Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211248.roa
File: AS211248.roa (raw, json)
Hash identifier: nCTQdaD1g4uvXf1yhGO7Y/Amdo3We3z92ARxKyci6Q4=
Subject key identifier: FB:F9:85:D7:68:3D:74:B3:97:F7:73:B3:3B:DA:4A:F4:A8:9B:9C:C3
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4D36DA08226BB7706D1754B379EB450599A27F82
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211248.roa
Signing time: Thu 16 Dec 2021 03:26:33 +0000
ROA not before: Thu 16 Dec 2021 03:21:33 +0000
ROA not after: Thu 15 Dec 2022 03:26:33 +0000
asID: 211248
IP address blocks: 2a0f:9400:770e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:36:da:08:22:6b:b7:70:6d:17:54:b3:79:eb:45:05:99:a2:7f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 16 03:21:33 2021 GMT
Not After : Dec 15 03:26:33 2022 GMT
Subject: CN=FBF985D7683D74B397F773B33BDA4AF4A89B9CC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:97:6d:36:ac:f6:0e:bc:22:de:65:c8:fe:f5:
99:79:68:61:8f:7e:0a:e7:98:62:ba:33:ce:90:7d:
80:e6:b0:59:2e:8c:08:9a:7b:9f:d2:fe:00:c1:a3:
74:cd:de:0b:86:3a:e7:99:08:b5:b2:e0:73:91:8f:
ff:eb:00:f5:93:7b:b6:f4:75:ca:d1:20:7f:d8:1d:
f8:5e:bf:22:50:0e:cc:00:86:19:93:56:f5:05:d5:
5b:b4:f7:24:3d:09:17:ae:93:d3:fe:41:b5:97:11:
50:9a:6a:59:b0:06:5b:ce:5d:8d:d2:0d:24:b6:10:
81:c6:82:80:6e:fc:cf:ac:0d:1f:96:ac:9d:61:3f:
06:8f:c1:e2:6c:a8:60:b4:4a:be:a5:d6:b1:c0:d3:
a5:a1:64:f3:ac:e2:fa:93:80:72:fd:82:b5:0a:85:
3a:f6:e0:0f:ac:b6:71:54:0f:b2:bf:71:1c:14:f8:
27:64:11:b9:54:7a:1b:96:50:a5:80:69:cd:29:15:
44:f3:79:6b:f8:d2:bf:78:d0:c0:77:34:95:e6:74:
73:c7:7c:33:c1:a4:f7:4a:1f:33:c5:8c:02:cc:62:
b0:0e:90:fe:25:27:ee:4e:4d:38:31:a0:4e:c5:17:
d9:b2:96:6d:50:bb:29:05:92:4e:7a:30:70:24:3e:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F9:85:D7:68:3D:74:B3:97:F7:73:B3:3B:DA:4A:F4:A8:9B:9C:C3
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211248.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:770e::/48
Signature Algorithm: sha256WithRSAEncryption
b1:5c:fc:b7:9a:b6:76:82:4f:31:95:5a:45:21:b6:35:3c:d0:
5e:1f:79:fa:a8:40:7f:fa:5b:19:dd:8a:ef:75:5c:90:9f:ff:
1b:c3:56:d1:ca:a2:30:a0:63:37:25:06:e9:75:cc:b3:70:7f:
80:df:30:34:c0:88:84:f2:0d:ef:d0:19:6b:ba:87:b5:96:b7:
eb:a3:6d:8b:79:c4:f0:b2:e6:fb:32:56:17:f9:2c:db:cb:b7:
df:a5:da:ae:7b:bc:b9:9c:1e:f6:3b:42:4a:35:a2:54:58:a2:
28:aa:cd:aa:ab:72:15:c1:40:00:6f:5b:63:a8:27:c8:60:e1:
a3:d2:a6:ad:8f:1a:f2:ac:4f:b3:bb:69:39:c4:13:34:05:bb:
c6:97:aa:9a:ac:52:83:9b:7d:fd:59:33:2a:aa:25:0a:3a:9f:
68:17:e4:63:22:93:b9:90:54:60:8a:b5:ec:e7:b0:d4:79:76:
cb:a6:4d:77:e7:f6:65:af:9b:5d:55:4f:02:69:e4:aa:bd:f2:
68:16:06:26:1a:38:d4:ef:5c:04:b3:3a:46:3b:f5:db:a5:1e:
1c:66:16:ad:99:b9:43:84:01:bc:58:5d:4a:8a:99:7e:14:b9:
27:4a:57:37:1e:6a:c4:29:35:e6:15:55:df:78:cb:8b:ab:a9:
92:a4:0d:17
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUTTbaCCJrt3BtF1SzeetFBZmif4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMTEyMTYwMzIxMzNaFw0yMjEyMTUwMzI2MzNaMDMxMTAvBgNV
BAMTKEZCRjk4NUQ3NjgzRDc0QjM5N0Y3NzNCMzNCREE0QUY0QTg5QjlDQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnl202rPYOvCLeZcj+9Zl5aGGP
fgrnmGK6M86QfYDmsFkujAiae5/S/gDBo3TN3guGOueZCLWy4HORj//rAPWTe7b0
dcrRIH/YHfhevyJQDswAhhmTVvUF1Vu09yQ9CReuk9P+QbWXEVCaalmwBlvOXY3S
DSS2EIHGgoBu/M+sDR+WrJ1hPwaPweJsqGC0Sr6l1rHA06WhZPOs4vqTgHL9grUK
hTr24A+stnFUD7K/cRwU+CdkEblUehuWUKWAac0pFUTzeWv40r940MB3NJXmdHPH
fDPBpPdKHzPFjALMYrAOkP4lJ+5OTTgxoE7FF9mylm1QuykFkk56MHAkPm67AgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU+/mF12g9dLOX93OzO9pK9KibnMMwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMTI0OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlAB3DjANBgkqhkiG9w0BAQsFAAOC
AQEAsVz8t5q2doJPMZVaRSG2NTzQXh95+qhAf/pbGd2K73VckJ//G8NW0cqiMKBj
NyUG6XXMs3B/gN8wNMCIhPIN79AZa7qHtZa366Nti3nE8LLm+zJWF/ks28u336Xa
rnu8uZwe9jtCSjWiVFiiKKrNqqtyFcFAAG9bY6gnyGDho9KmrY8a8qxPs7tpOcQT
NAW7xpeqmqxSg5t9/VkzKqolCjqfaBfkYyKTuZBUYIq17Oew1Hl2y6ZNd+f2Za+b
XVVPAmnkqr3yaBYGJho41O9cBLM6Rjv126UeHGYWrZm5Q4QBvFhdSoqZfhS5J0pX
Nx5qxCk15hVV33jLi6upkqQNFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org