Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS147041.roa
File: AS147041.roa (raw, json)
Hash identifier: OvRcw9fbI8CHu2HA5A+zDmyANGe2TMEZQgrdzeXsgIk=
Subject key identifier: F6:3A:99:B1:D0:56:56:C8:27:85:56:B3:4B:BD:2F:70:81:F6:32:AB
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2D05DEEEF6B84D2762039970F09B057DB5C4D905
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS147041.roa
Signing time: Tue 13 Sep 2022 01:20:26 +0000
ROA not before: Tue 13 Sep 2022 01:15:26 +0000
ROA not after: Tue 12 Sep 2023 01:20:26 +0000
asID: 147041
IP address blocks: 2a0f:9400:6400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:05:de:ee:f6:b8:4d:27:62:03:99:70:f0:9b:05:7d:b5:c4:d9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:26 2022 GMT
Not After : Sep 12 01:20:26 2023 GMT
Subject: CN=F63A99B1D05656C8278556B34BBD2F7081F632AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:88:bf:c5:5f:cb:ce:99:3d:7b:70:cc:54:
9e:c6:4b:e5:99:68:90:3e:1c:12:03:54:05:96:b5:
aa:cb:88:88:3b:cd:1c:a2:42:c7:36:7a:29:c4:72:
9e:25:21:d9:7a:6b:14:dd:2b:4a:b9:4b:0b:7b:33:
b6:0c:6d:21:60:23:7a:f9:7d:77:f2:81:f4:62:0c:
ce:b8:f2:3a:2f:30:db:02:24:5a:38:ca:60:31:44:
b2:12:e0:fa:0b:97:4f:de:99:7e:f2:fd:e0:02:7e:
b4:a1:d3:e1:58:9a:99:f2:79:3c:a3:01:d9:02:a0:
99:26:aa:c8:ac:78:34:5e:80:5b:5b:78:7f:23:14:
26:96:b6:72:28:36:ac:c9:26:94:23:d1:d6:4c:50:
12:56:4d:bb:03:72:96:19:58:0a:c5:ca:8a:e6:d5:
b5:65:e3:f3:d3:1f:7e:d2:e9:34:cf:86:75:12:29:
e7:0f:9d:e0:de:24:d4:b4:09:11:82:fe:ce:37:d0:
a7:9a:a7:f1:3d:52:d1:fd:49:02:fe:4d:80:9d:f7:
06:67:bb:82:cd:4d:c2:03:42:51:e5:81:80:e2:c2:
66:87:80:f0:43:85:6a:8d:a2:b6:48:09:2d:38:16:
ae:f6:31:60:c5:3c:6d:e0:12:81:8c:99:97:00:19:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3A:99:B1:D0:56:56:C8:27:85:56:B3:4B:BD:2F:70:81:F6:32:AB
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS147041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6400::/40
Signature Algorithm: sha256WithRSAEncryption
24:30:66:e6:40:38:40:b9:ad:c0:78:09:a8:fb:de:28:0f:a6:
75:6e:a8:c1:f7:ab:af:4b:59:e1:70:94:80:bd:9d:54:23:9a:
2a:80:af:45:25:d6:4c:0b:2d:46:c5:20:05:17:81:ca:10:73:
2b:17:db:2a:c0:72:a7:72:ec:16:d0:78:3a:d0:f3:44:4a:7d:
a4:81:49:9e:12:5c:71:87:d5:bf:95:84:4d:71:3e:5e:9f:c5:
d0:36:7d:7e:63:a5:b3:76:4d:52:6a:ba:aa:dc:fd:3b:51:af:
32:62:47:14:30:a7:f1:2b:36:f5:44:ff:fd:06:52:2e:12:e1:
0b:3f:16:35:8f:78:3d:84:a1:0b:40:a1:c5:aa:6f:fc:64:d6:
e9:c1:a8:85:f3:2d:5a:d7:95:3c:d7:94:ee:71:f5:27:58:cf:
83:de:a3:ff:cb:84:72:95:80:4a:70:29:cd:d9:ab:38:d9:3a:
72:58:d8:a0:61:85:8a:6d:55:81:5e:01:bd:f2:3f:4a:e7:80:
26:d7:ac:2e:be:70:48:48:21:d3:0c:de:82:65:3c:60:bd:24:
96:e8:6c:fd:b4:e6:86:37:f2:81:5a:23:89:8b:55:b0:b5:a2:
45:a0:45:7e:fe:5b:27:52:5b:1e:2a:4e:14:c8:53:7e:62:6d:
5f:2a:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org