Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139392e302f32342d3234203d3e20383334.roa
File: 37372e37352e3139392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: rwwtD1a+GFsS+Wz91xED1cDhqUyDF9DQdfGGAhMkm4s=
Subject key identifier: 2C:E4:55:B9:50:C2:33:FD:97:CB:C0:EA:1E:04:0E:54:81:3D:7B:4B
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 674C18795D2D58C8E9C70451E9478E1B6C400B35
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139392e302f32342d3234203d3e20383334.roa
Signing time: Tue 12 Nov 2024 10:55:58 +0000
ROA not before: Tue 12 Nov 2024 10:50:58 +0000
ROA not after: Tue 11 Nov 2025 10:55:58 +0000
asID: 834
IP address blocks: 77.75.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 12:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4c:18:79:5d:2d:58:c8:e9:c7:04:51:e9:47:8e:1b:6c:40:0b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 12 10:50:58 2024 GMT
Not After : Nov 11 10:55:58 2025 GMT
Subject: CN=2CE455B950C233FD97CBC0EA1E040E54813D7B4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:62:bc:99:7a:a2:af:61:bf:12:a2:85:96:
8a:fd:58:e1:1c:aa:24:da:f7:23:2a:ab:7a:27:d6:
34:d2:40:b9:dc:bc:45:f3:7b:31:55:31:1a:c0:c4:
21:56:72:dc:84:bf:64:ae:a9:6a:e4:95:f2:d2:57:
c0:31:0f:59:ca:c0:31:c8:b0:9b:20:91:7b:13:6a:
3b:df:3a:f8:ba:89:82:d0:98:e3:61:36:a2:d6:ec:
e3:54:2a:20:d1:8d:bd:87:a5:d9:c9:d3:a4:d1:88:
35:e5:ee:b8:98:45:38:8d:c6:09:da:55:be:8a:a8:
a6:73:1b:42:c2:25:b1:d0:cb:82:44:7a:0d:0e:66:
bb:1d:0c:c4:7c:a4:94:b4:46:63:36:14:b7:12:db:
3b:1c:3c:07:c4:a7:87:e8:47:23:9c:d1:ca:13:2d:
dc:6e:59:13:16:36:7c:5d:20:ab:25:5f:10:43:87:
8a:ea:03:c8:0f:14:fb:eb:d7:41:fb:2c:bb:aa:34:
8f:b2:30:5d:74:3d:25:d0:8e:ab:aa:a6:14:17:d1:
11:32:47:63:11:47:07:74:a1:91:ac:91:77:b1:7e:
f8:cb:f1:6d:d4:1e:b2:cc:f2:7d:15:30:ad:2a:a5:
35:6d:7e:fd:4b:33:c9:fa:b6:f3:0d:cf:fd:7f:f7:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:55:B9:50:C2:33:FD:97:CB:C0:EA:1E:04:0E:54:81:3D:7B:4B
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a7:88:6a:c6:4a:5e:70:18:23:fc:b9:0a:e5:65:89:eb:e8:
be:84:5d:6a:a0:54:23:32:66:e2:e7:9f:4b:bc:09:1e:49:84:
d0:77:77:72:b5:3d:e9:d7:c6:0c:b6:a0:d1:64:17:9a:10:3d:
a1:96:a4:11:b4:e2:38:fe:79:f7:42:1c:90:dc:86:61:5e:d7:
7e:3f:71:a4:f5:5b:11:dd:0e:fa:0e:11:8d:64:f6:66:f1:b6:
a2:bf:b2:21:62:44:1a:18:7d:fc:7c:ef:9f:ba:18:37:84:e7:
fe:23:90:54:0d:26:9d:8a:2e:06:b8:2b:27:0a:27:0a:75:07:
31:ff:4a:c7:68:97:14:1e:0e:9b:f7:9b:df:a4:51:35:49:03:
05:d1:e8:86:57:29:7b:1f:35:95:da:cf:48:ac:54:3f:0d:49:
c6:b9:56:ab:2a:b2:b2:a1:d8:5c:b8:1c:77:e1:0f:6f:a5:06:
dc:03:c7:e4:92:eb:7b:ed:11:91:81:18:d0:77:1a:de:6a:47:
0c:26:9f:ad:33:29:9e:56:e5:f7:9d:c2:47:c7:e5:73:57:25:
82:52:bf:dc:20:cd:e1:09:5b:10:bc:7d:db:f1:77:7e:c1:41:
ad:e7:10:e8:e2:47:de:57:26:3a:4b:f3:dc:02:d9:61:fb:a9:
63:2b:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:26 2024 by rpki-client on console-fra.rpki-client.org