Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202256.roa
File: AS202256.roa (raw, json)
Hash identifier: XtqPOEWJX+va83KZuhQ3f0KPjrJJ5h7DJjvKNInl1gw=
Subject key identifier: A7:3A:FA:D2:AF:C5:E6:C8:E8:DA:53:77:C6:C9:88:9B:1D:47:16:FC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3CFD10E1E7C83E580C896490F362B4E498C9A205
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202256.roa
Signing time: Tue 25 Oct 2022 04:08:57 +0000
ROA not before: Tue 25 Oct 2022 04:03:57 +0000
ROA not after: Tue 24 Oct 2023 04:08:57 +0000
asID: 202256
IP address blocks: 2a0f:9400:6000::/40 maxlen: 48
2a0f:9400:6600::/40 maxlen: 48
2a0f:9400:6700::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fd:10:e1:e7:c8:3e:58:0c:89:64:90:f3:62:b4:e4:98:c9:a2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 25 04:03:57 2022 GMT
Not After : Oct 24 04:08:57 2023 GMT
Subject: CN=A73AFAD2AFC5E6C8E8DA5377C6C9889B1D4716FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:d7:0c:c8:f2:42:f9:3b:11:bd:a3:86:c4:
eb:a5:f5:d9:99:df:f6:78:24:2e:6a:68:45:89:eb:
29:5c:bf:30:d8:7e:14:a6:af:17:4d:a4:5e:7c:85:
15:48:02:e3:7f:24:b7:26:88:cd:4b:35:34:df:e9:
36:9b:67:fc:97:ec:9f:7f:be:ec:64:df:84:0a:7c:
3e:7e:69:20:1f:36:e9:b1:a4:8b:38:01:9f:ff:60:
89:e8:dd:d2:b0:1d:c3:a2:a7:a5:3e:f7:4a:7e:20:
20:3c:6a:2f:64:40:ec:8b:41:5f:6f:8f:d7:be:65:
02:d7:c7:29:b1:9d:da:99:31:f3:e8:37:68:02:c5:
63:52:26:1b:39:60:60:50:d1:58:c0:b1:d7:b2:cf:
c3:8c:f8:f5:f1:e9:54:f7:59:d0:5b:f3:d4:5c:1e:
14:86:ea:0b:55:be:ac:72:02:3b:ec:72:14:be:f3:
fc:5a:bf:f0:21:b7:10:41:75:45:1d:50:79:e5:58:
25:8f:8b:cb:60:51:89:70:0d:4e:ff:7a:ed:22:06:
c1:31:93:ec:77:6d:be:46:fa:8d:59:d8:4a:a2:58:
64:7c:6a:76:4e:c1:f2:e0:0b:31:05:36:3c:b3:46:
a9:4e:a1:b2:d6:b5:52:fa:a9:7d:6c:83:5b:fc:39:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:FA:D2:AF:C5:E6:C8:E8:DA:53:77:C6:C9:88:9B:1D:47:16:FC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6000::/40
2a0f:9400:6600::/39
Signature Algorithm: sha256WithRSAEncryption
c8:b2:54:93:a9:95:e5:4b:d9:38:47:43:20:f7:74:8d:18:0b:
66:bb:41:dc:90:07:b5:5e:0d:a9:d2:5a:26:49:43:07:a6:3c:
0b:80:93:05:5c:86:0a:23:4c:f4:2e:2c:2d:e4:80:20:dc:74:
4f:1c:1a:28:af:6a:45:6d:6e:24:87:ab:eb:15:b3:36:42:96:
be:96:3e:59:57:5f:2b:db:58:19:15:61:e8:f4:33:7c:ac:1c:
97:04:d5:b3:b9:fa:db:82:ff:2e:95:fc:c7:7a:1c:ce:1a:ed:
11:53:c8:ee:31:1b:27:45:ee:5e:fe:fb:51:38:05:5c:11:8e:
01:8a:ed:59:c2:6c:0a:f0:64:39:39:55:0b:6a:d0:80:59:14:
d7:6f:bb:85:bc:14:a7:bd:63:0c:36:46:5b:52:43:ec:06:31:
42:ab:dc:1a:ae:88:7c:e2:69:0a:18:e0:1e:39:c5:45:76:bb:
d0:6c:b6:24:44:d8:c8:bf:9c:2d:93:44:f9:d8:cd:6c:ca:a2:
36:21:3b:c2:71:ae:e4:43:a5:ea:0a:d8:33:d8:31:66:d5:d3:
cc:88:d0:72:f6:c2:16:fc:a5:32:f3:dd:c0:4f:e7:81:e7:4c:
3c:a4:49:9e:17:6a:ae:f3:cc:09:05:32:03:ea:27:35:e0:68:
cc:1b:14:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org