Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/62s-_9ROzR98wpZCmXRrK1fufqg.roa
File: 62s-_9ROzR98wpZCmXRrK1fufqg.roa (raw, json)
Hash identifier: Jqn1Zt8a4UyF7//Ka8BYcLX3nnPRbqJECgv3elgosGw=
Subject key identifier: EB:6B:3E:FF:D4:4E:CD:1F:7C:C2:96:42:99:74:6B:2B:57:EE:7E:A8
Certificate issuer: /CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Certificate serial: E9B1
Authority key identifier: 61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/62s-_9ROzR98wpZCmXRrK1fufqg.roa
Signing time: Tue 05 Apr 2022 08:06:20 +0000
ROA not before: Tue 05 Apr 2022 08:06:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49215
IP address blocks: 83.220.0.0/21 maxlen: 21
83.220.11.0/24 maxlen: 24
83.220.10.0/24 maxlen: 24
83.220.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59825 (0xe9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Validity
Not Before: Apr 5 08:06:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb6b3effd44ecd1f7cc2964299746b2b57ee7ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:52:6f:b0:8e:b0:db:e1:2a:4d:ce:c2:6a:
8b:d2:6c:f5:68:20:dc:9c:a6:21:f7:d5:a0:c5:4a:
9b:2a:9d:c8:e1:cf:52:33:0c:44:44:16:6b:af:4d:
de:a4:72:0c:56:7b:c4:78:74:98:9d:7c:e7:94:66:
0d:b5:61:b4:46:be:a8:6c:8e:1e:cc:66:8a:78:20:
f6:13:9b:7c:26:c7:9b:40:a2:a8:2d:cb:c5:1c:34:
00:08:7e:dd:10:e3:99:ba:91:52:28:a5:91:05:c6:
f6:e1:81:72:83:dc:83:49:15:38:f8:6c:1c:62:58:
ec:7c:f1:ff:70:85:32:31:e2:4c:8f:0a:75:7e:57:
50:69:59:44:4e:5f:4c:cb:fa:e6:e5:4d:0b:3b:1c:
86:56:14:1d:6e:b4:43:57:91:fc:bd:03:14:e5:2c:
1d:89:50:88:29:8c:12:c0:9c:53:c9:99:59:4b:54:
c0:76:bd:e2:93:a6:54:3f:7c:5e:c1:17:09:89:d4:
da:85:ae:17:1e:b8:6b:b9:d4:f9:58:9f:40:c0:c8:
50:16:25:18:fb:67:0c:34:d1:93:b5:24:17:59:f5:
8d:1d:20:59:8b:f3:29:8d:29:07:45:ab:e2:f1:7f:
b3:b4:fa:b4:07:99:b9:a8:a2:9c:a1:4d:0e:7b:d4:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:3E:FF:D4:4E:CD:1F:7C:C2:96:42:99:74:6B:2B:57:EE:7E:A8
X509v3 Authority Key Identifier:
keyid:61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/62s-_9ROzR98wpZCmXRrK1fufqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.0.0/21
83.220.10.0-83.220.15.255
Signature Algorithm: sha256WithRSAEncryption
53:1a:ab:8c:72:7f:7f:d1:5c:33:91:b3:f2:29:27:6f:97:e5:
d9:69:45:b3:48:8a:6c:a0:b9:49:39:d2:7d:90:03:16:40:6c:
cb:b6:d5:39:e4:8e:f9:b9:1c:77:9e:52:ac:67:5d:57:34:8c:
33:c6:31:60:8b:5c:11:3b:72:7e:7e:d4:99:f4:bd:ca:6f:75:
71:f4:d7:28:b1:ef:08:bc:d6:77:00:36:89:56:13:20:3f:bc:
45:1a:db:9f:db:4c:b5:69:93:61:5f:67:e5:a3:1c:6d:21:01:
1c:14:b6:78:9c:61:f8:0e:bc:99:20:ff:1e:a8:84:be:62:e5:
3c:fd:fd:90:6f:46:2a:d2:a7:5e:02:80:2f:9f:6d:98:0a:00:
79:88:1b:f2:97:2a:3f:c1:ca:10:c3:e6:a2:90:11:dc:9a:8d:
50:0d:72:7e:33:4a:fd:7d:52:cb:9f:11:97:63:27:f6:53:95:
84:71:76:93:29:b8:99:13:aa:62:9d:ad:63:81:98:65:fa:fe:
d2:73:0b:13:29:c5:50:cb:63:af:98:ed:83:98:9e:0d:98:4d:
82:71:ce:5b:c7:68:7e:77:f1:cf:24:44:5e:be:9c:85:ab:11:
8a:87:27:aa:fc:da:15:90:64:0d:ba:9f:cc:f4:cf:9d:58:84:
4e:5f:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:11 2023 by rpki-client on console-ams.rpki-client.org