Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32332d3234203d3e20383334.roa
File: 33372e3233302e36302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: QhzILS6c/nSatUXBH0e/0RCOpUw8fIiYqJUvYL58OaE=
Subject key identifier: F7:97:95:4C:1E:02:A7:D6:AA:4D:9C:89:5C:8F:19:97:8B:AB:E8:82
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 0719BABAF466B132EBD85C02E9E5270886815B50
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32332d3234203d3e20383334.roa
Signing time: Thu 04 Apr 2024 12:10:48 +0000
ROA not before: Thu 04 Apr 2024 12:05:48 +0000
ROA not after: Thu 03 Apr 2025 12:10:48 +0000
asID: 834
IP address blocks: 37.230.60.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 13:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:19:ba:ba:f4:66:b1:32:eb:d8:5c:02:e9:e5:27:08:86:81:5b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Apr 4 12:05:48 2024 GMT
Not After : Apr 3 12:10:48 2025 GMT
Subject: CN=F797954C1E02A7D6AA4D9C895C8F19978BABE882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:d6:8a:87:e8:1a:70:61:62:ce:34:b7:0b:
5d:07:aa:96:9f:e7:60:3c:85:7d:9d:50:af:66:01:
3f:35:14:eb:b2:59:89:79:37:49:bf:94:ab:6b:bd:
11:ee:6b:52:f0:f0:ec:fd:88:aa:27:39:85:cf:45:
b3:c2:2b:b2:08:63:0b:bf:51:e1:8f:1d:20:e4:fd:
d6:3e:1d:7a:db:22:29:5e:34:f3:4e:b8:3d:c6:b3:
a8:2d:2c:25:fd:11:cb:19:a6:0c:e5:2e:14:95:f0:
95:94:74:91:0f:0d:59:ea:4b:45:24:e1:ac:2c:8f:
dd:d4:1a:42:df:2e:69:02:73:08:f8:60:fc:25:f4:
eb:1a:ce:eb:18:b9:25:fb:6d:92:c1:b5:bb:19:f8:
0d:55:84:f9:dd:1e:ba:98:12:1d:b0:4f:f0:b7:13:
ee:d4:38:29:ca:4b:64:22:83:e5:e0:35:c2:50:e6:
64:bb:67:d6:be:8c:29:e5:5a:21:e8:8d:5e:5c:af:
73:9f:07:98:f9:59:e9:d1:ff:4e:7b:2b:d9:a7:74:
17:29:b6:54:66:4d:a6:73:c1:ed:e2:9b:30:af:94:
0c:20:14:00:1e:2f:39:0b:c7:b6:f3:d1:fe:56:b0:
f9:2d:21:1c:bb:8c:9d:f3:a2:f0:ce:a7:73:0b:90:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:97:95:4C:1E:02:A7:D6:AA:4D:9C:89:5C:8F:19:97:8B:AB:E8:82
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.60.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:e6:57:7b:2d:db:4b:ff:44:41:cf:60:95:b6:e7:7c:df:b8:
b6:05:c0:58:1e:bc:57:88:fd:6f:9d:da:ef:5b:08:49:37:21:
95:95:fb:56:20:a1:14:3a:d2:5d:b2:66:3b:ed:0a:fc:09:f4:
af:94:9f:fd:96:46:68:cc:f7:b3:5d:ef:12:9c:97:4c:38:02:
f4:9d:a4:1e:6e:81:f1:bb:c7:7e:05:09:b1:5d:52:32:fc:96:
77:07:ce:2b:72:34:11:05:a5:55:03:84:b3:75:a2:34:29:73:
2c:5e:43:d2:78:6b:e8:1d:f8:22:b3:5f:17:fa:22:5b:c9:e7:
79:2f:07:f6:1d:76:ee:26:56:fd:0e:59:69:b0:89:17:78:1a:
05:1f:66:1e:d3:6c:cb:8b:82:0d:20:2b:56:79:db:4b:c2:40:
20:ca:0e:6c:93:2b:45:3a:41:06:31:44:d0:39:05:e6:e8:28:
98:bb:e1:ab:82:4f:50:d9:71:f9:cd:ac:80:a1:cc:cb:9e:b4:
9d:01:36:5f:cb:8f:f7:02:02:de:a4:51:b7:7c:47:cb:51:60:
b4:a6:6c:cf:b6:e2:a4:69:17:6e:c7:12:e3:97:13:31:ea:11:
a1:cc:c4:d1:a5:3e:17:d5:c8:1e:c9:36:72:15:6c:c2:e1:f3:
de:a9:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 17:36:05 2024 by rpki-client on console.sobornost.net