Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202685.roa
File: AS202685.roa (raw, json)
Hash identifier: D02e2wZqWYMokwskX5/VoYI+D/bPMGcvHQ8gTXZ0+wU=
Subject key identifier: 37:DB:4F:53:8C:E8:59:4E:B4:37:1C:3E:09:A5:C1:54:78:9B:84:25
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 363E66962C0DFD481389569E4778C31C26BBE79C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202685.roa
Signing time: Tue 27 Sep 2022 16:18:44 +0000
ROA not before: Tue 27 Sep 2022 16:13:44 +0000
ROA not after: Tue 26 Sep 2023 16:18:44 +0000
asID: 202685
IP address blocks: 2a0f:9400:610a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:3e:66:96:2c:0d:fd:48:13:89:56:9e:47:78:c3:1c:26:bb:e7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 27 16:13:44 2022 GMT
Not After : Sep 26 16:18:44 2023 GMT
Subject: CN=37DB4F538CE8594EB4371C3E09A5C154789B8425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:6e:84:3d:da:12:5b:87:ff:d4:ab:7b:62:
c2:76:90:f7:8c:9d:83:71:0a:28:fa:26:c8:83:1a:
5e:97:5c:86:e0:a0:3d:96:88:6e:cc:52:ba:ff:c2:
35:96:f5:56:61:0a:57:53:d4:ab:1f:7c:60:31:88:
d5:28:79:56:fb:be:2f:0c:e7:ea:50:b6:fa:87:1f:
cc:b6:9d:24:83:f1:58:81:1d:92:87:1e:a6:62:d7:
a4:0d:91:94:8f:23:ef:e0:ce:a4:ea:70:5b:c4:be:
30:c6:01:bb:34:e2:a1:34:2e:29:e9:cb:9b:5a:c2:
02:40:ab:02:3d:c7:1b:48:c7:b0:95:ae:83:a5:37:
05:55:51:44:28:8b:8d:01:f6:c5:aa:ff:1d:d1:f7:
51:f0:ca:ea:8d:07:97:ac:30:71:05:40:76:23:ce:
b8:89:57:eb:1e:2f:6e:d7:da:cd:6d:79:2f:31:ea:
16:fe:87:6c:93:da:10:ae:d1:c8:31:3e:09:f0:22:
3c:72:2c:0b:09:b2:dc:e8:35:d7:b5:35:76:67:ac:
3f:5a:fc:cf:0f:cf:87:98:77:78:18:4f:78:93:b0:
36:1e:09:54:11:64:fb:0d:72:7b:34:e2:57:be:26:
91:79:ca:8e:79:38:31:23:dc:25:a4:91:a2:16:bb:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DB:4F:53:8C:E8:59:4E:B4:37:1C:3E:09:A5:C1:54:78:9B:84:25
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610a::/48
Signature Algorithm: sha256WithRSAEncryption
74:a5:f3:da:45:24:95:c0:9c:41:64:fd:88:d1:58:ba:38:c6:
8b:b9:57:74:02:2a:17:3d:fe:93:a3:22:26:b1:89:fb:8e:06:
95:0b:3b:6e:20:55:bc:00:5d:8c:93:d6:f8:b2:97:c5:d1:1b:
01:e2:e0:ee:7e:70:05:ff:f7:00:3a:3f:06:d7:1b:9f:30:d3:
6d:a3:32:23:18:20:9d:0d:69:17:3f:bc:27:73:92:9a:be:29:
9e:f6:e3:2d:1d:ba:f6:47:dd:65:96:3a:99:2d:50:04:11:02:
ef:94:3c:13:a9:31:64:68:53:cc:5f:bb:51:10:c7:7e:fe:7d:
52:50:3e:8e:70:c6:d3:7f:f4:3e:06:68:4e:f7:6f:a4:26:31:
43:fc:d3:86:6b:97:59:15:61:f8:88:09:5d:b8:0d:d5:31:3e:
a8:d2:df:4d:72:3e:75:c9:b5:09:87:3e:00:00:eb:cd:53:f8:
f9:63:10:c5:65:3e:97:5b:c1:41:a2:e7:0e:8f:58:82:6a:b2:
c0:1c:62:3a:02:ac:07:71:c0:6c:26:1c:7d:af:68:59:f9:99:
c5:41:c3:e7:9f:7d:4c:d6:ae:a6:24:26:8f:29:8f:76:9d:79:
1b:76:be:f5:7e:4c:29:0e:56:5a:87:44:c6:13:70:a3:36:1b:
1e:6c:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org