Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS16390.roa
File: AS16390.roa (raw, json)
Hash identifier: e1tHKpeOfkeE9aZzfnX2lv01AWZnPmCIm5kNjhmZ1PE=
Subject key identifier: A1:C0:F2:53:43:4A:17:CD:1F:BF:F8:4E:46:4F:55:C8:EE:63:7E:F7
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 223778DA063710050E4A1CD8D4126E86A878C449
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS16390.roa
Signing time: Thu 16 Dec 2021 03:26:33 +0000
ROA not before: Thu 16 Dec 2021 03:21:33 +0000
ROA not after: Thu 15 Dec 2022 03:26:33 +0000
asID: 16390
IP address blocks: 2a0f:9400:8012::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:37:78:da:06:37:10:05:0e:4a:1c:d8:d4:12:6e:86:a8:78:c4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 16 03:21:33 2021 GMT
Not After : Dec 15 03:26:33 2022 GMT
Subject: CN=A1C0F253434A17CD1FBFF84E464F55C8EE637EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:15:86:66:92:0e:ad:65:09:54:9a:30:0e:
64:a1:f7:85:fb:50:19:9d:72:b9:2b:70:9b:71:b0:
79:bb:21:83:03:d0:91:8a:1e:fe:4c:a9:01:33:62:
05:22:92:34:87:53:67:e3:3c:06:8c:6d:8a:2c:15:
4d:84:10:74:c1:92:e7:91:97:a6:72:6b:34:3f:a1:
55:da:a3:42:ce:2c:d9:81:9a:df:7e:ff:ef:7e:4a:
31:ef:fd:6d:79:e8:ed:34:00:46:29:29:97:cd:81:
f5:5d:45:e5:f5:b6:31:7f:9e:af:f5:2c:35:b4:48:
b7:f9:62:e0:11:fa:56:61:03:b7:89:4c:bb:d5:7f:
73:76:f4:87:82:39:17:a3:5b:39:99:c6:7a:6b:1e:
14:45:c3:f9:9d:ab:81:d1:a7:f4:ee:89:4a:45:c1:
6a:d2:2e:0d:a1:ef:16:e1:0e:b9:5c:67:e5:94:fe:
d2:fe:4e:f4:8f:83:1e:8d:1a:dc:56:fe:32:fb:52:
e8:85:45:27:32:5a:f8:ae:52:11:5c:7c:49:a9:c8:
ff:3e:f6:63:eb:b5:7a:c6:f1:b2:b2:65:db:e5:b4:
a6:f1:d4:a6:d8:9f:be:ef:38:5c:a1:2f:94:99:ab:
75:d5:83:3b:c4:89:c8:a6:d7:7f:39:09:3f:de:6e:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C0:F2:53:43:4A:17:CD:1F:BF:F8:4E:46:4F:55:C8:EE:63:7E:F7
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS16390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8012::/48
Signature Algorithm: sha256WithRSAEncryption
c7:29:96:72:6f:ca:50:3e:2c:d4:35:5b:db:1d:c2:7b:33:25:
9f:e0:1a:d5:24:63:28:a2:26:9e:db:b4:8a:bc:c0:3b:d6:60:
dd:ff:12:5b:a0:18:3d:8b:67:bb:15:19:b9:e2:06:67:85:5a:
12:9f:40:cd:f8:3f:93:6a:f0:a3:81:88:d9:3d:a9:61:99:d2:
c2:04:f4:38:74:dd:6f:cc:d6:2a:81:8b:71:d2:7f:57:37:81:
3d:7b:bd:f8:e9:be:6e:16:28:6c:4a:f4:80:02:3c:bc:b4:44:
7e:48:20:80:e2:df:96:f3:d3:fe:4c:18:4d:a3:78:75:3a:06:
d8:e9:d2:cd:4c:87:a6:6b:b3:cc:d2:af:db:4f:92:57:7b:86:
dc:e5:e3:8b:f6:a3:80:e3:ba:b6:4a:1a:da:60:3a:2e:08:e0:
b2:a2:29:8a:9f:30:7c:e5:6b:53:5e:fc:ff:8b:df:9e:8d:29:
fd:a9:3e:a3:ad:db:05:5c:60:d5:2c:96:86:4a:06:da:86:0a:
1f:93:52:8a:54:76:89:09:5b:0c:b0:40:73:da:6d:d0:f2:09:
c5:09:51:fd:45:0e:46:4c:08:3b:f4:5b:c2:58:00:15:3d:ab:
46:d8:30:69:98:52:cf:ee:0a:27:3b:45:b8:33:3a:85:9b:73:
76:7c:f9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org