Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32332d3234203d3e20383334.roa
File: 37372e37352e3139322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: XpRMKDb6yvBPkzSJ4rz/UwHIM5PbP4+cUKJYV0kM64o=
Subject key identifier: 73:BA:A1:3E:12:A7:6F:E1:74:66:BF:5C:52:B7:A6:7B:F2:89:91:09
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 750217BB844794A5B7C6FF3AA95191002FA8A5CF
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32332d3234203d3e20383334.roa
Signing time: Tue 20 Feb 2024 08:11:33 +0000
ROA not before: Tue 20 Feb 2024 08:06:33 +0000
ROA not after: Tue 18 Feb 2025 08:11:33 +0000
asID: 834
IP address blocks: 77.75.192.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 14:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:02:17:bb:84:47:94:a5:b7:c6:ff:3a:a9:51:91:00:2f:a8:a5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 20 08:06:33 2024 GMT
Not After : Feb 18 08:11:33 2025 GMT
Subject: CN=73BAA13E12A76FE17466BF5C52B7A67BF2899109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:31:c5:23:27:52:6b:ea:28:e0:90:dc:52:9d:
8e:1e:19:82:1d:28:76:3f:5b:a8:dc:37:bb:29:89:
26:3d:28:f8:48:99:c5:c6:fe:bd:c4:af:e4:f3:47:
82:01:b5:56:c3:0b:77:a3:e6:d5:04:84:c4:b5:03:
4e:f3:59:9e:aa:f9:95:32:ee:80:84:23:92:e6:14:
cf:56:80:72:f7:27:fb:2e:8f:d4:3c:9f:ce:9c:a0:
cc:36:44:17:24:c5:83:79:44:e0:a0:20:57:8b:60:
03:b4:ac:64:8f:f7:bd:00:83:d9:d9:03:ff:6e:89:
f2:49:4e:0a:a0:a1:aa:45:e7:f1:31:22:db:f7:b4:
3c:55:65:6d:8a:f7:5d:ef:83:b8:79:39:e7:99:92:
fa:44:a7:66:41:c8:7e:c7:d4:44:af:7c:6e:2c:b2:
bd:52:25:8c:56:63:10:b5:d2:ef:65:26:c7:d5:21:
ea:fa:6a:b5:56:f3:13:79:1a:86:77:b7:21:a3:1c:
01:d0:93:98:03:1b:c0:a0:70:60:f1:45:e2:8f:7f:
d3:57:d7:ad:ba:12:79:4b:3f:09:85:42:1a:1c:52:
02:c5:5c:ed:df:3f:76:f2:77:25:12:43:63:67:83:
1b:c6:25:3a:11:27:ea:42:42:a7:7b:f7:b1:68:f6:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BA:A1:3E:12:A7:6F:E1:74:66:BF:5C:52:B7:A6:7B:F2:89:91:09
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.192.0/23
Signature Algorithm: sha256WithRSAEncryption
41:74:f9:4f:5b:91:a5:3a:29:b6:c8:29:c2:35:ba:c0:2a:95:
a5:c3:9b:17:66:47:a3:16:35:34:88:25:2c:13:b0:91:ce:31:
87:68:9c:75:d2:0a:b4:b8:17:66:cf:36:c8:bc:c6:ac:7f:bd:
67:20:18:ca:b5:de:ae:8e:8c:2f:45:4a:64:f6:4a:4e:d0:0d:
7a:a3:81:10:26:db:bb:ac:33:ff:47:59:5f:48:db:04:82:4b:
1c:92:ca:cc:b0:13:e2:82:9d:ca:89:79:b1:21:75:b1:25:53:
7e:53:8d:d5:9c:68:35:db:f3:ab:9d:91:9d:3f:db:a5:b2:54:
db:89:19:90:12:4e:da:df:88:8b:fd:8a:51:05:35:29:8e:e7:
ac:62:1e:fc:1a:79:cc:be:db:e8:79:ba:1d:22:68:a6:7f:d1:
64:00:b3:c8:21:65:b7:b8:d4:99:e1:ad:86:08:ca:b9:2f:47:
8a:79:88:7f:b0:3f:a7:a9:cf:0f:a0:6c:1b:ea:68:86:0d:4f:
d9:8d:d3:df:bd:16:f0:1b:de:ac:ac:87:0c:ee:4c:94:a2:ad:
70:d9:68:25:91:8f:26:4f:e0:83:09:61:69:2d:69:00:4c:75:
8e:ec:67:e1:fd:b5:e7:50:2e:0b:57:50:e9:19:14:b5:ac:2d:
b9:f0:f5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 18:07:32 2024 by rpki-client on console-ams.rpki-client.org