Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210872.roa
File: AS210872.roa (raw, json)
Hash identifier: 8tS56LWwRNa3zzC1Ev0tiJ/tq80W6yjHQxLYSKWSAIw=
Subject key identifier: 6D:1E:AC:FA:00:A1:4C:4A:46:2B:B7:51:2F:17:94:77:5A:AD:AA:E9
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7C2FA5D75E75F9E662F01CCEFE0A3BF6E0998066
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210872.roa
Signing time: Thu 16 Dec 2021 03:26:31 +0000
ROA not before: Thu 16 Dec 2021 03:21:31 +0000
ROA not after: Thu 15 Dec 2022 03:26:31 +0000
asID: 210872
IP address blocks: 2a0f:9400:7b00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2f:a5:d7:5e:75:f9:e6:62:f0:1c:ce:fe:0a:3b:f6:e0:99:80:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 16 03:21:31 2021 GMT
Not After : Dec 15 03:26:31 2022 GMT
Subject: CN=6D1EACFA00A14C4A462BB7512F1794775AADAAE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:7f:a0:f4:12:7c:2a:08:ec:35:07:5d:3f:
5a:ac:50:4c:1a:9b:88:f4:14:f6:82:d2:79:1a:73:
af:90:91:d4:80:e9:74:42:bc:83:4a:08:7b:e9:26:
4e:fc:11:40:d1:64:90:60:88:85:b5:07:c0:a7:2c:
f5:74:9a:5c:20:1c:9a:ba:29:fe:a2:32:27:7b:67:
b5:f1:f9:a7:8f:c6:32:bc:19:69:1e:e2:e6:0c:72:
8a:d3:d0:f9:9e:3d:7c:59:cc:ff:ee:41:f2:0d:e9:
2f:6a:de:d9:e8:35:a0:d0:05:d4:39:01:fc:ab:35:
70:a4:f5:e2:1f:bd:b3:21:35:5e:62:bb:d0:9e:72:
f3:95:0f:3d:f8:47:43:d7:18:22:29:02:6c:86:92:
7a:99:29:a3:41:fc:66:e9:4a:5a:a9:a1:e6:6e:8c:
ff:b4:de:87:ab:dd:cd:c1:dd:b9:70:56:c4:bd:22:
3b:70:41:bc:6a:a6:cc:96:aa:32:8e:e9:86:0b:9d:
7d:28:2b:c5:f2:80:7d:3d:fb:ac:0b:d6:48:b8:ad:
b8:25:3e:fb:4a:03:d2:d4:e3:89:b3:ba:18:12:c4:
69:e8:19:01:1c:53:95:fa:bd:54:bc:82:d1:ae:6f:
59:2e:24:bb:5f:63:5b:b2:9c:7b:cf:16:85:71:b2:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:AC:FA:00:A1:4C:4A:46:2B:B7:51:2F:17:94:77:5A:AD:AA:E9
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210872.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7b00::/40
Signature Algorithm: sha256WithRSAEncryption
d3:51:4f:6f:63:96:56:86:60:b9:c2:dc:68:76:97:df:4e:f0:
b3:b1:ad:86:31:56:c9:57:bd:63:2f:c6:78:3c:ea:e1:fe:72:
2f:1f:28:5d:86:80:3e:11:ba:e6:54:53:2d:2f:73:6e:45:53:
f4:96:09:b8:ce:48:8d:72:28:cf:a1:d3:22:f2:b1:32:0a:a5:
da:2e:32:81:b9:5a:b4:3a:8d:0d:35:cf:26:d1:d3:7a:75:9a:
bc:d1:ea:65:e0:ed:f2:e8:b8:49:a6:23:f2:c2:4e:57:fb:00:
60:2b:75:76:af:77:66:5c:4d:f9:7c:fe:61:f9:b3:3d:04:6f:
57:70:2c:9b:71:fa:ed:e9:58:16:cd:ae:32:7d:08:b3:b7:c7:
70:69:88:65:c0:ef:af:bd:53:a1:d1:be:89:7e:19:79:24:ff:
91:72:70:32:63:3a:df:d8:29:4b:e7:e8:74:4d:18:17:a0:5a:
62:a5:a4:fc:18:6c:50:1d:95:20:1d:b0:62:21:d1:9a:f3:c4:
ec:ab:84:c1:cc:23:9e:49:b2:80:27:18:00:41:49:a1:8b:c9:
19:31:af:be:26:6c:60:3f:83:47:00:c0:64:f8:b1:f9:e2:3d:
ca:42:5a:34:04:07:0e:28:de:be:15:cd:48:d1:55:77:76:d2:
c9:9f:18:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org