Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: jLa2Bdr/qSVlmQfdRJf1vmL7Q806zEYQfWgfR3olyRI=
Subject key identifier: 4E:71:0B:43:45:2E:F9:75:A6:11:36:76:6B:B1:27:FD:C5:0B:09:AA
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 5872C471487059B18F2D7C6930F148E120A857F0
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393942.roa
Signing time: Fri 11 Apr 2025 10:06:11 +0000
ROA not before: Fri 11 Apr 2025 10:01:11 +0000
ROA not after: Fri 10 Apr 2026 10:06:11 +0000
asID: 393942
IP address blocks: 86.38.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 May 2025 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:72:c4:71:48:70:59:b1:8f:2d:7c:69:30:f1:48:e1:20:a8:57:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Apr 11 10:01:11 2025 GMT
Not After : Apr 10 10:06:11 2026 GMT
Subject: CN=4E710B43452EF975A61136766BB127FDC50B09AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:4b:fa:8f:ed:72:b7:f5:89:17:0a:87:eb:
cb:c9:c7:5b:7f:7c:cc:84:7a:b3:06:03:a6:27:18:
1d:1a:f8:cf:33:62:2b:f7:fd:89:2c:ed:1b:23:04:
00:00:28:d0:fe:27:62:27:5c:28:fa:f5:f7:68:7a:
73:0b:4e:33:56:aa:c9:d5:9f:7f:24:d0:cb:31:45:
00:5b:21:3f:2e:4a:b3:b9:44:f2:2e:b4:86:e9:11:
01:80:32:70:03:54:85:fc:98:c7:63:0f:ed:af:ba:
54:da:92:49:40:9f:0e:23:46:fe:4e:70:de:51:84:
ed:d4:01:4a:8a:12:3c:f0:8c:54:43:99:e6:4b:9e:
d0:8f:86:9e:be:66:5b:ef:23:d8:bb:eb:c9:7f:fa:
4c:27:25:d0:e1:19:87:29:86:e5:73:b7:cd:35:70:
a9:b3:a7:67:95:de:3e:ba:2b:4d:24:89:6a:71:cb:
b5:11:36:70:b0:2c:10:13:f2:c3:10:56:22:ec:4a:
39:be:f5:5e:dd:7c:7b:e0:79:dc:e3:88:12:c8:ea:
8c:d3:9a:a1:e9:c5:c1:6b:2f:39:7a:ba:2c:67:da:
f5:13:09:1f:22:9f:2b:8a:5c:bf:ff:a6:08:ce:a8:
2c:41:a5:d1:ac:cc:2d:7e:10:fe:81:02:35:64:fa:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:71:0B:43:45:2E:F9:75:A6:11:36:76:6B:B1:27:FD:C5:0B:09:AA
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.184.0/24
Signature Algorithm: sha256WithRSAEncryption
26:bc:31:d1:3c:b5:96:89:4c:cb:fe:9e:ee:45:f2:9c:54:a7:
d6:15:bd:3e:1e:c7:68:8a:40:0b:57:ce:ee:6b:9f:62:85:10:
04:3a:08:1d:b6:e0:72:78:53:1a:aa:ae:13:cb:29:7e:e6:4e:
d6:8f:96:31:01:ee:26:69:27:6a:87:81:26:d7:34:83:48:79:
4a:49:c3:cf:3e:ed:35:ae:c4:36:ba:47:b3:af:b7:2a:53:1c:
3e:95:d1:a1:ca:af:c8:b0:ed:b8:1e:f1:9c:66:14:c1:b2:f3:
43:21:ea:43:2a:8c:1d:a6:66:02:6d:42:01:cc:74:99:ec:20:
aa:d5:da:1c:5d:12:55:2b:45:9a:b8:8f:68:5f:a8:6c:04:34:
32:fb:cb:a4:4d:3e:22:42:fb:5c:1f:8b:65:59:8b:07:6e:83:
a6:0b:b1:a0:a2:fc:79:5f:12:25:15:56:cd:af:67:5e:47:4b:
eb:9e:c0:af:6b:0c:a4:9f:89:64:8b:28:b7:93:65:31:03:29:
2a:15:39:fd:f6:fa:bb:f1:7f:34:ce:56:d3:37:53:d7:da:54:
90:7d:03:dc:4b:55:3c:b1:dd:51:ea:3f:f1:80:75:f9:10:75:
19:bb:cd:6f:cb:e1:4e:bf:90:c8:8d:b8:21:f9:17:e2:00:53:
69:9e:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:06:40 2025 by rpki-client