Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209925.roa
File: AS209925.roa (raw, json)
Hash identifier: QKcbnUw5XgNaR9b8mBfELYr8b3npLRdsAt+p/fbVr2k=
Subject key identifier: AB:B2:73:C1:E1:AD:14:2D:68:94:2F:7E:CD:4C:CF:27:55:35:77:90
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1F3900E93BD91B2C2CA63999C114797ABE524457
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209925.roa
Signing time: Sun 19 Feb 2023 02:01:00 +0000
ROA not before: Sun 19 Feb 2023 01:56:00 +0000
ROA not after: Sun 18 Feb 2024 02:01:00 +0000
asID: 209925
IP address blocks: 2a0f:9400:7e09::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:39:00:e9:3b:d9:1b:2c:2c:a6:39:99:c1:14:79:7a:be:52:44:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 19 01:56:00 2023 GMT
Not After : Feb 18 02:01:00 2024 GMT
Subject: CN=ABB273C1E1AD142D68942F7ECD4CCF2755357790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:55:6e:4f:c1:17:b6:31:cd:0e:40:29:07:
a0:50:89:4e:19:2b:81:8e:fc:e4:dd:0f:1e:c5:49:
42:f2:0d:5f:ca:05:6d:4f:62:f8:d9:b4:34:80:38:
85:52:b3:07:34:7d:d9:1b:3f:8d:4f:26:54:f3:8d:
6e:83:93:53:93:d8:36:4e:fc:3b:12:55:65:7b:04:
be:19:5e:79:a6:4f:5e:9d:78:08:b1:8b:f6:18:99:
28:91:d6:8b:b2:e6:4b:09:aa:b1:20:83:c4:fc:40:
ad:dd:9c:f7:cd:85:a9:0b:60:89:a7:80:de:11:da:
49:d5:a9:00:52:9e:55:5a:b7:a8:4b:eb:10:4b:26:
5f:3b:eb:ec:55:b8:a5:9d:21:76:b2:45:c7:c4:84:
7a:0a:fd:b1:85:c9:a6:fc:b1:4f:83:77:07:19:96:
ca:fa:b7:93:d2:fb:af:6b:bb:80:92:96:13:99:7b:
1f:ec:1b:07:24:15:71:53:f6:cc:39:ab:7f:6f:b9:
dc:16:5c:13:71:53:e2:7c:c4:7b:e9:8f:cf:62:97:
9f:0c:69:4a:e2:e1:22:ab:01:3e:67:ec:4f:39:cc:
e7:ea:bd:93:f2:c1:29:33:cd:4a:ea:57:a3:01:6d:
a4:6c:43:1f:8e:c4:41:ff:50:b6:90:6f:04:90:fa:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B2:73:C1:E1:AD:14:2D:68:94:2F:7E:CD:4C:CF:27:55:35:77:90
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e09::/48
Signature Algorithm: sha256WithRSAEncryption
d1:fb:e7:31:80:04:d5:8b:ff:b9:ce:e3:ee:d0:3a:07:4c:f0:
8b:c3:8c:84:e5:5b:3f:05:5e:6d:df:7f:65:d7:43:3e:b2:5d:
04:c6:06:b2:59:b2:7a:48:8f:d1:a3:b6:b8:93:0c:6b:b1:d3:
ab:29:93:fd:51:46:40:5b:4c:83:24:f3:45:48:b7:ac:f4:11:
81:f8:08:1a:78:5f:16:51:54:3d:26:21:df:f0:6d:5b:1f:57:
0f:07:f3:45:8f:82:69:e8:40:36:d9:d1:3e:bd:0f:1f:42:ad:
49:61:0f:13:f4:6b:3f:16:f3:c2:4a:01:75:4f:d0:53:4a:0d:
57:dc:61:db:6a:48:43:0e:f0:1e:36:e0:ad:60:c9:22:65:01:
c0:13:8c:c8:00:ab:0c:d8:55:26:f8:89:49:09:02:ad:26:35:
12:bb:0f:3d:fe:a3:11:4a:b7:c5:52:83:3f:b0:75:f5:1b:a8:
85:0d:b7:b1:39:56:c3:01:3f:49:c3:08:f6:1a:9c:a8:b5:53:
8c:d3:e8:79:1d:95:41:c8:0a:4e:40:d6:de:0a:71:b8:12:5d:
2b:39:2a:42:71:99:af:37:a3:3e:28:2c:b2:61:1a:8c:00:f9:
44:09:de:46:1d:be:b7:38:61:ac:66:39:2b:8b:52:34:c4:30:
5d:04:b3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org