Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210903.roa
File: AS210903.roa (raw, json)
Hash identifier: 0Oacy8rulCVwBXMC96Yj3NVdckjVmhfdOoOGogLSfH8=
Subject key identifier: E9:4D:19:A6:19:45:F3:D4:FD:5A:7B:D4:55:2C:00:04:FA:8F:7F:05
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 70F9380A1C0B14299B54FD4D2564E8205B5833C4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210903.roa
Signing time: Tue 13 Sep 2022 01:20:23 +0000
ROA not before: Tue 13 Sep 2022 01:15:23 +0000
ROA not after: Tue 12 Sep 2023 01:20:23 +0000
asID: 210903
IP address blocks: 2a0f:9400:6400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f9:38:0a:1c:0b:14:29:9b:54:fd:4d:25:64:e8:20:5b:58:33:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:23 2022 GMT
Not After : Sep 12 01:20:23 2023 GMT
Subject: CN=E94D19A61945F3D4FD5A7BD4552C0004FA8F7F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ed:cd:8f:12:75:96:ae:43:62:b0:64:23:1e:
d6:e4:6d:bc:df:f3:6b:c8:d4:1b:31:fc:09:42:1a:
47:10:b6:64:ea:01:74:66:51:d3:02:75:5e:6d:f1:
ec:f1:fb:86:c5:58:74:ef:f3:cb:ee:2e:fe:3e:50:
f3:62:f2:8c:9b:07:7f:6d:c0:7e:51:86:cf:96:8a:
e5:a7:04:bf:48:ce:d6:80:21:90:a3:3b:e6:2a:98:
92:63:c4:1a:eb:3b:c0:f3:21:e3:14:c5:5e:ac:d3:
2c:00:a9:37:e8:07:c2:fd:5c:07:d0:73:d7:68:65:
d0:ba:7f:d1:4f:63:5f:81:7e:ca:15:e8:24:f9:5c:
8d:e7:48:13:a9:72:fc:ce:1b:e6:9f:97:01:d2:59:
5a:53:a0:a7:41:a0:16:de:41:8b:e4:36:16:20:97:
0e:75:49:60:b2:a2:dd:a9:5b:97:6c:d0:e1:f2:21:
1c:7a:df:4e:0a:ec:f5:41:ac:fe:8d:13:bd:c4:b2:
99:e9:ae:f5:1d:8f:06:f2:e9:47:d8:9b:c9:a6:82:
98:e6:5a:d3:2b:ff:10:69:3c:e0:fe:c0:35:0f:a8:
33:1e:10:7e:47:91:0f:76:a0:1f:b5:9c:16:74:7d:
85:32:e4:13:74:da:ac:e7:32:68:c5:c5:34:dd:3c:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4D:19:A6:19:45:F3:D4:FD:5A:7B:D4:55:2C:00:04:FA:8F:7F:05
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210903.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6400::/40
Signature Algorithm: sha256WithRSAEncryption
be:28:f4:09:c6:4a:6b:aa:9a:a6:c4:70:23:50:66:85:80:ad:
69:dd:bd:3f:32:48:52:6f:44:9c:8b:4f:06:99:f1:10:70:5e:
94:e5:77:32:92:09:38:5d:56:51:1a:21:fa:9a:7c:39:b7:9c:
5c:2d:f5:2e:55:67:1a:46:87:8f:56:df:4b:d0:7c:cd:cd:9c:
e3:94:69:46:03:24:59:41:7e:7a:22:84:3e:af:83:be:7d:72:
0e:2f:07:61:e1:38:57:ce:b0:47:5c:5b:1e:ce:65:52:87:fc:
ed:43:54:e0:6c:bb:03:f9:58:5d:66:0d:65:01:22:3b:18:e2:
6c:fe:28:d3:8c:ce:22:70:20:42:d4:30:f9:39:1a:75:db:19:
d1:cf:f0:a7:c2:75:0b:e9:24:71:67:85:85:eb:b2:ae:45:58:
57:15:82:be:70:43:ab:2f:b5:c0:39:4a:f7:87:c3:4e:0e:7d:
00:62:a9:c5:d3:61:f7:95:79:fd:dd:32:53:d2:99:81:e8:81:
76:43:1f:7a:65:c0:76:e9:7c:19:14:82:11:cd:f7:97:f9:25:
7c:4d:fd:99:42:33:99:1a:be:9e:ef:f5:e9:d3:a4:2d:bf:9a:
a3:e9:f1:a0:94:12:f9:a1:f8:6e:74:10:21:36:d6:6c:5e:38:
05:22:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org