Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210614.roa
File: AS210614.roa (raw, json)
Hash identifier: iPdwkx0nlEUBqviF6Qynm+kiWEhoVqDHyxjTEvZRQgM=
Subject key identifier: 9C:20:22:22:90:C4:8E:0D:7D:B5:5D:F7:82:0A:75:89:D9:1A:FE:73
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 39A7003A3CEE91F40A195C56FB7B0FDC09BE53FA
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210614.roa
Signing time: Tue 13 Sep 2022 01:20:26 +0000
ROA not before: Tue 13 Sep 2022 01:15:26 +0000
ROA not after: Tue 12 Sep 2023 01:20:26 +0000
asID: 210614
IP address blocks: 2a0f:9400:7384::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a7:00:3a:3c:ee:91:f4:0a:19:5c:56:fb:7b:0f:dc:09:be:53:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:26 2022 GMT
Not After : Sep 12 01:20:26 2023 GMT
Subject: CN=9C20222290C48E0D7DB55DF7820A7589D91AFE73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:d7:a5:ff:c0:00:ba:68:b3:c8:06:0f:ab:
30:ff:2a:48:7b:3d:85:01:5d:07:db:62:a5:0a:d3:
1b:ec:be:4e:c5:4c:94:78:87:32:a3:d5:6b:73:4c:
3f:83:ec:cc:5d:11:63:79:aa:0e:07:8e:4c:33:5b:
48:fe:a9:d4:76:f9:4d:b2:2c:ae:7c:4d:cf:8d:64:
df:d4:02:e6:e2:20:1e:80:64:55:a9:c2:56:9e:a7:
e4:e4:0f:bc:1d:43:7f:49:19:1a:c7:8b:22:b1:90:
4a:a3:18:a1:e8:fb:59:08:30:2e:76:d1:e7:9f:76:
36:7c:8c:16:5c:fc:02:5c:aa:ca:91:61:c0:9f:70:
a7:37:2e:c2:e2:ca:7c:e1:5d:a6:20:17:aa:9a:ea:
ab:86:59:25:20:eb:9f:2d:b4:89:b4:2f:84:b6:b0:
01:04:22:99:d6:48:f0:32:ad:d0:6e:1b:a1:9a:3a:
18:0a:e8:a5:13:0b:58:9d:9f:25:56:1c:4e:4b:59:
dd:97:8b:b7:fb:d6:86:a6:59:f9:f7:8d:ca:b2:b0:
4b:fb:ff:fd:5e:33:be:61:f0:8c:40:8b:83:41:9c:
fd:78:01:af:e9:ec:2e:52:c4:d2:f2:4f:5b:28:08:
5d:d6:b2:3c:ea:32:42:d9:27:de:97:9d:85:cc:5b:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:20:22:22:90:C4:8E:0D:7D:B5:5D:F7:82:0A:75:89:D9:1A:FE:73
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210614.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7384::/48
Signature Algorithm: sha256WithRSAEncryption
c0:cf:88:7f:3a:dd:70:f5:d6:4e:41:a6:18:57:97:56:13:c1:
3d:cd:e9:5f:65:47:db:7d:c6:44:98:b2:8c:5a:d7:53:e7:a1:
9e:05:3c:47:b4:2e:e1:a4:d3:b9:12:77:75:71:b9:18:d6:14:
d8:0e:d9:5d:91:23:6e:47:fa:5b:8a:b1:a3:e6:8c:f5:10:f1:
2e:45:92:5c:51:6a:3f:f2:19:c3:f9:73:07:ec:cf:0e:45:83:
a6:d2:cc:c3:c1:c3:d2:57:ec:ae:32:73:3a:49:11:2e:e3:b3:
24:2e:3b:09:09:b3:15:07:00:43:30:00:3b:77:c0:f8:ac:69:
55:eb:b1:4b:44:be:eb:e2:25:ef:a4:9d:5e:05:1b:1b:ab:28:
30:4b:23:e3:a5:5b:92:d5:cd:f3:83:d5:e9:40:97:7d:71:94:
c9:31:9f:ba:85:3d:44:a5:86:ed:18:d8:be:0e:c4:a5:9c:cf:
44:03:30:6e:8e:25:e3:91:8b:89:33:f0:9b:b1:86:05:ac:19:
fb:8b:fe:66:05:62:fd:27:12:44:e4:1a:44:49:78:b4:c6:c3:
91:50:07:d1:93:7b:fa:af:d2:e8:8c:75:5d:01:dd:cc:c9:1c:
28:b4:5c:00:6d:4b:d1:68:ff:69:54:4f:38:53:ba:02:51:31:
a7:82:d2:1e
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUOacAOjzukfQKGVxW+3sP3Am+U/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMjA5MTMwMTE1MjZaFw0yMzA5MTIwMTIwMjZaMDMxMTAvBgNV
BAMTKDlDMjAyMjIyOTBDNDhFMEQ3REI1NURGNzgyMEE3NTg5RDkxQUZFNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0del/8AAumizyAYPqzD/Kkh7
PYUBXQfbYqUK0xvsvk7FTJR4hzKj1WtzTD+D7MxdEWN5qg4HjkwzW0j+qdR2+U2y
LK58Tc+NZN/UAubiIB6AZFWpwlaep+TkD7wdQ39JGRrHiyKxkEqjGKHo+1kIMC52
0eefdjZ8jBZc/AJcqsqRYcCfcKc3LsLiynzhXaYgF6qa6quGWSUg658ttIm0L4S2
sAEEIpnWSPAyrdBuG6GaOhgK6KUTC1idnyVWHE5LWd2Xi7f71oamWfn3jcqysEv7
//1eM75h8IxAi4NBnP14Aa/p7C5SxNLyT1soCF3WsjzqMkLZJ96XnYXMWyzDAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUnCAiIpDEjg19tV33ggp1idka/nMwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMDYxNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABzhDANBgkqhkiG9w0BAQsFAAOC
AQEAwM+IfzrdcPXWTkGmGFeXVhPBPc3pX2VH233GRJiyjFrXU+ehngU8R7Qu4aTT
uRJ3dXG5GNYU2A7ZXZEjbkf6W4qxo+aM9RDxLkWSXFFqP/IZw/lzB+zPDkWDptLM
w8HD0lfsrjJzOkkRLuOzJC47CQmzFQcAQzAAO3fA+KxpVeuxS0S+6+Il76SdXgUb
G6soMEsj46VbktXN84PV6UCXfXGUyTGfuoU9RKWG7RjYvg7EpZzPRAMwbo4l45GL
iTPwm7GGBawZ+4v+ZgVi/ScSROQaREl4tMbDkVAH0ZN7+q/S6Ix1XQHdzMkcKLRc
AG1L0Wj/aVRPOFO6AlExp4LSHg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org