f4:cf:0b:3e:1a:1e:67:54:af:
08:cf:ef:14:92:ee:1c:c4:c2:80:bc:0f:6b:bc:1e:
f3:54:2e:8b:c0:3f:58:c4:7e:b3:3b:db:16:ac:97:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:07:E6:E1:D1:82:7A:9F:48:BB:C2:94:40:8A:7E:BA:60:AF:7F:76
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323136343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.221.0/24
Signature Algorithm: sha256WithRSAEncryption
60:80:2b:74:a7:ab:8b:19:ea:d0:9d:82:b3:e1:9e:17:90:86:
b0:fd:a7:c7:63:84:32:13:6f:1f:0f:4c:64:33:a7:3a:b9:4b:
c3:2e:25:8f:4d:db:4e:51:b2:09:bc:f2:ed:b3:d5:e7:fa:e0:
f0:09:cd:45:cd:bb:d6:db:41:b8:ae:b8:67:9a:c7:25:66:70:
59:77:74:98:7d:8a:a8:e6:54:a2:ca:a1:45:b5:48:35:c5:a2:
1b:10:0e:ff:51:83:91:b6:9e:6f:c6:2b:1e:7f:cd:8e:5f:40:
0f:da:34:c3:49:0c:96:b2:32:48:a5:aa:ac:cb:4d:69:84:88:
f2:fc:30:aa:e8:98:ec:26:04:35:39:4d:31:01:15:c4:7b:0d:
6c:de:0d:6b:d9:fb:22:e3:aa:89:ac:31:ba:3f:6b:9d:4c:96:
bf:c3:f8:71:3c:c6:dc:ac:4b:3c:03:94:c4:3d:f5:24:c0:2e:
ee:31:f9:e3:a8:ad:c5:ba:1e:ea:78:35:af:3e:4b:ba:0b:80:
67:81:8f:34:4c:ce:f3:6f:d3:37:05:84:d5:2a:35:6f:69:1e:
f0:a3:a9:28:10:fd:01:b6:b5:cb:ae:33:d6:cd:9c:42:af:7a:
f6:6b:9c:44:71:a3:77:f3:76:32:31:3b:13:03:8e:31:c8:d2:
b5:96:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 13:15:03 2024 by rpki-client on console-ams.rpki-client.org