Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20383334.roa
File: 33372e312e3232362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: c3r23w8LWS2E5emoKMbwj8oEPB2FfynbNhmlQotTRn4=
Subject key identifier: C9:76:C1:0B:FA:69:F8:65:AD:67:8D:9A:DD:41:E8:F2:B6:34:12:CC
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 57F60FFDAAC7005CCC8E5B1F5002AC9B5374116F
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20383334.roa
Signing time: Wed 26 Mar 2025 13:07:46 +0000
ROA not before: Wed 26 Mar 2025 13:02:46 +0000
ROA not after: Wed 25 Mar 2026 13:07:46 +0000
asID: 834
IP address blocks: 37.1.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 16:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f6:0f:fd:aa:c7:00:5c:cc:8e:5b:1f:50:02:ac:9b:53:74:11:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Mar 26 13:02:46 2025 GMT
Not After : Mar 25 13:07:46 2026 GMT
Subject: CN=C976C10BFA69F865AD678D9ADD41E8F2B63412CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:fc:77:39:48:59:4a:a4:c7:2c:51:50:4f:
4d:37:02:45:93:cc:f5:77:b9:be:81:c9:00:bb:e3:
08:f2:2d:e5:d0:2b:95:3f:eb:0e:0f:ec:61:e6:17:
8a:a5:1d:c1:f9:3f:02:6d:be:5a:5f:e9:41:de:37:
09:a0:46:c1:97:1c:96:3b:64:6f:a6:7e:44:f5:f5:
72:ac:ca:3a:79:b8:c8:94:4e:3c:b9:47:d6:e8:06:
74:8f:4c:c2:6a:97:ae:aa:3e:5b:45:21:5d:14:b1:
38:ef:ad:ad:b4:ba:6f:95:3b:23:ec:31:ad:85:a0:
3d:e4:93:e2:bb:f8:64:07:6d:87:d6:33:9e:db:2b:
a9:14:08:df:e6:bf:17:f0:ac:67:41:34:78:72:58:
46:7a:c0:a5:47:ee:74:90:d6:d5:36:14:6c:ad:cd:
62:8f:dc:65:d0:85:cd:2c:95:ca:56:2f:d4:a0:e9:
f2:5f:88:0b:4c:fd:c5:18:cf:82:78:7d:fd:5a:dc:
6b:94:8b:d5:0a:4c:3b:1f:f3:a3:a0:03:4a:8f:53:
41:de:c5:d1:18:9d:81:d0:13:f9:3f:94:11:8c:07:
68:f3:4f:b0:2c:3a:5d:4c:40:18:b8:19:15:fe:06:
47:18:94:f4:a3:46:bc:0e:59:80:0b:63:23:63:b2:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:76:C1:0B:FA:69:F8:65:AD:67:8D:9A:DD:41:E8:F2:B6:34:12:CC
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.226.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:cc:ee:ac:a8:cd:b2:c8:f7:70:ec:99:3b:7d:88:72:17:d9:
71:99:22:be:b9:1a:7b:0f:15:a9:30:65:10:e3:0e:d6:2b:92:
78:cc:0e:4b:42:6e:fa:a1:8f:59:32:a9:eb:4f:c8:75:fb:23:
39:b1:05:ac:7f:e3:87:d1:11:09:b6:cc:04:ef:20:22:72:01:
b8:23:f4:fe:41:73:22:68:4e:15:84:9d:4b:3b:ba:28:7e:44:
b8:ca:5f:c7:dc:9e:2e:c9:d9:03:ec:49:28:75:f7:88:da:63:
2a:b6:9a:ca:a3:cb:67:94:eb:0c:c8:b0:d1:fd:6e:a4:f3:e3:
be:95:02:d5:6e:b5:02:63:0d:b8:cb:cc:ea:aa:f5:64:b3:87:
b5:ea:69:61:da:dd:7d:41:91:6b:ca:06:04:7b:33:7f:4a:6d:
e9:72:91:12:e9:06:ce:7b:9b:84:d9:53:52:f6:80:17:38:49:
8c:a9:66:81:28:18:6c:79:44:45:76:b2:2c:88:24:ab:02:96:
be:5c:99:11:7b:0b:9c:57:b9:8a:12:34:04:a4:21:a3:91:bf:
d0:42:d6:ff:44:e3:05:0b:9a:33:58:8b:62:5e:2d:22:d1:54:
c1:20:fa:52:28:a9:cd:51:34:06:2c:6c:36:b9:2f:60:6a:9c:
fc:86:21:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:20:16 2025 by rpki-client