Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210912.roa
File: AS210912.roa (raw, json)
Hash identifier: SRWo+qprC/Ai6ZPKK89plWk7DbKjy9pDha3JKFqsl7s=
Subject key identifier: 2F:51:05:05:1F:CE:E1:B9:AC:9C:CF:DF:01:1D:FD:6A:CC:70:6C:5B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 792FA74770F9C33660A01640928CFEAEEAC3D005
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210912.roa
Signing time: Tue 21 Mar 2023 22:48:49 +0000
ROA not before: Tue 21 Mar 2023 22:43:49 +0000
ROA not after: Tue 19 Mar 2024 22:48:49 +0000
asID: 210912
IP address blocks: 2a0f:9400:6117::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:2f:a7:47:70:f9:c3:36:60:a0:16:40:92:8c:fe:ae:ea:c3:d0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 21 22:43:49 2023 GMT
Not After : Mar 19 22:48:49 2024 GMT
Subject: CN=2F5105051FCEE1B9AC9CCFDF011DFD6ACC706C5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:f0:44:c6:14:ab:aa:3a:bf:26:3a:c4:3c:
e1:b3:e0:88:35:3e:b1:f5:83:af:48:55:84:78:cb:
7c:b0:4e:d7:66:dc:7c:8a:76:56:f9:47:0b:7c:64:
90:21:bc:c2:dc:94:de:4a:a0:fa:f4:01:5b:0f:00:
c8:31:8b:5e:40:67:cb:0f:c2:4d:06:6c:bb:59:b2:
3b:93:49:e2:31:a7:3b:b2:8f:fb:dd:2e:84:6f:f2:
1b:d8:3e:d1:72:c0:4d:db:1f:bf:9b:7f:51:6f:4c:
0d:91:e0:98:79:a4:13:93:65:c2:14:89:de:7b:96:
e3:c9:d6:5e:0d:69:a2:cd:de:c5:30:db:09:6d:2a:
3b:2a:d6:7a:c6:b9:be:e1:d2:b6:ed:d5:23:f6:2c:
8c:4b:2f:16:87:f2:8a:c0:60:f8:b4:8f:8c:19:2c:
5c:68:89:0e:d3:5d:89:1f:87:ef:aa:4c:69:f6:e3:
78:78:75:4b:bd:9f:e0:aa:f0:9e:4a:a1:dc:e2:b9:
8f:ae:1d:17:c2:58:d0:de:c3:49:ae:80:b0:c1:9e:
73:ae:fd:18:d9:40:c5:16:bc:96:35:46:30:18:e5:
ef:b7:87:02:65:67:37:34:f8:85:fd:bd:aa:bf:78:
be:68:61:13:81:90:67:0b:31:38:e0:44:50:84:0d:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:51:05:05:1F:CE:E1:B9:AC:9C:CF:DF:01:1D:FD:6A:CC:70:6C:5B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6117::/48
Signature Algorithm: sha256WithRSAEncryption
00:2e:79:05:f1:8e:1f:64:dd:0d:80:41:3e:f8:04:d2:3b:66:
18:66:a9:85:24:aa:78:99:ac:8b:b4:fe:34:9a:40:e7:9b:68:
28:22:11:57:61:2d:62:68:af:48:da:f2:a7:ba:4f:6b:f5:9c:
ea:bb:2d:57:38:40:a6:21:de:2f:1e:b1:63:bb:a1:b7:80:b1:
4c:3f:62:0d:04:02:54:b6:d5:87:a7:b5:e6:03:c3:5b:5b:94:
05:fa:d3:74:27:15:4f:88:de:bb:ab:a8:8a:50:30:a3:a5:09:
b1:f1:84:4c:eb:79:6c:2b:ed:bb:d9:cb:05:6b:c1:4e:c0:f4:
64:5c:af:6e:4d:f0:cc:4a:5d:76:3c:5e:fb:e3:a2:d0:e4:0b:
d2:d4:84:02:7e:5d:4f:bd:6d:72:dd:50:24:c3:4c:5d:4d:ef:
c8:a8:5a:10:69:1d:a4:e7:2f:c3:b9:f1:61:a2:23:7a:44:6c:
c8:9e:39:7f:4b:99:e4:4e:e5:57:23:3f:e3:cc:4c:6b:e0:73:
7a:18:a0:44:67:a0:67:f3:e5:b9:b1:57:0f:1b:26:f6:ba:ec:
f9:cb:23:13:f1:70:73:25:55:b2:d5:0f:3c:66:f3:ae:b4:6f:
f6:48:c2:77:25:77:f2:f0:15:dc:91:59:17:be:8e:7e:96:a4:
2e:16:17:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org