Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212071.roa
File: AS212071.roa (raw, json)
Hash identifier: T36MgeDPxwVIGPmB1kOAhLvEyQhVrK4SwIqUKbK3nAE=
Subject key identifier: 60:60:F5:0A:DC:63:A0:6A:43:F6:0E:CA:29:8C:71:09:E0:CF:A6:E5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6702EAE7194F1FE24106D45DC5D46AA91C74DB14
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212071.roa
Signing time: Tue 21 Feb 2023 18:59:49 +0000
ROA not before: Tue 21 Feb 2023 18:54:49 +0000
ROA not after: Tue 20 Feb 2024 18:59:49 +0000
asID: 212071
IP address blocks: 2a0f:9400:610f::/48 maxlen: 48
2a0f:9400:6110::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:02:ea:e7:19:4f:1f:e2:41:06:d4:5d:c5:d4:6a:a9:1c:74:db:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 21 18:54:49 2023 GMT
Not After : Feb 20 18:59:49 2024 GMT
Subject: CN=6060F50ADC63A06A43F60ECA298C7109E0CFA6E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0d:04:fc:43:46:de:08:4b:5d:02:84:bf:6a:
ec:b2:7f:4c:13:b2:0a:cf:47:e0:db:e6:f2:de:00:
2a:23:04:e1:bd:11:fc:83:70:b4:7b:3f:d9:cb:5b:
f5:39:0e:64:4b:85:ab:ee:b9:fa:6b:c8:4c:3a:de:
83:f4:21:b7:e4:11:47:11:ef:7c:d4:fe:b7:71:25:
43:4d:a7:54:aa:bc:eb:cd:9f:c6:b5:cc:17:45:4d:
54:66:60:82:01:99:c8:37:63:c0:9a:53:9a:57:80:
c5:ea:dc:08:9c:3e:fd:d6:07:f0:29:cc:85:0b:e5:
7c:19:39:7d:c7:19:1c:97:2d:8b:f0:e2:b0:d4:37:
82:ee:20:b5:25:26:ae:65:c3:74:d1:86:d4:ce:49:
85:79:ac:df:cf:21:04:67:1e:b7:cb:cd:64:fe:27:
75:9d:0d:e7:b9:a8:9c:24:0b:f0:e5:91:62:16:64:
e5:3f:d8:10:95:67:27:b8:07:52:8e:36:ff:55:4a:
9d:19:c8:8d:4d:fe:85:ac:7c:71:b5:90:7d:b0:1e:
e4:f9:4d:4f:86:b2:59:bd:69:0e:b0:3c:3a:d7:0e:
7b:00:3a:f4:a4:df:81:7c:69:47:21:12:5b:f8:71:
fe:d2:ea:50:71:e1:6a:4c:6f:6d:b0:ae:6e:75:43:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:60:F5:0A:DC:63:A0:6A:43:F6:0E:CA:29:8C:71:09:E0:CF:A6:E5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610f::-2a0f:9400:6110:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9a:e9:83:bd:2c:bd:fd:5c:48:65:60:c5:18:c0:e7:df:91:6b:
89:75:f5:5a:38:d8:bc:2a:c6:fc:35:f5:70:21:1b:9f:ff:38:
46:ed:95:83:5d:e6:f5:c4:ca:2e:c9:a7:14:7b:e6:92:1b:96:
b8:f3:e1:1c:7f:49:ec:a8:2f:ee:06:41:dc:08:22:5b:34:48:
f8:3c:63:8d:20:86:55:34:2f:b0:c8:81:a6:33:11:fd:4f:1b:
52:3c:13:0f:1d:e0:36:3c:8f:17:92:3b:12:7c:96:dc:53:19:
f3:06:e9:b6:f6:31:6b:e1:33:e7:c4:8f:30:34:af:d8:be:d6:
92:22:4f:65:e6:fd:2e:d1:94:b8:5a:16:52:00:20:88:29:9f:
92:09:d2:71:fa:6b:92:a7:d5:b0:f4:ec:73:e0:bc:7a:69:2b:
8c:59:1a:a8:6d:61:50:d8:53:07:aa:99:d4:e8:3e:dd:80:ed:
e0:46:a9:0a:e1:b6:35:ec:2e:cf:fe:ec:33:fd:6d:a3:9d:34:
4d:aa:4a:4d:63:cd:3e:82:22:d5:83:7a:41:bf:d6:57:b8:3a:
58:5a:6e:ed:0a:8b:70:7b:06:04:62:9e:6d:38:71:d3:c4:6c:
9f:c2:e2:29:15:bc:f3:24:9f:0f:f3:f9:11:37:f2:cf:d1:89:
60:cb:40:3d
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUZwLq5xlPH+JBBtRdxdRqqRx02xQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzAyMjExODU0NDlaFw0yNDAyMjAxODU5NDlaMDMxMTAvBgNV
BAMTKDYwNjBGNTBBREM2M0EwNkE0M0Y2MEVDQTI5OEM3MTA5RTBDRkE2RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiDQT8Q0beCEtdAoS/auyyf0wT
sgrPR+Db5vLeACojBOG9EfyDcLR7P9nLW/U5DmRLhavuufpryEw63oP0IbfkEUcR
73zU/rdxJUNNp1SqvOvNn8a1zBdFTVRmYIIBmcg3Y8CaU5pXgMXq3AicPv3WB/Ap
zIUL5XwZOX3HGRyXLYvw4rDUN4LuILUlJq5lw3TRhtTOSYV5rN/PIQRnHrfLzWT+
J3WdDee5qJwkC/DlkWIWZOU/2BCVZye4B1KONv9VSp0ZyI1N/oWsfHG1kH2wHuT5
TU+Gslm9aQ6wPDrXDnsAOvSk34F8aUchElv4cf7S6lBx4WpMb22wrm51Q3VTAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUYGD1CtxjoGpD9g7KKYxxCeDPpuUwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMjA3MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggr
BgEFBQcBBwEB/wQeMBwwGgQCAAIwFDASAwcAKg+UAGEPAwcAKg+UAGEQMA0GCSqG
SIb3DQEBCwUAA4IBAQCa6YO9LL39XEhlYMUYwOffkWuJdfVaONi8Ksb8NfVwIRuf
/zhG7ZWDXeb1xMouyacUe+aSG5a48+Ecf0nsqC/uBkHcCCJbNEj4PGONIIZVNC+w
yIGmMxH9TxtSPBMPHeA2PI8XkjsSfJbcUxnzBum29jFr4TPnxI8wNK/YvtaSIk9l
5v0u0ZS4WhZSACCIKZ+SCdJx+muSp9Ww9Oxz4Lx6aSuMWRqobWFQ2FMHqpnU6D7d
gO3gRqkK4bY17C7P/uwz/W2jnTRNqkpNY80+giLVg3pBv9ZXuDpYWm7tCotwewYE
Yp5tOHHTxGyfwuIpFbzzJJ8P8/kRN/LP0Ylgy0A9
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org