Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208548.roa
File: AS208548.roa (raw, json)
Hash identifier: TZa8/ZCy/5sz+352ERC+h5eU/FekEORCMhL8nVPkR+k=
Subject key identifier: D0:F9:B3:81:DD:4C:96:E8:2E:AD:D2:50:24:76:2F:63:C5:6C:33:5B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 435B85CCDABC2B044811B39F7B39860469BEF978
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208548.roa
Signing time: Tue 13 Sep 2022 01:20:24 +0000
ROA not before: Tue 13 Sep 2022 01:15:24 +0000
ROA not after: Tue 12 Sep 2023 01:20:24 +0000
asID: 208548
IP address blocks: 2a0f:9400:610a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5b:85:cc:da:bc:2b:04:48:11:b3:9f:7b:39:86:04:69:be:f9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:24 2022 GMT
Not After : Sep 12 01:20:24 2023 GMT
Subject: CN=D0F9B381DD4C96E82EADD25024762F63C56C335B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:e7:41:2d:94:06:40:99:f5:eb:b4:20:a9:
94:01:fa:8a:11:05:60:da:c0:04:1a:e8:d7:04:8f:
1c:74:ef:d2:4c:df:5e:36:f9:94:61:2e:33:a5:55:
9f:03:61:c7:01:32:14:ae:fe:8c:4c:73:39:db:b8:
4d:e0:ad:4f:fe:b6:27:eb:6f:81:a8:34:18:27:70:
71:21:0a:9e:02:52:ce:b3:c2:c9:f5:43:cd:6e:e6:
e5:1e:ef:62:44:35:5d:47:4d:84:7a:4d:75:a0:f3:
ac:99:25:8a:73:47:12:c6:37:c4:e1:94:14:54:56:
94:d7:16:c5:39:ef:49:0a:d3:ab:83:1d:01:5e:2e:
14:f9:fd:22:e9:b3:b4:16:bb:64:66:24:3d:93:cd:
52:0d:c9:93:24:a1:38:90:6f:b5:39:fa:66:3f:0c:
0d:6e:ae:a8:f2:64:75:7a:9c:ba:8f:7f:74:eb:79:
1c:d0:be:c0:df:eb:da:d9:71:95:f6:17:c0:fc:c9:
db:ae:54:b4:f5:f5:68:c5:fc:57:02:7a:af:1e:84:
3f:f2:d5:db:46:fd:29:49:a6:a1:71:cf:5e:fa:44:
1f:24:a0:8b:23:4f:9a:0a:24:3f:fd:35:24:fc:cd:
1e:c0:01:7c:f7:48:18:38:7e:97:c1:8b:ee:78:14:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F9:B3:81:DD:4C:96:E8:2E:AD:D2:50:24:76:2F:63:C5:6C:33:5B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610a::/48
Signature Algorithm: sha256WithRSAEncryption
7c:b9:94:7f:a9:cf:23:57:d8:7c:85:2e:14:11:17:9c:d0:52:
2a:89:9b:96:41:6e:af:a9:44:d6:ec:29:23:4b:22:bf:05:7b:
83:b5:1a:79:28:a9:e4:d3:17:65:65:29:2b:a3:8c:9f:4b:63:
c8:e0:a3:ff:59:2e:84:42:18:08:a0:78:a7:cb:04:df:ae:43:
48:91:69:7d:ad:37:25:8c:dd:99:cb:81:ec:80:93:38:0a:eb:
36:de:f9:a9:66:02:fa:cf:ee:c5:d7:81:ae:5d:5b:9c:ad:f6:
1e:57:af:ae:41:dc:c9:66:39:12:56:3c:73:1d:60:02:11:ea:
e9:9d:87:96:12:22:1b:aa:a6:90:fa:60:4e:b2:1b:4c:43:55:
d1:ce:2c:bd:6e:3b:29:ea:d9:fd:7b:79:0a:65:33:cf:d1:3f:
1b:c5:3e:cc:10:c9:f6:83:68:99:7a:28:46:70:4d:2d:22:b1:
a7:45:ff:a7:64:e7:26:24:c1:b4:c9:38:ac:60:6d:51:a0:a2:
23:dd:40:35:70:eb:eb:10:7c:66:1a:1a:5e:bc:8f:db:b6:4e:
e0:99:a3:fa:c7:48:77:67:2b:bd:37:f7:d2:39:c0:b2:22:0c:
e0:19:5f:f4:9e:16:f1:c2:93:66:fe:96:59:eb:44:71:8d:39:
39:d8:89:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org