Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211179.roa
File: AS211179.roa (raw, json)
Hash identifier: 9XSBe0M2Iv2yWYZmk47Jg2/IlTefCfuyuvXFZHCJ8NI=
Subject key identifier: CB:A5:28:84:25:AE:9C:86:81:58:BD:C3:F9:54:34:6A:C0:FF:50:A0
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 310A2EC44E58DA115A61CDAAAE97D46CF2669862
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211179.roa
Signing time: Thu 02 Jun 2022 00:42:05 +0000
ROA not before: Thu 02 Jun 2022 00:37:05 +0000
ROA not after: Thu 01 Jun 2023 00:42:05 +0000
asID: 211179
IP address blocks: 2a0f:9400:7a10::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0a:2e:c4:4e:58:da:11:5a:61:cd:aa:ae:97:d4:6c:f2:66:98:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 2 00:37:05 2022 GMT
Not After : Jun 1 00:42:05 2023 GMT
Subject: CN=CBA5288425AE9C868158BDC3F954346AC0FF50A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b7:cf:98:86:16:77:5a:11:35:30:08:d4:6b:
a9:52:95:b8:d3:31:7e:6f:9b:56:b9:7e:73:5c:5b:
e5:25:f0:cb:42:1b:41:7b:0b:60:02:11:ae:09:5a:
86:67:03:9b:c1:08:d4:dd:aa:b8:1d:4c:c9:5a:2b:
8b:47:cc:cf:5b:3d:1e:f3:24:e9:16:16:b7:55:48:
91:63:1c:50:87:36:31:58:33:b9:79:81:f6:a4:9f:
45:73:bb:c9:53:f4:40:15:be:ba:01:15:c1:c4:75:
be:8b:34:be:fd:92:14:98:16:12:dc:7b:c7:c6:f9:
b7:6f:67:86:73:a2:93:d6:1e:3f:32:c5:77:f1:12:
0d:33:59:b5:c4:e6:bf:26:42:67:7e:fc:52:89:ad:
b8:8e:65:a7:5b:05:f6:c7:c4:1f:4e:f7:2a:d4:fe:
cc:0d:09:af:00:7b:aa:fa:50:17:99:d4:17:3d:49:
e1:82:34:91:ab:10:a7:3e:5e:99:42:ae:cc:01:33:
7c:f0:d9:5c:24:0f:6c:c7:57:3b:a2:ff:ec:79:16:
e7:fd:62:96:86:84:a5:4d:23:81:85:13:a7:bc:29:
e6:11:2b:72:89:8a:08:05:ab:f3:95:dd:c3:b4:96:
23:e9:8e:28:d5:b0:b6:c4:f3:96:5a:2c:d8:c7:81:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:28:84:25:AE:9C:86:81:58:BD:C3:F9:54:34:6A:C0:FF:50:A0
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7a10::/44
Signature Algorithm: sha256WithRSAEncryption
6f:c5:c7:12:c9:aa:24:e5:ed:14:ae:b8:85:4a:9a:94:1d:65:
a5:a4:b3:af:0f:56:2a:ff:10:d6:ef:d3:64:23:25:e5:c8:d0:
16:64:32:39:db:38:4f:63:c4:8b:03:f4:1f:2c:76:b8:e3:70:
3e:e4:aa:12:ac:e9:54:fe:4f:dd:5a:36:81:ea:8f:e1:27:6e:
5e:79:a1:14:aa:31:b0:3d:5e:9d:c7:e3:45:53:e9:9e:71:3b:
0c:75:28:ba:58:5d:54:b1:f9:7b:c7:10:6a:f7:ad:4c:1c:06:
a8:f9:6b:86:f6:e3:e7:1e:f8:bc:3b:7a:21:54:c4:ab:71:7d:
76:db:55:97:61:76:f8:c0:c6:83:b2:21:60:47:b7:19:20:cb:
f7:ff:e8:0b:aa:b7:c6:ac:1a:49:f8:65:a4:a4:75:28:6d:f8:
23:b9:31:c9:7e:a0:3e:24:7d:2e:81:0f:cb:6d:11:89:14:49:
12:45:08:6b:a0:f6:3b:f8:28:8d:5a:12:69:2e:20:09:cb:09:
3a:5b:4e:e2:8e:e1:0e:21:56:0b:b2:40:a0:28:4f:1e:cf:3e:
08:f6:8d:b9:6c:1c:52:47:82:d6:72:d2:3a:dd:06:aa:50:45:
c3:45:88:a1:f9:2e:07:cd:a0:b9:4b:64:04:6f:1d:d7:19:7a:
bc:09:48:00
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUMQouxE5Y2hFaYc2qrpfUbPJmmGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMjA2MDIwMDM3MDVaFw0yMzA2MDEwMDQyMDVaMDMxMTAvBgNV
BAMTKENCQTUyODg0MjVBRTlDODY4MTU4QkRDM0Y5NTQzNDZBQzBGRjUwQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDht8+YhhZ3WhE1MAjUa6lSlbjT
MX5vm1a5fnNcW+Ul8MtCG0F7C2ACEa4JWoZnA5vBCNTdqrgdTMlaK4tHzM9bPR7z
JOkWFrdVSJFjHFCHNjFYM7l5gfakn0Vzu8lT9EAVvroBFcHEdb6LNL79khSYFhLc
e8fG+bdvZ4ZzopPWHj8yxXfxEg0zWbXE5r8mQmd+/FKJrbiOZadbBfbHxB9O9yrU
/swNCa8Ae6r6UBeZ1Bc9SeGCNJGrEKc+XplCrswBM3zw2VwkD2zHVzui/+x5Fuf9
YpaGhKVNI4GFE6e8KeYRK3KJiggFq/OV3cO0liPpjijVsLbE85ZaLNjHgTvNAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUy6UohCWunIaBWL3D+VQ0asD/UKAwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMTE3OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPlAB6EDANBgkqhkiG9w0BAQsFAAOC
AQEAb8XHEsmqJOXtFK64hUqalB1lpaSzrw9WKv8Q1u/TZCMl5cjQFmQyOds4T2PE
iwP0Hyx2uONwPuSqEqzpVP5P3Vo2geqP4SduXnmhFKoxsD1encfjRVPpnnE7DHUo
ulhdVLH5e8cQavetTBwGqPlrhvbj5x74vDt6IVTEq3F9dttVl2F2+MDGg7IhYEe3
GSDL9//oC6q3xqwaSfhlpKR1KG34I7kxyX6gPiR9LoEPy20RiRRJEkUIa6D2O/go
jVoSaS4gCcsJOltO4o7hDiFWC7JAoChPHs8+CPaNuWwcUkeC1nLSOt0GqlBFw0WI
ofkuB82guUtkBG8d1xl6vAlIAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org