Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS140098.roa
File: AS140098.roa (raw, json)
Hash identifier: yvWRmNH960HGOnjjp0nCZIcQnMltj5pomIxuynqjAk0=
Subject key identifier: 0A:C9:2B:67:DA:73:C2:12:FE:AF:8D:47:F5:A8:A2:B5:3C:D0:B3:34
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 08919EE51D53C196FB9F922B71A6D70E81ED6CBF
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS140098.roa
Signing time: Tue 15 Aug 2023 02:00:27 +0000
ROA not before: Tue 15 Aug 2023 01:55:27 +0000
ROA not after: Tue 13 Aug 2024 02:00:27 +0000
asID: 140098
IP address blocks: 2a0f:9400:800e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Feb 2024 03:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:91:9e:e5:1d:53:c1:96:fb:9f:92:2b:71:a6:d7:0e:81:ed:6c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:27 2023 GMT
Not After : Aug 13 02:00:27 2024 GMT
Subject: CN=0AC92B67DA73C212FEAF8D47F5A8A2B53CD0B334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:74:08:e8:71:7a:b4:db:4e:85:5c:bc:20:
25:f5:87:59:68:d6:a0:74:cd:a3:05:30:53:dd:c6:
a5:40:e9:05:8b:79:f0:0a:b2:48:92:69:ac:23:bd:
84:b2:d2:7d:c8:5d:6b:60:af:a2:2f:cf:c1:15:5d:
92:ca:b0:b0:6d:28:b8:88:15:5d:cd:f6:48:74:80:
d4:4b:ab:34:5b:a0:b2:90:76:10:6b:41:60:b4:f8:
25:d3:a7:54:30:da:e3:a9:7d:ce:16:c9:ec:19:17:
29:f4:ff:05:7c:42:b7:29:19:1a:e9:65:a9:dc:3b:
51:50:25:53:bf:d7:fa:69:53:6b:58:0d:ab:b4:a4:
f7:b5:7a:1e:c6:dc:84:d4:9c:2e:05:ea:43:7d:55:
aa:20:bf:aa:2a:2c:e4:6f:17:65:20:d3:fe:1d:3a:
e6:93:80:aa:f6:38:97:4e:e6:71:fb:28:a1:2e:a6:
3b:be:0a:c8:0b:45:be:d4:7f:81:c9:f3:46:a7:3c:
15:3d:54:4d:d3:f6:be:eb:d9:bb:40:49:19:16:64:
cc:78:ee:c5:07:a6:77:ef:35:17:1f:74:4a:97:a6:
f7:08:b0:6d:15:f3:6c:03:43:93:4f:63:83:dc:fd:
aa:26:85:5c:05:88:d4:3b:28:f2:19:e9:1d:52:97:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:2B:67:DA:73:C2:12:FE:AF:8D:47:F5:A8:A2:B5:3C:D0:B3:34
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS140098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:800e::/48
Signature Algorithm: sha256WithRSAEncryption
4a:d1:ef:87:6c:f3:d0:e3:6a:c0:80:4c:00:8d:a6:f6:04:15:
e5:cc:37:63:8f:89:4c:c9:66:0e:18:56:12:52:0d:df:78:87:
e6:ef:22:8b:b7:17:89:8a:66:f1:86:f4:c3:a2:9e:39:b1:98:
79:70:3e:ba:e7:18:c6:4f:4b:e2:83:2b:08:ed:da:f4:77:e3:
76:30:2a:f5:00:3d:8d:05:d0:c3:44:b0:67:6e:cf:31:68:e9:
69:e9:63:7f:6b:d6:39:a4:ef:52:b7:be:91:65:c6:2b:a4:53:
11:ad:2f:78:e9:f4:d3:83:58:15:fe:6b:c8:34:ae:33:a1:7a:
e1:cb:83:8d:44:ee:dc:0b:e4:bc:a6:ff:e9:18:52:6d:f5:c7:
63:c6:9f:e7:7f:13:24:7e:c4:6f:34:60:3f:69:fb:a9:4e:ae:
50:40:94:20:ab:f3:bf:5c:d6:fa:aa:50:d3:59:7c:c0:6e:2d:
5b:61:dc:51:c4:7c:d6:98:2d:d4:64:b2:44:5e:80:79:d2:7e:
48:3b:a6:b9:85:ab:46:97:68:98:5a:47:db:39:33:f5:cf:90:
1d:e5:4e:a4:66:76:4a:ef:eb:70:7a:fc:4d:bc:39:a4:8f:76:
e8:5c:a4:8d:0d:e7:27:f7:91:cc:cc:27:41:2c:1a:64:ae:4f:
c6:ae:50:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org