Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139342e302f32332d3234203d3e20323135353339.roa
File: 37372e37352e3139342e302f32332d3234203d3e20323135353339.roa (raw, json)
Hash identifier: /bP2pdS4zqGqvlPn4Grk68jaQ2lY8gPjFihdP8+TXPs=
Subject key identifier: 57:5A:FC:A0:99:9C:D8:27:C2:6A:5D:E3:78:CA:9E:BB:F8:41:BC:77
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 7EDC741D289C32578B0BB85811DE14CC894A0A44
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139342e302f32332d3234203d3e20323135353339.roa
Signing time: Tue 20 Feb 2024 08:11:30 +0000
ROA not before: Tue 20 Feb 2024 08:06:30 +0000
ROA not after: Tue 18 Feb 2025 08:11:30 +0000
asID: 215539
IP address blocks: 77.75.194.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 00:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:dc:74:1d:28:9c:32:57:8b:0b:b8:58:11:de:14:cc:89:4a:0a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 20 08:06:30 2024 GMT
Not After : Feb 18 08:11:30 2025 GMT
Subject: CN=575AFCA0999CD827C26A5DE378CA9EBBF841BC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:fd:3e:61:1c:5c:8c:94:4b:92:3e:7f:67:
db:05:9b:74:03:60:98:69:ba:38:76:c9:0d:40:97:
d2:c7:13:57:36:27:a1:1b:f7:f5:65:bd:5c:83:bf:
ef:91:d6:7c:f8:00:5e:cb:c6:bc:b8:61:ef:d6:95:
0f:ad:7b:40:b1:f3:6b:c9:c4:ac:d8:03:86:13:f3:
0d:e5:1f:b6:3d:2e:cb:81:71:43:c7:9b:5a:de:a1:
c5:7b:96:c0:c1:27:b3:d2:2b:55:d6:ee:5d:84:e4:
9f:e3:f3:35:78:e4:2c:df:59:b0:06:33:3f:92:70:
1e:2e:02:62:de:11:21:56:08:3f:98:c7:e6:17:1b:
21:a8:d1:6b:05:79:50:1b:8a:8f:88:59:8b:7b:61:
2a:d2:e7:08:ca:10:a2:bd:35:54:ad:f1:a1:f9:8b:
0a:d3:cf:24:47:b4:e9:69:f7:13:1f:1c:40:03:24:
b8:26:65:e4:2f:cb:0a:15:73:4d:77:c6:c6:b5:5f:
44:94:6f:0c:f1:99:c1:a1:66:6f:68:a8:48:dc:fb:
27:a8:5a:5a:73:14:30:fe:e8:ac:28:41:26:f4:39:
1d:a2:e0:83:f7:1f:af:3c:ad:76:92:dc:5a:b5:49:
b7:11:92:85:19:40:0a:bb:d7:fe:0f:93:3b:0b:9f:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5A:FC:A0:99:9C:D8:27:C2:6A:5D:E3:78:CA:9E:BB:F8:41:BC:77
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139342e302f32332d3234203d3e20323135353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.194.0/23
Signature Algorithm: sha256WithRSAEncryption
37:70:39:5c:5a:9c:b7:cc:6e:be:ea:8e:aa:1e:4c:17:af:82:
8f:65:31:db:21:98:3c:b5:d0:e3:47:f2:5b:29:e8:82:8f:a5:
29:02:04:c3:2a:1a:dd:89:8d:9a:ae:7b:2e:5d:7a:8d:62:39:
00:29:05:2c:86:3b:c5:13:10:8c:6c:96:b7:25:71:52:23:c2:
42:d4:7f:24:e4:aa:1e:72:90:42:62:7a:47:5a:36:ee:45:b1:
13:59:dc:15:0b:83:bd:df:45:d6:7c:6e:5e:7a:a1:46:28:7d:
9d:3b:09:04:75:31:b2:71:ce:1c:40:6f:36:46:96:82:e0:df:
0f:32:61:bd:3e:2f:34:d6:8c:79:a5:3a:e2:7c:8c:74:5a:64:
85:41:22:7f:49:55:43:df:7d:a0:af:6a:91:95:c9:68:fe:16:
4a:10:95:cf:0e:1a:b3:d9:d5:b3:36:43:77:64:fa:ed:0e:9d:
91:94:80:fd:40:c8:f9:e5:73:d4:2b:e2:68:98:87:3c:0c:7e:
ab:0c:d8:3a:54:c3:4c:7c:a9:dd:60:dc:91:0e:bd:92:93:5d:
6b:89:1a:b2:63:d4:a4:45:c3:8f:3b:c1:68:b7:fd:95:1e:5e:
e5:bd:e2:03:bd:e9:9f:55:95:28:4b:11:61:14:80:43:c0:20:
39:03:3f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:29 2025 by rpki-client