Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210715.roa
File: AS210715.roa (raw, json)
Hash identifier: IqxfbUgSrrSR5asON8ntj7JVyx8FOrubdjKuEydqZJk=
Subject key identifier: A4:72:D2:F3:2F:C8:E2:0F:4F:B7:4B:F2:63:50:CB:52:2C:FE:07:EF
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 27BE0D6951CC2A89C5CB1B73712C7E652B898D84
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210715.roa
Signing time: Tue 13 Sep 2022 01:20:23 +0000
ROA not before: Tue 13 Sep 2022 01:15:23 +0000
ROA not after: Tue 12 Sep 2023 01:20:23 +0000
asID: 210715
IP address blocks: 2a0f:9400:7718::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:be:0d:69:51:cc:2a:89:c5:cb:1b:73:71:2c:7e:65:2b:89:8d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:23 2022 GMT
Not After : Sep 12 01:20:23 2023 GMT
Subject: CN=A472D2F32FC8E20F4FB74BF26350CB522CFE07EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0a:bf:8a:47:6a:75:01:48:27:b2:1f:0e:2f:
ce:fc:c3:55:59:08:91:65:7b:c4:78:ff:41:d1:d9:
f1:55:8d:b7:75:05:1b:75:38:6c:1a:11:bf:c3:f9:
bd:54:26:81:cb:77:1b:64:1d:f6:f1:56:2f:b7:5d:
eb:66:51:8a:d2:79:91:4f:ee:74:11:3d:a3:03:bd:
d4:9a:f2:0c:27:19:3d:59:94:0f:ee:18:0f:e2:30:
02:a8:aa:47:2d:8b:11:49:a4:6f:e0:88:3f:c7:46:
71:4a:22:b3:58:72:7d:26:11:b7:7f:db:a7:f8:0b:
10:41:14:a6:8c:4a:6a:0f:ba:0a:2e:98:2b:e5:53:
ea:c2:c0:5a:02:d4:1d:00:05:b5:ed:b5:9a:5d:a6:
b7:ec:97:05:05:e6:2a:e5:a8:35:b3:6a:27:32:70:
77:e9:7d:9b:32:d5:aa:e4:07:f9:28:91:a1:04:03:
7e:09:56:98:f0:8b:7b:fc:67:14:50:bf:75:37:18:
a0:66:d9:76:0d:93:93:26:78:8b:d3:9c:29:c8:14:
62:1b:78:0c:4e:49:89:35:3d:ca:61:37:e1:1d:92:
2d:7b:56:c9:4e:fc:b8:0f:4b:92:dc:5c:fa:01:4b:
b9:34:2d:b0:e1:1d:94:92:35:96:4d:b1:40:7e:0d:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:72:D2:F3:2F:C8:E2:0F:4F:B7:4B:F2:63:50:CB:52:2C:FE:07:EF
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7718::/48
Signature Algorithm: sha256WithRSAEncryption
bd:e5:a5:03:5b:43:35:75:5d:7d:76:6f:dd:95:14:1b:fd:51:
aa:d3:86:f3:5d:9b:de:8a:46:7d:63:9c:28:84:8f:26:a6:a1:
07:f9:1f:ae:8c:86:01:ea:16:77:ac:c1:d9:25:f6:83:75:c0:
8b:17:1b:30:0d:e6:98:12:5e:15:14:7d:e1:96:b2:b8:09:a5:
e1:2b:ec:76:22:ad:00:70:e5:89:51:db:df:5f:f3:0e:d8:2d:
d3:fa:b4:e2:2c:8f:1a:94:12:15:76:af:ce:02:7f:09:11:e8:
20:6d:c3:01:52:29:32:fd:d8:c1:e8:b6:5a:52:98:90:52:3c:
12:d5:3d:47:95:ac:2c:40:5c:24:a8:12:86:a4:97:4b:0b:7d:
ed:a8:ae:34:ca:84:7c:f1:9b:8f:c3:57:bb:cc:52:53:95:cf:
6b:8d:17:bf:9e:6d:ff:12:90:81:08:06:93:23:ed:01:54:17:
f1:69:c5:55:87:ca:ba:99:c0:79:f5:e9:69:93:b4:6b:5b:66:
47:e1:84:72:52:c1:36:e5:04:8a:26:e8:94:a0:47:79:40:3d:
77:d6:21:a8:59:ac:c2:d7:e3:8e:3c:18:4b:a1:32:8c:7b:e0:
70:39:87:44:03:7b:06:33:9d:e4:12:e9:de:14:31:5b:49:f7:
1a:78:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org