Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/62s-_9ROzR98wpZCmXRrK1fufqg.roa
File:                     62s-_9ROzR98wpZCmXRrK1fufqg.roa (raw, json)
Hash identifier:          Jqn1Zt8a4UyF7//Ka8BYcLX3nnPRbqJECgv3elgosGw=
Subject key identifier:   EB:6B:3E:FF:D4:4E:CD:1F:7C:C2:96:42:99:74:6B:2B:57:EE:7E:A8
Certificate issuer:       /CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Certificate serial:       E9B1
Authority key identifier: 61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/62s-_9ROzR98wpZCmXRrK1fufqg.roa
Signing time:             Tue 05 Apr 2022 08:06:20 +0000
ROA not before:           Tue 05 Apr 2022 08:06:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49215
IP address blocks:        83.220.0.0/21 maxlen: 21
                          83.220.11.0/24 maxlen: 24
                          83.220.10.0/24 maxlen: 24
                          83.220.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59825 (0xe9b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612c1c53f6c1d996236cbb37ba3247670399a62d
        Validity
            Not Before: Apr  5 08:06:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb6b3effd44ecd1f7cc2964299746b2b57ee7ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:52:6f:b0:8e:b0:db:e1:2a:4d:ce:c2:6a:
                    8b:d2:6c:f5:68:20:dc:9c:a6:21:f7:d5:a0:c5:4a:
                    9b:2a:9d:c8:e1:cf:52:33:0c:44:44:16:6b:af:4d:
                    de:a4:72:0c:56:7b:c4:78:74:98:9d:7c:e7:94:66:
                    0d:b5:61:b4:46:be:a8:6c:8e:1e:cc:66:8a:78:20:
                    f6:13:9b:7c:26:c7:9b:40:a2:a8:2d:cb:c5:1c:34:
                    00:08:7e:dd:10:e3:99:ba:91:52:28:a5:91:05:c6:
                    f6:e1:81:72:83:dc:83:49:15:38:f8:6c:1c:62:58:
                    ec:7c:f1:ff:70:85:32:31:e2:4c:8f:0a:75:7e:57:
                    50:69:59:44:4e:5f:4c:cb:fa:e6:e5:4d:0b:3b:1c:
                    86:56:14:1d:6e:b4:43:57:91:fc:bd:03:14:e5:2c:
                    1d:89:50:88:29:8c:12:c0:9c:53:c9:99:59:4b:54:
                    c0:76:bd:e2:93:a6:54:3f:7c:5e:c1:17:09:89:d4:
                    da:85:ae:17:1e:b8:6b:b9:d4:f9:58:9f:40:c0:c8:
                    50:16:25:18:fb:67:0c:34:d1:93:b5:24:17:59:f5:
                    8d:1d:20:59:8b:f3:29:8d:29:07:45:ab:e2:f1:7f:
                    b3:b4:fa:b4:07:99:b9:a8:a2:9c:a1:4d:0e:7b:d4:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6B:3E:FF:D4:4E:CD:1F:7C:C2:96:42:99:74:6B:2B:57:EE:7E:A8
            X509v3 Authority Key Identifier:
                keyid:61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/62s-_9ROzR98wpZCmXRrK1fufqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.220.0.0/21
                  83.220.10.0-83.220.15.255

    Signature Algorithm: sha256WithRSAEncryption
         53:1a:ab:8c:72:7f:7f:d1:5c:33:91:b3:f2:29:27:6f:97:e5:
         d9:69:45:b3:48:8a:6c:a0:b9:49:39:d2:7d:90:03:16:40:6c:
         cb:b6:d5:39:e4:8e:f9:b9:1c:77:9e:52:ac:67:5d:57:34:8c:
         33:c6:31:60:8b:5c:11:3b:72:7e:7e:d4:99:f4:bd:ca:6f:75:
         71:f4:d7:28:b1:ef:08:bc:d6:77:00:36:89:56:13:20:3f:bc:
         45:1a:db:9f:db:4c:b5:69:93:61:5f:67:e5:a3:1c:6d:21:01:
         1c:14:b6:78:9c:61:f8:0e:bc:99:20:ff:1e:a8:84:be:62:e5:
         3c:fd:fd:90:6f:46:2a:d2:a7:5e:02:80:2f:9f:6d:98:0a:00:
         79:88:1b:f2:97:2a:3f:c1:ca:10:c3:e6:a2:90:11:dc:9a:8d:
         50:0d:72:7e:33:4a:fd:7d:52:cb:9f:11:97:63:27:f6:53:95:
         84:71:76:93:29:b8:99:13:aa:62:9d:ad:63:81:98:65:fa:fe:
         d2:73:0b:13:29:c5:50:cb:63:af:98:ed:83:98:9e:0d:98:4d:
         82:71:ce:5b:c7:68:7e:77:f1:cf:24:44:5e:be:9c:85:ab:11:
         8a:87:27:aa:fc:da:15:90:64:0d:ba:9f:cc:f4:cf:9d:58:84:
         4e:5f:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:35 2024 by rpki-client on console-ams.rpki-client.org