Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LBYR77jQ-Oz1xFM4SNLKaLp566Q.roa
File: LBYR77jQ-Oz1xFM4SNLKaLp566Q.roa (raw, json)
Hash identifier: yOwmtA+P4RLJ758arwXlY9z/FRaprT+w3qZ3EQA+O5o=
Subject key identifier: 2C:16:11:EF:B8:D0:F8:EC:F5:C4:53:38:48:D2:CA:68:BA:79:EB:A4
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 03779D83
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LBYR77jQ-Oz1xFM4SNLKaLp566Q.roa
Signing time: Tue 25 Jan 2022 03:45:26 +0000
ROA not before: Tue 25 Jan 2022 03:45:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 46.37.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58170755 (0x3779d83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 25 03:45:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c1611efb8d0f8ecf5c4533848d2ca68ba79eba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:3c:fe:41:05:e3:e8:9f:a0:03:66:ad:c3:
2e:4f:d9:63:91:d8:63:a8:fd:1e:12:7b:66:05:bf:
35:7e:57:9b:d8:c2:14:7b:10:8e:b1:81:68:ce:2d:
a7:5d:75:af:5a:df:03:4a:ee:4c:ab:00:95:42:eb:
1d:be:36:50:0c:f9:85:af:cb:aa:f0:b2:ad:76:60:
7f:3e:72:44:22:42:9a:7b:db:a2:10:08:7d:9a:78:
30:6f:bb:19:68:5a:ea:b1:6a:ef:60:8d:29:23:45:
63:04:91:67:10:b4:6f:01:6b:2d:54:da:d3:f8:fb:
e1:79:ec:8b:2e:c0:c2:c1:f9:1d:65:66:aa:df:80:
0b:45:81:d7:e3:01:71:2e:de:03:a0:fb:c1:cd:a3:
03:9c:a4:3e:6d:aa:bd:5d:45:bd:a0:b1:3c:8e:3b:
26:27:74:42:55:9f:5f:a7:e6:de:42:b0:a0:89:3a:
6f:b6:a5:13:4d:d2:a6:58:d9:c9:85:fd:9c:80:fc:
0b:ed:fc:a9:ac:19:16:7a:d2:5a:6a:1b:b7:54:08:
54:e5:0c:2b:b0:70:83:83:e7:d4:28:a0:7c:c6:34:
4a:f5:28:c3:70:91:61:e3:82:21:57:91:99:8c:61:
14:53:27:a6:ae:26:24:bc:7e:e0:ef:37:6a:e7:d5:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:16:11:EF:B8:D0:F8:EC:F5:C4:53:38:48:D2:CA:68:BA:79:EB:A4
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LBYR77jQ-Oz1xFM4SNLKaLp566Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.100.0/24
Signature Algorithm: sha256WithRSAEncryption
86:63:4e:54:29:20:2e:11:36:78:88:79:29:6d:5a:2a:5e:a6:
ae:00:5e:08:02:a2:32:a7:ff:f2:d5:8a:66:5d:b7:f3:94:c1:
1a:b2:43:8f:58:17:cf:c8:e9:47:13:6d:6a:d2:e8:f5:08:1f:
c1:94:22:d0:6a:02:ef:49:26:a0:6a:54:6e:74:89:3d:28:46:
dd:d3:64:94:df:e8:be:2e:c0:33:76:02:60:f6:3d:e7:d5:a8:
68:7f:ec:b3:7f:0b:0b:13:6e:c0:d2:36:b8:67:26:64:60:4d:
aa:17:b2:13:e2:63:60:a6:da:39:a3:97:91:2f:c7:9e:6f:c3:
6f:9c:9e:ad:72:58:bb:a1:6e:14:be:0f:4a:2a:8d:a9:46:7f:
54:51:80:cd:27:55:dc:5d:35:2d:63:af:b3:d9:92:69:d2:f5:
94:49:f4:6d:6a:c8:c6:43:bc:16:ae:2d:39:10:61:10:c0:18:
05:c7:15:0c:8b:bc:61:20:c7:12:1d:1e:1c:ea:0b:72:ff:b3:
4f:c3:74:de:fd:c1:d7:c8:f2:2f:48:1d:7d:fc:bf:13:d3:22:
be:b6:f6:ac:e1:e2:ed:75:4c:b2:a6:14:14:d3:ec:f8:fd:b7:
79:f5:34:83:fd:e9:52:a9:bf:19:64:f4:c4:4f:85:e8:e0:d1:
56:c0:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org