Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
File: AS210718.roa (raw, json)
Hash identifier: pv0rQs003Xeyg67jSqgLncqI9ukBcJ+ls23MUnHtO2c=
Subject key identifier: 21:9F:29:CC:DB:6C:43:FD:17:16:BB:DF:76:36:A2:A8:0F:C1:5A:E3
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 11FB71089664E4BF6A18DAB3E425AEAC7DECDF23
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
Signing time: Sun 19 Feb 2023 13:40:32 +0000
ROA not before: Sun 19 Feb 2023 13:35:32 +0000
ROA not after: Sun 18 Feb 2024 13:40:32 +0000
asID: 210718
IP address blocks: 2a0f:9400:7e02::/48 maxlen: 48
2a0f:9400:7e03::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:fb:71:08:96:64:e4:bf:6a:18:da:b3:e4:25:ae:ac:7d:ec:df:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 19 13:35:32 2023 GMT
Not After : Feb 18 13:40:32 2024 GMT
Subject: CN=219F29CCDB6C43FD1716BBDF7636A2A80FC15AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:9f:f5:a3:68:a1:e3:7d:e4:79:5b:95:b6:
5d:38:b9:5e:af:44:39:f0:e7:03:a4:a6:d2:d7:4d:
b9:40:f5:4d:95:f3:08:d8:f9:91:83:4a:74:f8:dc:
c8:18:d8:7f:32:ec:1e:6e:af:0c:0a:49:0d:85:4a:
da:da:ab:9c:9e:71:3b:38:cc:24:00:6f:51:39:b7:
8b:20:3a:74:66:26:5b:79:6f:f5:9c:35:20:69:33:
5e:e2:7f:3a:1c:89:00:64:73:ae:c7:52:71:00:31:
70:2b:2d:50:90:ca:7b:c7:ee:b0:a0:03:76:5b:d2:
f8:c5:cc:d8:fc:18:9e:75:4a:8d:55:32:cb:2e:11:
b4:9c:72:69:12:0d:65:f6:64:1c:3d:d4:ab:45:10:
ab:ed:20:fa:fa:80:27:bb:37:cd:84:93:25:0d:58:
95:ac:b2:80:43:26:d4:b9:1b:c6:84:e1:1a:43:a8:
a3:a1:5a:37:cc:e7:7c:5d:c2:06:94:ab:06:c6:87:
3d:dc:8f:d8:fc:3e:b5:0d:46:06:16:b2:15:b4:bf:
22:f2:52:1e:76:5e:f2:8a:65:d3:fc:2f:bf:18:e8:
1e:54:f0:c0:9e:5b:04:25:bd:89:23:e3:4b:1d:2a:
38:33:3b:89:01:93:15:56:f7:64:64:cb:68:a5:3f:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9F:29:CC:DB:6C:43:FD:17:16:BB:DF:76:36:A2:A8:0F:C1:5A:E3
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e02::/47
Signature Algorithm: sha256WithRSAEncryption
9a:fa:d4:25:a3:40:e9:1d:f4:4f:be:ee:82:e6:8e:7e:ef:43:
2e:e8:74:72:11:93:d8:5f:0d:f3:7a:42:35:eb:c3:fa:41:45:
f3:65:07:94:82:82:21:1e:6b:3f:02:1e:72:88:f8:68:7e:7f:
af:8d:72:92:97:12:20:ee:98:e9:54:f0:0f:5f:5d:78:b4:a2:
de:8c:1c:1b:12:7e:81:2b:c6:40:06:c0:d2:58:7e:05:4f:eb:
b6:b8:d6:41:fe:49:f3:53:fe:13:d4:07:a6:c5:10:ef:ae:e4:
ac:03:89:2a:ae:30:04:f5:d3:26:e6:32:24:3c:fa:d8:f7:30:
f2:29:d7:f3:50:61:0f:5b:8f:24:98:c6:48:59:39:fe:01:a4:
1f:bb:52:f0:a7:3f:4f:3b:ec:c1:c2:4f:46:29:07:f5:d3:ff:
49:53:cc:59:09:d4:fd:21:6e:81:75:9b:bb:15:42:09:85:2a:
b6:34:47:15:3d:75:fe:b4:d9:6c:2a:b6:95:50:6e:c8:f1:02:
f5:d6:18:1f:1f:37:a2:17:92:25:05:99:7b:96:43:23:22:88:
50:92:51:26:cd:2f:36:ad:22:c1:a4:ed:2e:d6:88:84:da:05:
24:e4:3e:19:92:09:77:13:b6:00:2a:16:1f:ff:7c:93:50:df:
ab:4a:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org