Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20383334.roa
File: 352e38332e3231342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: v7wieySvTJglHlkauZRXkVXwoXzZfFinFUBDwgRSDgQ=
Subject key identifier: 75:82:C6:1C:46:76:B3:E8:AC:8D:76:2D:9A:E4:6B:0B:09:CC:F2:AE
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 4DFA2D5A89356DB7BF0C5A808D92B28754E76287
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20383334.roa
Signing time: Tue 04 Nov 2025 13:20:34 +0000
ROA not before: Tue 04 Nov 2025 13:15:34 +0000
ROA not after: Tue 03 Nov 2026 13:20:34 +0000
asID: 834
IP address blocks: 5.83.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Nov 2025 19:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:fa:2d:5a:89:35:6d:b7:bf:0c:5a:80:8d:92:b2:87:54:e7:62:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Nov 4 13:15:34 2025 GMT
Not After : Nov 3 13:20:34 2026 GMT
Subject: CN=7582C61C4676B3E8AC8D762D9AE46B0B09CCF2AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:bd:4c:f2:58:01:34:8c:58:9f:53:b9:3e:
d9:27:de:be:2d:e0:3f:6c:f1:0d:c0:29:68:76:8a:
45:3f:a3:14:90:31:e2:2e:05:1a:ce:3c:b5:55:68:
60:81:6f:7c:f4:16:58:5e:ed:f8:73:5d:04:38:5f:
f8:2b:d1:83:80:e9:3e:c1:dc:66:0a:45:6f:9b:0d:
6a:d4:27:5a:17:5e:c7:71:f0:36:2c:2a:13:47:77:
75:03:59:53:76:c1:28:bf:56:c8:18:e8:58:68:4c:
1c:b0:32:d8:b8:51:c3:f3:0f:1d:0f:0b:9d:96:d9:
5a:0a:47:84:e9:05:e9:3c:2d:1d:59:8e:46:f1:89:
af:b7:9d:ab:41:c3:9c:19:56:5d:b4:2b:40:a1:c7:
29:30:98:a0:fd:f1:7a:46:6c:6d:ce:dc:ce:d8:9f:
3b:16:7c:74:d4:c0:4e:f8:11:9c:5a:dc:e6:ff:1e:
89:21:81:b8:af:41:bb:16:91:0d:c8:2d:21:86:35:
60:01:38:be:c4:aa:3b:2d:c6:43:b5:8f:cb:af:d6:
45:59:b4:30:d4:d6:0c:5e:85:27:1d:5b:88:1a:16:
87:32:0d:9a:f0:19:58:e6:88:8d:13:a6:40:cb:17:
f8:fa:75:4c:00:b5:9b:9b:05:a5:43:65:f8:9e:5a:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:82:C6:1C:46:76:B3:E8:AC:8D:76:2D:9A:E4:6B:0B:09:CC:F2:AE
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7a:f8:68:7f:9c:00:a3:bb:61:72:27:13:93:bb:fd:7f:6c:
61:44:c1:6a:30:f2:43:ff:7a:29:4c:eb:08:9c:45:ef:5c:48:
10:6b:f1:9c:11:33:74:e8:70:74:5d:d3:3a:76:33:2a:69:a9:
cc:3c:be:9f:41:78:27:24:1d:70:bc:9a:d4:5e:cc:38:3e:77:
70:a9:b0:5e:1c:87:9c:95:be:18:a1:ee:58:ce:43:c3:06:84:
16:aa:68:af:e5:f4:d6:8f:a6:0a:8e:ec:2b:23:e4:31:3c:04:
a0:4a:26:15:49:92:31:ae:59:4c:da:e8:db:c6:14:16:c0:5a:
51:7b:34:54:66:8e:c2:25:1a:9a:77:19:62:ee:a2:fa:02:f0:
e9:55:aa:de:33:cf:4c:03:d4:ff:bc:4a:cf:ee:df:90:10:6d:
c9:ac:c8:ea:62:b3:e0:d1:fa:ea:d8:53:69:dc:cb:b8:93:93:
47:85:14:62:2f:6a:ec:82:a1:f6:ad:fe:fa:16:ae:3a:13:c0:
5a:41:71:f5:51:fd:17:17:0b:b2:b8:5c:cf:e2:3b:e5:43:b1:
90:23:21:fb:38:1b:9b:82:f9:ea:9a:4e:ca:37:9c:65:7d:58:
4d:5f:ec:6e:ad:0e:fc:97:e9:7b:a3:bc:31:ef:c6:08:c3:9d:
dc:6d:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:30:16 2025 by rpki-client