Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e203231383539.roa
File: 352e38332e3232322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: RrrMc8IVZVTXn2Z9YJ07IJD3l6Iw+OWXCxAGhV3sXOo=
Subject key identifier: B5:D3:79:37:9F:A3:69:BA:7D:F2:0D:F4:46:95:0D:6A:8C:8A:A5:5F
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 3CAB2A5E2E8F715B3766F886C77797CC757090BC
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e203231383539.roa
Signing time: Tue 12 Mar 2024 08:47:07 +0000
ROA not before: Tue 12 Mar 2024 08:42:07 +0000
ROA not after: Tue 11 Mar 2025 08:47:07 +0000
asID: 21859
IP address blocks: 5.83.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 00:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ab:2a:5e:2e:8f:71:5b:37:66:f8:86:c7:77:97:cc:75:70:90:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Mar 12 08:42:07 2024 GMT
Not After : Mar 11 08:47:07 2025 GMT
Subject: CN=B5D379379FA369BA7DF20DF446950D6A8C8AA55F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:0f:aa:36:ca:09:8d:6d:ef:d0:0e:f9:8d:
4e:7a:c0:de:bb:21:8f:1f:d3:b1:f8:e7:8f:e8:7c:
87:c6:2c:87:b1:ae:e2:23:89:5c:cf:68:d2:73:1e:
9a:1f:47:7c:04:2a:27:de:08:24:7e:7b:a6:6a:e1:
bb:55:d4:54:5b:2c:e7:ba:50:9e:47:6f:20:4a:c8:
11:f9:f7:28:b1:1c:27:8b:42:16:0b:8f:2b:7e:cc:
33:1f:ca:14:53:f4:28:cc:e8:6f:3e:00:fd:0a:40:
81:1a:be:98:c6:84:dc:c8:44:9f:cd:95:83:df:94:
26:6e:22:aa:2d:83:e7:54:ca:13:27:93:bb:5c:ec:
34:2e:af:8c:ad:7b:82:3e:48:c2:6d:bd:0c:64:84:
e5:f4:2e:cf:6e:61:f1:b8:dd:bf:6a:04:ff:18:fc:
e2:48:38:4a:a9:94:cc:6a:ac:0f:26:c7:27:4d:49:
f8:41:11:6a:10:5f:88:30:c3:e5:19:65:7a:b2:1f:
07:6d:55:13:69:01:d4:3e:36:7f:61:3d:89:08:80:
26:7e:bf:10:bb:41:1e:94:47:46:4b:7b:71:60:e7:
d4:60:d6:d1:30:93:c5:1b:01:47:7f:99:e3:1f:b4:
31:c0:6d:18:a4:08:23:7f:46:0e:24:dc:07:fd:88:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:79:37:9F:A3:69:BA:7D:F2:0D:F4:46:95:0D:6A:8C:8A:A5:5F
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d8:2b:0e:23:8d:50:a9:1c:16:ae:5e:e1:6b:6c:20:1f:20:
aa:4d:41:1f:be:1f:66:06:27:0b:d4:79:da:c2:73:6c:16:71:
0f:da:d2:37:3a:35:dc:28:89:1e:0d:c4:86:35:33:6f:e6:1e:
82:90:4d:fc:e5:19:56:78:71:40:3d:12:6f:d2:46:3f:2d:bc:
58:39:eb:ba:1b:9e:dc:c1:24:0b:36:7a:81:78:f3:98:5a:e3:
01:97:db:5f:c1:bb:14:4d:6a:0a:3e:d0:10:43:f4:fd:02:b9:
24:97:bd:23:df:27:ca:03:bb:7f:e1:b3:cc:9a:5b:c1:2f:1e:
7d:9c:58:64:11:9a:63:f2:d2:70:c0:1e:a8:6e:df:55:2b:ad:
fe:a5:1d:34:be:65:47:ae:75:7b:75:fb:d9:2c:c7:1a:3b:49:
ab:02:0a:47:ef:b4:a3:37:39:37:ff:b7:fa:65:7a:51:a7:a7:
cf:d0:a1:1d:66:97:fe:a1:2f:bb:2f:00:dd:9f:1f:8f:c5:51:
b6:52:82:0a:9d:80:8f:0a:1e:05:44:f1:71:2c:40:19:ee:df:
0a:a8:cd:ab:e9:e4:29:fb:eb:8a:07:af:a3:ac:06:0f:7a:85:
fb:18:b6:42:2a:57:4c:65:b8:1c:0d:a7:98:3a:9c:3c:5a:53:
e5:3d:d4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org