Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e203532303431.roa
File: 37372e37352e3139332e302f32342d3234203d3e203532303431.roa (raw, json)
Hash identifier: ax1w0NJSfF6NCslRIP8isc/3IReJ7yJYnJliBDwKCXk=
Subject key identifier: 32:8D:E4:36:D5:F4:7E:B2:48:39:79:EA:A4:4F:D3:48:73:AF:F0:BE
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 1B4B8C2DD1D58E2D1B153C94E0C1C31602CA6167
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e203532303431.roa
Signing time: Thu 29 Feb 2024 20:44:54 +0000
ROA not before: Thu 29 Feb 2024 20:39:54 +0000
ROA not after: Thu 27 Feb 2025 20:44:54 +0000
asID: 52041
IP address blocks: 77.75.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4b:8c:2d:d1:d5:8e:2d:1b:15:3c:94:e0:c1:c3:16:02:ca:61:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 29 20:39:54 2024 GMT
Not After : Feb 27 20:44:54 2025 GMT
Subject: CN=328DE436D5F47EB2483979EAA44FD34873AFF0BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:f7:4d:08:dc:5a:19:bd:31:a7:78:e8:af:
33:49:6d:97:d8:7a:d8:91:b0:49:24:d4:ff:15:30:
1d:bd:4f:49:c9:e2:c0:8a:e2:fe:20:b5:94:6a:a7:
f3:71:2c:df:dc:b9:12:3d:c2:42:e6:4b:bc:67:30:
2d:9a:b3:9c:c8:4f:a0:41:73:1e:03:53:7c:29:24:
60:94:6d:3b:b6:69:0f:2d:dd:85:7a:63:67:65:0b:
ac:6a:e4:cb:a7:1b:77:e2:0e:75:13:ae:f4:bb:04:
b2:3c:6c:ea:c8:52:01:1b:2e:c9:e8:85:88:b4:6c:
b2:f3:2e:f7:62:ac:39:76:41:16:db:bd:f8:bc:eb:
08:ab:e2:9d:45:2c:b9:32:f2:88:aa:b7:6d:56:24:
3d:17:fb:d6:e8:67:c8:cb:42:58:7c:3c:f3:70:a8:
d4:35:41:b6:47:8f:1b:7e:73:d1:76:c2:f6:ec:63:
55:e9:5f:31:f9:3c:b2:8c:91:32:9d:41:8f:08:dd:
75:07:7a:d2:89:dc:bd:57:fe:b4:d5:d7:52:28:ce:
3d:f1:47:ba:ac:77:6f:df:23:15:52:5e:22:09:1f:
53:a3:23:9b:94:38:3d:23:29:aa:26:f1:25:9b:d6:
52:7d:99:f2:ac:03:b9:8e:e0:c2:f0:b6:62:24:e0:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8D:E4:36:D5:F4:7E:B2:48:39:79:EA:A4:4F:D3:48:73:AF:F0:BE
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e203532303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.193.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b5:d1:45:32:b7:64:2d:7b:59:d0:8c:f1:5c:a7:14:3f:a6:
c4:cf:dd:cd:cb:d5:e1:57:ab:b3:ed:b7:16:76:65:f6:85:4f:
49:95:3a:cf:97:c2:ab:0b:bf:ea:26:1a:a7:ac:13:b2:27:e9:
a0:e8:8e:6b:0f:43:29:fb:ab:e8:f0:f1:a7:36:44:c2:6f:98:
dd:51:1f:e3:e7:00:16:55:b7:aa:e1:28:4a:13:96:38:a5:08:
43:82:12:2d:c6:d1:90:36:c1:9d:89:81:a3:74:e5:8c:c1:3f:
3b:85:1f:91:db:39:b3:92:d7:12:8e:63:f4:83:eb:7e:79:83:
c6:50:d2:21:b2:e1:67:13:e1:42:0a:55:00:3d:1a:1c:f3:8f:
e0:07:15:38:d1:97:fe:7b:74:12:f0:d8:7f:27:df:33:67:94:
2b:6d:ec:ba:27:08:49:80:6b:c1:27:18:d5:71:76:2a:a2:e3:
9c:30:10:a6:eb:a5:ff:d9:48:37:3e:53:be:6b:a3:1a:31:1f:
87:5b:20:8d:ba:41:84:00:81:76:6e:7b:d3:92:fb:d3:a9:d2:
95:ef:84:11:df:37:7a:d6:d9:6a:f7:e8:83:38:76:a0:d4:ce:
8c:43:e8:1d:95:90:a5:10:81:dc:b5:26:67:4f:6a:bf:c3:7f:
16:dd:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org