Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210815.roa
File: AS210815.roa (raw, json)
Hash identifier: oU6U5bwAqltHtDihSJebVX6tofWz8ZePQwAvMvisEJI=
Subject key identifier: 6B:B4:D8:7F:3A:10:8A:A1:7C:89:6F:3D:26:71:99:6A:2A:4D:E6:EA
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6355F049522DDF7B7BF4460BB05F683FD5A02FD8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210815.roa
Signing time: Tue 15 Aug 2023 02:00:27 +0000
ROA not before: Tue 15 Aug 2023 01:55:27 +0000
ROA not after: Tue 13 Aug 2024 02:00:27 +0000
asID: 210815
IP address blocks: 2a0f:9400:7390::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 30 Sep 2023 21:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:55:f0:49:52:2d:df:7b:7b:f4:46:0b:b0:5f:68:3f:d5:a0:2f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:27 2023 GMT
Not After : Aug 13 02:00:27 2024 GMT
Subject: CN=6BB4D87F3A108AA17C896F3D2671996A2A4DE6EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:bc:87:e3:02:55:e5:86:05:d1:67:6e:10:
b7:22:a1:c5:fb:5a:fc:e0:b2:f7:e2:d0:18:d3:e5:
59:63:cd:bb:cb:99:7e:18:a6:b2:72:c2:9f:3a:db:
ea:2d:ac:ef:6f:8d:3a:66:81:20:cb:54:25:af:20:
cf:84:af:15:a9:58:0a:b7:0e:6d:52:25:63:3b:a9:
67:0d:24:0b:d1:fe:2e:65:70:7e:45:06:80:1a:7f:
2c:01:f1:cd:a0:cb:48:91:16:e5:4f:35:11:a4:0f:
f9:2d:1e:38:b9:4b:55:da:a7:48:85:d0:da:52:f6:
fd:62:ca:6d:d6:dc:d2:90:49:76:32:61:ec:b3:88:
88:a5:ec:22:79:aa:4d:f1:44:0d:8c:54:87:a7:0c:
c8:da:48:b1:b0:5e:75:28:51:96:26:87:ea:6f:88:
85:b9:a4:62:f8:ed:16:d7:38:b0:5f:01:97:65:61:
65:cb:63:cd:c2:42:f6:92:ee:49:b9:8b:68:2d:05:
ce:64:3b:fa:dd:65:88:25:72:c1:28:1e:0a:01:03:
63:cd:6c:f1:61:7e:5b:32:07:6e:a5:7d:a2:e7:a6:
5e:88:a6:1f:b8:fe:9d:c2:1b:42:07:e3:bc:04:43:
26:f8:1f:12:81:92:a4:0e:70:d7:4a:71:c9:a9:43:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B4:D8:7F:3A:10:8A:A1:7C:89:6F:3D:26:71:99:6A:2A:4D:E6:EA
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210815.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7390::/44
Signature Algorithm: sha256WithRSAEncryption
29:78:81:87:f1:be:7e:c4:77:bc:14:89:be:f0:c4:fb:2b:7a:
c6:e1:6d:a4:43:55:7e:29:77:e9:e2:c8:da:6c:76:49:19:db:
0f:dd:b5:2f:22:4f:95:d4:05:e2:38:f7:9a:af:52:c5:0b:50:
e0:47:6f:00:bc:89:38:df:d9:b0:ce:c4:87:ea:b0:c3:0f:32:
f2:06:a1:31:78:3a:fd:5f:c3:7b:4a:a0:a7:32:84:81:81:27:
1d:d8:60:ea:0d:d3:e9:2b:83:bc:c0:fc:0e:ac:bd:a1:f3:5b:
55:eb:17:bd:65:51:80:11:3c:c5:53:95:89:0b:ab:c8:73:19:
41:d7:de:71:ec:fc:15:a7:43:2e:db:1a:6a:ad:5c:2c:db:e4:
4a:c2:01:35:45:fc:b1:c6:ce:5a:53:e7:18:87:90:15:6e:9a:
ad:b6:a3:ab:65:53:34:87:51:5d:b1:9c:79:ca:b0:f1:b7:d0:
a0:50:7e:dd:f8:c0:0b:5b:1a:21:a8:3d:3f:3a:5a:1f:48:8a:
3e:a2:dd:2c:da:60:13:7a:0f:a1:af:db:98:41:8a:6e:f9:dc:
c2:79:be:24:4f:b5:89:9f:13:f7:c6:30:76:5d:ea:d7:34:6f:
c8:e5:1b:58:3f:f8:1f:e9:8e:ea:c6:13:6b:83:4d:91:b9:9f:
a4:fb:2c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org