Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sq-RYnYFbJJwIxk7digYWDDSlaA.roa
File: sq-RYnYFbJJwIxk7digYWDDSlaA.roa (raw, json)
Hash identifier: 0s4Lb3ReXKy40uUWoHB5GiMMbQF8D/jLJV7srNuuruM=
Subject key identifier: B2:AF:91:62:76:05:6C:92:70:23:19:3B:76:28:18:58:30:D2:95:A0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 109269B8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sq-RYnYFbJJwIxk7digYWDDSlaA.roa
Signing time: Tue 28 Jun 2022 16:58:02 +0000
ROA not before: Tue 28 Jun 2022 16:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278030776 (0x109269b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 28 16:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2af916276056c927023193b7628185830d295a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:31:30:5e:0f:72:7c:31:07:6f:ce:57:ea:51:
c6:d3:58:66:b0:8d:5e:06:17:b6:5e:3d:fc:e1:db:
cd:92:13:73:5a:32:d7:ec:a9:88:af:c2:42:dd:17:
2d:5c:03:f2:b6:00:49:e3:7c:dd:7e:fd:8c:0c:a2:
eb:d7:35:f7:53:73:69:9a:b9:00:96:f0:93:22:27:
e2:e2:2f:0e:47:a0:e1:df:81:d1:c2:09:c2:58:1e:
d8:f2:7c:2c:9a:5b:19:48:a5:8e:1f:d6:c6:a4:16:
8d:09:28:e9:1f:4a:ba:35:42:f0:ff:89:76:5f:65:
54:df:89:e0:41:eb:33:c0:a1:61:27:ed:f6:a4:ed:
13:ad:b6:de:2b:2f:5f:b6:e9:05:8d:3a:be:51:ba:
d3:57:98:5f:39:9c:f2:e7:a8:29:31:af:b6:7e:94:
f2:fa:0d:eb:0a:ff:b6:8d:5b:44:01:64:93:be:50:
51:88:e5:1a:16:80:89:c1:ce:08:17:3f:e8:08:47:
0c:73:ad:35:d5:04:a8:eb:80:16:90:59:22:a4:13:
3b:fd:6d:b5:55:d6:06:91:e0:fb:0c:38:d6:a8:58:
72:f7:6c:c3:de:38:8f:c5:e9:1e:43:9d:5e:be:60:
6a:97:0e:7b:e1:2f:fa:7e:a0:ec:9e:c2:8b:fb:b4:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AF:91:62:76:05:6C:92:70:23:19:3B:76:28:18:58:30:D2:95:A0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sq-RYnYFbJJwIxk7digYWDDSlaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
Signature Algorithm: sha256WithRSAEncryption
02:20:87:b1:27:37:87:d2:33:0e:ea:7a:e7:a4:f0:a1:5d:13:
9b:76:df:a9:63:01:e5:25:33:76:e3:ed:58:d4:d0:5a:65:83:
45:43:b5:96:ed:d6:a2:03:65:c0:5b:f8:ad:87:5b:78:b3:75:
37:f1:e9:7a:0d:ca:24:e0:9e:29:1f:e5:66:19:0a:51:05:55:
c0:97:1a:1e:80:4e:78:69:fc:d1:66:6b:41:9f:02:b4:d8:c8:
50:1b:a8:a5:1a:e6:33:26:35:72:d3:99:b4:0a:08:e5:04:8c:
e7:ef:a6:8d:4f:1d:ab:23:29:b1:93:04:64:ea:74:13:0d:3a:
6d:bd:17:50:96:04:b0:df:fd:2c:fd:50:4d:95:9d:4a:53:7f:
f3:99:31:91:23:96:a2:e8:6f:1b:79:6c:2a:23:23:7a:ed:52:
95:99:5f:5e:e6:93:8c:72:26:74:dc:41:80:bd:f8:b4:20:c1:
0e:ad:fc:a8:3f:10:51:80:8c:79:99:7f:a3:2e:27:86:60:65:
24:5d:bb:f1:5c:67:fd:73:69:a8:f9:79:e9:c3:9a:a1:a4:b5:
4e:b1:22:b4:5a:a1:13:1a:5c:c5:8c:3e:a6:28:9c:11:2d:a1:
44:2e:be:4d:9f:11:99:6c:01:36:39:c7:dc:ba:90:c9:95:94:
51:13:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:48 2024 by rpki-client on console-ams.rpki-client.org