Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211407.roa
File: AS211407.roa (raw, json)
Hash identifier: J6glJvQuBtZafSXOv3Y5cLmKee7fyIiDOMq9ntMoeb4=
Subject key identifier: 0F:67:FB:FC:7C:C3:DE:33:C5:36:CF:44:19:F4:5F:04:C3:66:F7:D7
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 45E419ED279D651172F7550FFCB79ECA109F4E35
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211407.roa
Signing time: Tue 13 Sep 2022 01:20:24 +0000
ROA not before: Tue 13 Sep 2022 01:15:24 +0000
ROA not after: Tue 12 Sep 2023 01:20:24 +0000
asID: 211407
IP address blocks: 2a0f:9400:7701::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e4:19:ed:27:9d:65:11:72:f7:55:0f:fc:b7:9e:ca:10:9f:4e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:24 2022 GMT
Not After : Sep 12 01:20:24 2023 GMT
Subject: CN=0F67FBFC7CC3DE33C536CF4419F45F04C366F7D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:ce:34:b9:e5:16:b0:cf:24:03:c1:6a:f1:
0e:4b:dc:dc:24:2e:bc:d2:23:80:51:fe:da:f3:76:
90:0c:32:0c:c5:b4:72:dd:8c:53:5b:7f:0c:dc:a8:
69:5f:b4:47:9a:49:4a:a2:4a:4c:c9:d9:4e:f6:58:
a0:57:75:bb:7a:04:97:39:7c:29:9d:0b:02:ad:20:
b4:c0:b3:da:3d:d6:ad:a7:0f:17:2b:1d:03:38:75:
97:55:76:f1:a0:ea:93:43:c8:c0:45:0b:c7:ee:22:
7f:a0:0c:56:b8:b9:fd:4c:64:57:7d:74:5b:9a:cc:
de:73:fb:19:41:51:99:58:bf:90:ed:be:84:83:21:
af:7b:c9:27:d3:06:d8:9f:3d:5d:a5:70:36:53:f1:
c2:d0:6f:f2:25:ce:6f:17:9a:7f:02:83:2c:d9:94:
33:c4:4c:a2:8b:f1:8d:d4:0d:e2:d2:bc:39:09:ae:
1f:0d:ff:d7:17:2d:64:a0:a8:37:5b:cc:d6:32:10:
f7:f9:e9:7b:af:f3:81:5b:a0:9d:a3:17:b8:89:b5:
42:e2:18:44:5e:69:44:72:fb:2e:4e:65:e1:1b:ed:
bd:ca:14:50:ff:36:ab:31:5f:0c:99:19:34:b7:05:
30:6b:06:4c:53:93:32:52:bb:7d:a3:41:9f:94:0b:
65:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:67:FB:FC:7C:C3:DE:33:C5:36:CF:44:19:F4:5F:04:C3:66:F7:D7
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7701::/48
Signature Algorithm: sha256WithRSAEncryption
be:ec:43:87:d1:f4:74:b2:28:06:54:39:ea:a6:79:7f:1a:3a:
db:e9:4b:3b:4c:c1:22:74:17:d3:2c:79:90:eb:de:2a:10:eb:
b1:d2:6f:72:45:2c:1e:6c:0d:e1:e0:e7:19:b1:3f:72:42:73:
5a:f7:39:ff:6a:75:36:03:48:2d:04:7b:7f:0c:e1:ef:75:26:
9b:75:1c:74:50:a1:aa:9d:a5:b6:94:35:5d:b3:a8:4e:ec:46:
f9:36:b4:6a:4a:c4:fa:f1:03:39:44:db:df:dd:aa:6d:65:b1:
68:89:27:b9:e6:c0:8b:b8:96:d2:b1:e0:b4:14:3d:ea:80:c8:
0c:c9:4d:de:24:86:8b:c4:2c:77:08:94:24:68:32:d6:31:60:
fa:a8:e2:ef:b5:7c:e8:8b:0e:6f:4b:ec:ce:2c:6b:9f:8c:e0:
df:f7:e7:a1:1a:eb:d3:8f:27:e5:3f:25:65:57:6b:7a:e3:d1:
59:e0:bd:2c:a2:23:ef:59:34:01:28:39:44:7d:58:49:a5:a9:
0f:30:cc:ce:84:1f:03:7c:7e:77:ec:13:14:5b:67:99:92:7d:
a4:5c:be:8e:57:11:9a:d7:28:d7:ed:3d:c2:8d:3d:cd:4e:bf:
7d:a9:26:6f:0f:d7:c5:10:bf:01:d0:2c:1d:a5:07:13:00:91:
43:fb:32:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org