Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211266.roa
File: AS211266.roa (raw, json)
Hash identifier: fUPTHRR1T/PqOF8RxOHnHk+VHj7bdXitQTZJW2Wyo3s=
Subject key identifier: 88:69:EC:02:D3:1D:3C:C2:D6:40:8A:4F:FA:01:46:C7:F1:8A:0D:D6
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2E785A51617114E823CC70747AF0C5D8DE81BCCF
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211266.roa
Signing time: Thu 16 Dec 2021 03:26:35 +0000
ROA not before: Thu 16 Dec 2021 03:21:35 +0000
ROA not after: Thu 15 Dec 2022 03:26:35 +0000
asID: 211266
IP address blocks: 2a0f:9400:770f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:78:5a:51:61:71:14:e8:23:cc:70:74:7a:f0:c5:d8:de:81:bc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 16 03:21:35 2021 GMT
Not After : Dec 15 03:26:35 2022 GMT
Subject: CN=8869EC02D31D3CC2D6408A4FFA0146C7F18A0DD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:aa:62:09:b7:2e:4b:c8:a8:6a:79:d6:2a:
af:93:2d:47:61:f0:cf:63:4a:3e:96:66:a1:2b:d2:
eb:63:53:7e:eb:13:25:27:45:9b:d8:52:8a:48:00:
d1:6f:44:f4:63:74:65:0f:a5:18:e6:fc:38:75:2a:
f5:2a:c6:2f:aa:3b:58:90:81:cc:c8:3b:2c:04:62:
b3:25:66:fd:54:a4:31:21:0b:87:62:e0:a4:25:4b:
e8:53:98:22:57:af:45:ab:0f:a4:af:33:89:db:5e:
20:d7:6d:fb:5e:19:a7:5c:a5:db:98:31:16:af:f7:
7d:61:62:e6:20:db:c2:db:42:ae:e7:5f:02:da:f0:
d4:58:3b:17:50:7b:09:68:8a:ef:87:1f:ed:79:ee:
16:76:60:dd:7e:d8:ca:05:7d:54:68:a5:52:1b:4c:
99:8a:80:e9:ce:88:4d:b4:f1:10:7c:dc:6b:0f:bf:
61:e5:ca:99:63:bc:a3:4d:33:f3:6f:2f:c9:01:92:
51:40:97:de:e1:64:db:df:fc:58:48:7b:6a:ad:76:
ff:b9:7c:ef:0f:aa:3d:f0:bf:5f:e3:0e:2f:b5:c1:
41:fd:69:12:0c:77:fa:51:a9:10:9c:25:d5:3e:b6:
98:9e:f6:aa:d8:02:cf:7b:9b:63:83:8e:15:d9:72:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:69:EC:02:D3:1D:3C:C2:D6:40:8A:4F:FA:01:46:C7:F1:8A:0D:D6
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:770f::/48
Signature Algorithm: sha256WithRSAEncryption
89:81:55:0b:04:cd:b7:31:90:12:98:d3:7e:7c:e2:eb:93:8c:
4b:c1:bd:34:a0:86:d7:e4:ec:68:b9:05:74:99:62:aa:3d:36:
af:07:8b:42:00:e1:c2:15:53:84:74:c0:cd:b7:e4:27:99:99:
21:92:ca:fc:e4:09:79:b7:09:42:4d:4b:8b:bf:6e:b3:3f:5f:
d3:8b:64:f2:25:6a:63:24:54:3c:3e:27:d6:b1:01:47:ce:5a:
1f:a0:3f:ec:17:68:96:f2:96:74:33:91:60:a5:05:d5:e5:ad:
61:43:db:f4:1c:cc:41:68:36:b4:d3:85:fe:c2:b8:a8:24:e0:
57:27:9f:87:ca:ad:1d:16:67:3b:79:c4:04:5c:3c:4f:7f:6f:
d4:cf:33:dd:a6:3a:05:eb:93:6d:8b:a2:7e:fd:6a:44:f5:d3:
8a:35:59:8b:8b:31:ae:50:16:1c:4e:2c:90:9a:df:db:fd:45:
18:46:d0:fd:04:a7:44:3d:4e:a4:2a:75:4a:29:29:17:24:a7:
0d:09:cd:26:de:d3:b3:12:8b:b3:b2:7e:cc:b0:60:45:76:29:
02:b1:18:86:45:d7:35:dd:9f:e4:b9:ef:6a:fc:90:06:17:8a:
86:81:e1:aa:b1:66:56:ec:27:0c:0c:d3:41:7b:4a:ec:02:e7:
89:cd:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org