Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211767.roa
File: AS211767.roa (raw, json)
Hash identifier: FFhl/bTCTFyJqssatii0wm07IYCZ5bGiVfPn5KTOZvs=
Subject key identifier: 06:F7:5D:0D:D3:D3:2C:8D:27:E1:CD:F4:64:39:6F:90:B6:28:1A:37
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6960AF4517627BE8AED24D25416DFF2929E9E446
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211767.roa
Signing time: Sat 01 Apr 2023 18:48:51 +0000
ROA not before: Sat 01 Apr 2023 18:43:51 +0000
ROA not after: Sat 30 Mar 2024 18:48:51 +0000
asID: 211767
IP address blocks: 2a0f:9400:6d00::/40 maxlen: 48
2a0f:9400:7730::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:60:af:45:17:62:7b:e8:ae:d2:4d:25:41:6d:ff:29:29:e9:e4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 1 18:43:51 2023 GMT
Not After : Mar 30 18:48:51 2024 GMT
Subject: CN=06F75D0DD3D32C8D27E1CDF464396F90B6281A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:82:59:f5:e7:b6:0c:d1:f4:3b:e9:1b:6c:
f6:a2:f2:82:7b:87:d3:c4:65:a1:5d:73:3f:67:be:
8d:2a:21:9a:35:0e:85:5a:f7:95:43:51:a5:a4:57:
cd:ec:b7:99:0e:9c:82:11:8a:ff:fb:5a:d3:f7:fe:
a0:af:14:1e:4e:2b:55:2d:7c:07:51:a9:25:08:54:
1d:ed:f9:71:06:40:79:6c:47:1c:1e:6a:d3:36:aa:
de:58:dd:9b:d2:df:5e:a7:c1:6f:d2:cd:d0:7c:a8:
45:7f:60:56:87:21:e3:ef:c7:a9:8b:fd:f6:b8:b9:
90:aa:4a:45:c3:6a:8d:15:eb:c3:b0:a8:12:ce:b4:
bb:9d:2e:9a:01:1d:ba:91:f5:43:69:88:82:6a:e5:
2f:07:cf:0d:38:6e:8b:33:b2:aa:54:72:a8:86:2c:
a9:e8:38:9b:37:7f:27:83:4b:c9:b7:70:5e:3a:31:
3c:b6:64:e5:b9:52:a0:36:ee:eb:9c:44:39:72:89:
1a:2e:80:47:b1:14:d8:ca:6f:16:a2:ce:ab:b4:aa:
11:5b:74:a0:25:81:e7:a4:04:b3:2c:08:b1:24:0f:
b1:c6:1d:ed:6b:a6:31:7d:0f:af:b1:1f:f0:b0:8d:
e9:9b:1f:52:98:d4:2e:1c:80:3f:7e:30:3a:22:fc:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F7:5D:0D:D3:D3:2C:8D:27:E1:CD:F4:64:39:6F:90:B6:28:1A:37
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211767.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6d00::/40
2a0f:9400:7730::/44
Signature Algorithm: sha256WithRSAEncryption
96:ff:6c:59:d3:05:27:09:0b:bb:b8:82:d9:c6:6a:70:84:53:
0e:81:7e:ea:3c:b9:d3:98:5a:01:51:33:49:cc:43:9f:a9:92:
cd:2e:82:9e:44:23:23:18:3e:ff:2f:5c:3c:af:5c:e7:a4:12:
02:cc:73:7b:e6:1c:4a:bd:21:61:cb:40:2e:d4:3a:a5:db:3f:
52:21:ab:db:10:5b:17:46:c2:8f:52:8b:7c:d1:c0:9e:75:d2:
cd:c8:34:4b:88:cf:af:78:1a:6a:15:65:14:1e:93:a1:33:e7:
a4:5f:89:c4:12:83:ee:8d:c9:55:81:bd:60:bd:9c:62:19:a7:
bd:57:d5:93:ab:ff:7f:1b:53:5d:a3:16:0a:93:eb:a4:9b:ff:
81:e3:a3:05:3e:7d:1c:3c:e7:ba:fb:ef:a9:49:0c:8a:b7:1d:
af:3b:0d:78:b3:68:0c:f0:81:9d:f9:a9:fa:91:7d:b7:83:b8:
92:df:73:f4:b9:fa:b7:29:3d:36:96:89:fa:1e:da:19:3c:17:
74:63:08:80:48:53:74:4d:8f:6e:dd:98:e1:4d:eb:07:91:c7:
44:a1:4b:5c:8e:a9:8c:6c:f2:0c:4e:ae:7d:d7:86:6e:88:02:
fc:73:82:4e:6d:5e:fb:71:3e:44:25:93:fd:9e:a6:af:f6:40:
09:36:68:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org