Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa
File: 33372e3233302e36322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 70rYM6bbszIuRgjJ9e+EboVLCE1IrDgUYVWnmIzMw6Y=
Subject key identifier: 84:42:B2:7F:C8:1F:B7:68:04:11:B6:84:F5:AA:0D:A1:82:32:5E:A8
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 2057551F27AC21AF2BE5ED070425F7E7E56B1532
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa
Signing time: Sun 04 May 2025 11:19:17 +0000
ROA not before: Sun 04 May 2025 11:14:17 +0000
ROA not after: Sun 03 May 2026 11:19:17 +0000
asID: 834
IP address blocks: 37.230.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 07:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:57:55:1f:27:ac:21:af:2b:e5:ed:07:04:25:f7:e7:e5:6b:15:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: May 4 11:14:17 2025 GMT
Not After : May 3 11:19:17 2026 GMT
Subject: CN=8442B27FC81FB7680411B684F5AA0DA182325EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:13:fb:8b:b6:20:15:5a:1a:1b:d2:7e:8a:
a0:89:52:bf:7c:53:cc:a4:70:12:ff:ea:db:f8:39:
8d:99:c1:4a:1c:c9:ec:14:c8:d8:8a:6e:7b:e8:02:
d5:2e:76:7c:ae:e6:76:ec:19:6d:78:9e:93:75:3c:
86:68:be:33:a8:0a:c1:9a:fe:e0:36:e3:ba:81:90:
d8:4c:9c:8b:13:8c:59:be:62:9b:d5:29:d1:2a:c7:
90:b4:dd:03:e3:aa:85:68:bb:f0:ca:fc:75:2b:86:
e3:62:d0:8b:ef:92:33:3d:29:8c:58:42:61:d4:8f:
c8:dd:c0:91:ee:ff:6d:d8:7e:b7:99:c1:bd:b7:44:
88:63:cf:66:ad:90:6e:af:93:b3:36:f7:8c:69:7e:
3f:e1:b6:36:19:ba:d6:3b:bf:7e:08:a9:a7:72:90:
d5:dc:cb:79:68:36:c5:14:c4:e9:2f:1d:2b:2e:41:
48:a8:3f:a5:65:12:36:03:2a:fd:ed:3f:e3:12:da:
25:ca:82:07:9f:8c:52:de:82:20:c2:8d:36:bf:b4:
61:b4:a1:5d:3a:bd:69:93:9b:5b:e5:3d:3e:9b:ae:
98:31:ab:0e:fe:6f:78:64:2a:10:90:f3:ac:36:5e:
8f:35:72:5d:bb:7a:9f:c0:37:b0:a0:23:88:de:d9:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:42:B2:7F:C8:1F:B7:68:04:11:B6:84:F5:AA:0D:A1:82:32:5E:A8
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.62.0/24
Signature Algorithm: sha256WithRSAEncryption
68:81:4c:1c:b9:1e:ac:e2:1d:58:74:bc:4a:d6:71:e2:7f:17:
f5:64:d3:ae:f9:23:af:80:76:02:87:18:66:1d:5f:9f:8e:93:
c5:2b:d7:c6:b5:e8:4b:54:75:52:56:4c:bf:74:dc:8e:ec:ea:
27:5f:9b:16:6b:10:3e:fa:65:fb:c5:36:c7:13:b4:39:f0:51:
b2:20:ce:76:d7:c0:6a:fd:8e:05:0b:be:d7:69:e0:98:fc:5a:
f9:8c:50:b5:28:9d:bb:9f:fd:fc:c0:da:03:d5:41:80:f6:2d:
2a:38:59:9c:9d:44:c2:41:69:99:fc:2f:b8:a4:4c:23:ab:a5:
7a:ee:59:e8:21:63:2c:e9:d4:e4:9a:62:20:ef:62:b5:d7:ef:
9a:6f:20:35:9e:b9:ed:74:14:0f:ef:21:ce:21:4a:e3:85:6d:
55:42:3a:8f:f8:0a:94:20:44:f2:4d:5a:d5:95:70:8f:48:0e:
ba:77:15:6c:50:1c:9b:b2:e8:d3:06:01:59:82:fd:b8:df:bb:
de:70:52:71:a5:6c:8e:06:e5:e3:73:59:43:fd:fe:ef:41:58:
b0:c0:5a:9b:12:d5:cd:8b:eb:46:f6:6c:e3:a4:00:8b:70:32:
d2:36:2f:36:ef:09:d3:a8:24:e7:45:19:70:f8:d2:3f:52:43:
aa:9d:c9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:26:04 2025 by rpki-client