Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208193.roa
File: AS208193.roa (raw, json)
Hash identifier: qWi9wWxSiM/6+NYlj2MfquupDZizbasqSKtkG9CB4RM=
Subject key identifier: 14:0D:99:66:A7:FE:69:CF:91:9B:FE:66:05:3D:EB:73:10:71:AA:23
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1AAF025478C885E195C41F31147EE5B113038357
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208193.roa
Signing time: Tue 13 Sep 2022 01:20:27 +0000
ROA not before: Tue 13 Sep 2022 01:15:27 +0000
ROA not after: Tue 12 Sep 2023 01:20:27 +0000
asID: 208193
IP address blocks: 2a0f:9400:7381::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:af:02:54:78:c8:85:e1:95:c4:1f:31:14:7e:e5:b1:13:03:83:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:27 2022 GMT
Not After : Sep 12 01:20:27 2023 GMT
Subject: CN=140D9966A7FE69CF919BFE66053DEB731071AA23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:c8:61:85:25:05:71:8d:84:8d:07:fd:04:
01:02:f4:30:7a:7e:ce:31:a7:e6:10:e7:bc:d6:41:
1f:b4:ab:84:27:9a:54:51:07:ff:20:d8:2a:1d:0c:
db:e5:09:cb:78:4d:f5:62:7a:f8:c9:2f:88:58:bd:
f5:64:c4:cf:7f:5c:8d:1b:a9:66:65:74:06:c3:b9:
55:93:34:5f:6d:e1:fe:d4:ad:2e:0d:d3:87:a4:d3:
2c:12:66:cd:77:89:40:30:18:57:02:2e:1e:19:e0:
77:4a:5d:d9:ce:e3:59:af:30:49:47:b1:2d:a0:75:
b7:ee:9f:91:74:c4:de:0d:79:c3:49:a8:c0:7b:96:
18:6c:e5:10:c3:82:00:48:a3:a7:be:da:26:0f:68:
7e:1d:db:70:7a:99:4a:85:28:11:aa:06:74:59:03:
42:a1:89:26:d0:62:53:a4:ca:a6:e4:1a:ba:a3:b0:
40:c3:ac:66:2d:a0:30:97:7d:69:35:ab:1d:fe:99:
c9:6a:ae:87:36:36:26:e8:73:a1:90:62:3f:07:b1:
33:40:2c:77:92:58:91:ba:fc:a3:a4:c7:b2:39:21:
55:af:45:cd:4c:b7:da:59:81:4b:31:96:a7:a1:34:
58:b7:92:e9:8b:65:74:48:fc:91:e5:90:d3:a6:8b:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0D:99:66:A7:FE:69:CF:91:9B:FE:66:05:3D:EB:73:10:71:AA:23
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208193.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7381::/48
Signature Algorithm: sha256WithRSAEncryption
7a:79:83:12:00:2d:14:27:9a:31:bc:00:76:46:c6:7d:6e:88:
a8:f7:69:f5:10:1e:e0:3a:6e:26:0b:e0:5f:8d:9b:98:ee:e1:
e0:26:ff:11:af:a2:f2:88:04:0c:5e:18:88:a8:f8:45:78:55:
68:ba:5b:34:1b:1b:06:88:90:85:42:bd:e7:ee:88:a6:06:14:
9a:cd:a9:bf:3b:3b:25:ca:fb:c2:ed:c7:f4:56:9e:f8:6e:c8:
98:78:50:99:ba:fa:b9:6c:e5:4a:b7:28:65:b7:62:ac:61:5a:
4d:d3:c0:21:da:63:6f:47:4c:61:a3:b5:12:3b:61:01:6d:9d:
cc:0a:33:23:d3:ef:bb:9d:a2:de:32:42:3b:a0:93:43:0a:01:
0a:58:74:32:cb:ef:c3:94:97:92:8f:07:06:86:38:54:3d:d9:
ce:91:92:87:fa:2e:01:a3:c1:b6:6c:39:48:de:9d:71:3e:c0:
4a:77:9f:be:6d:28:3c:7d:3f:5a:fa:86:8d:e9:b8:ae:8f:fe:
0b:d3:59:f8:02:d5:48:18:ee:5b:24:72:72:0f:de:da:ea:c2:
ee:e0:18:c1:37:18:05:0f:fc:40:8e:8f:1a:9b:a6:84:b5:01:
0f:a4:22:b2:5f:9b:1e:42:a0:95:7a:17:9a:f3:91:e3:51:0b:
a4:83:ae:e5
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUGq8CVHjIheGVxB8xFH7lsRMDg1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMjA5MTMwMTE1MjdaFw0yMzA5MTIwMTIwMjdaMDMxMTAvBgNV
BAMTKDE0MEQ5OTY2QTdGRTY5Q0Y5MTlCRkU2NjA1M0RFQjczMTA3MUFBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9o8hhhSUFcY2EjQf9BAEC9DB6
fs4xp+YQ57zWQR+0q4QnmlRRB/8g2CodDNvlCct4TfVievjJL4hYvfVkxM9/XI0b
qWZldAbDuVWTNF9t4f7UrS4N04ek0ywSZs13iUAwGFcCLh4Z4HdKXdnO41mvMElH
sS2gdbfun5F0xN4NecNJqMB7lhhs5RDDggBIo6e+2iYPaH4d23B6mUqFKBGqBnRZ
A0KhiSbQYlOkyqbkGrqjsEDDrGYtoDCXfWk1qx3+mclqroc2Niboc6GQYj8HsTNA
LHeSWJG6/KOkx7I5IVWvRc1Mt9pZgUsxlqehNFi3kumLZXRI/JHlkNOmi3XFAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUFA2ZZqf+ac+Rm/5mBT3rcxBxqiMwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwODE5My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABzgTANBgkqhkiG9w0BAQsFAAOC
AQEAenmDEgAtFCeaMbwAdkbGfW6IqPdp9RAe4DpuJgvgX42bmO7h4Cb/Ea+i8ogE
DF4YiKj4RXhVaLpbNBsbBoiQhUK95+6IpgYUms2pvzs7Jcr7wu3H9Fae+G7ImHhQ
mbr6uWzlSrcoZbdirGFaTdPAIdpjb0dMYaO1EjthAW2dzAozI9Pvu52i3jJCO6CT
QwoBClh0Msvvw5SXko8HBoY4VD3ZzpGSh/ouAaPBtmw5SN6dcT7ASnefvm0oPH0/
WvqGjem4ro/+C9NZ+ALVSBjuWyRycg/e2urC7uAYwTcYBQ/8QI6PGpumhLUBD6Qi
sl+bHkKglXoXmvOR41ELpIOu5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org