Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: MeegSfwqRWLj5whcmQYXzhfTWO26NyxXc5t24Cf4+GY=
Subject key identifier: 70:00:5B:BF:24:97:60:09:23:9F:38:BB:09:82:4F:74:8E:C7:E6:CD
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4F0C52B47ED9C94F4DA18D75D3BAF04D6D983B09
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212238.roa
Signing time: Mon 17 Apr 2023 15:38:17 +0000
ROA not before: Mon 17 Apr 2023 15:33:17 +0000
ROA not after: Mon 15 Apr 2024 15:38:17 +0000
asID: 212238
IP address blocks: 2a0f:9406::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0c:52:b4:7e:d9:c9:4f:4d:a1:8d:75:d3:ba:f0:4d:6d:98:3b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 17 15:33:17 2023 GMT
Not After : Apr 15 15:38:17 2024 GMT
Subject: CN=70005BBF24976009239F38BB09824F748EC7E6CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:0f:79:da:b5:2b:56:d9:d0:da:0e:12:f6:
54:ec:64:ee:ef:fb:b3:cc:b6:aa:a7:cc:21:10:a3:
8d:43:77:35:cf:69:8e:f5:09:d9:97:4f:82:84:09:
74:78:7d:5a:92:c0:01:4a:ea:23:e1:87:f6:e1:b2:
4b:6a:37:fc:09:fa:b3:b4:13:b1:e1:41:26:b2:7b:
2e:02:5f:c7:bc:e1:d1:c6:16:6e:77:ab:1f:84:7d:
03:88:3d:db:4b:c3:13:7f:98:7c:34:5b:ae:93:df:
73:f2:be:b3:d4:17:55:97:57:6e:db:f9:a1:92:e7:
26:b0:a9:35:62:37:dc:60:26:c9:06:a1:6e:50:ac:
55:16:82:ab:2b:f3:2e:ae:aa:06:ad:47:64:87:69:
1c:bc:11:38:c4:be:c5:ee:ff:66:80:45:f3:b7:35:
3c:cb:91:ae:a8:ea:18:ce:c0:64:2e:9f:6a:a5:45:
0c:38:47:40:6f:54:1f:97:87:8d:8e:e6:a0:fe:0e:
bc:92:29:1a:25:6a:d0:ee:b0:7b:a1:f0:58:a8:7f:
0a:34:4e:7b:ad:49:7b:6a:5c:55:b7:71:67:e8:ad:
5b:14:e2:30:77:fc:fe:31:9d:65:78:53:9a:73:72:
62:58:2c:bf:9e:4b:5f:40:73:25:ce:1f:62:ab:4a:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:00:5B:BF:24:97:60:09:23:9F:38:BB:09:82:4F:74:8E:C7:E6:CD
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9406::/32
Signature Algorithm: sha256WithRSAEncryption
d8:4d:24:9e:be:7c:8d:36:43:d4:29:ca:d6:11:21:89:68:2b:
d3:2a:90:9a:be:c6:0a:e1:5b:ca:30:24:92:97:af:dc:18:48:
4d:6b:77:b8:e3:fd:17:e7:b7:70:6b:d4:4f:cb:ef:1e:8b:3e:
24:56:0d:5b:23:e6:68:71:4e:96:68:99:3c:80:8a:f5:07:fb:
a7:62:51:4f:f0:7d:ce:ac:86:44:de:09:8e:9b:e3:8f:72:d4:
1a:ac:47:cd:08:62:92:30:ef:64:26:44:04:3b:b1:f1:51:f1:
75:f4:f9:43:60:aa:12:75:1f:7a:ad:a9:ce:f7:e5:e5:94:b1:
68:1e:23:2c:d5:d8:9e:08:09:c2:f0:ab:b2:5d:4f:18:7d:cd:
8a:17:f9:e8:75:b1:d1:08:60:93:5d:b7:9a:4a:fa:c9:94:01:
d1:27:c4:25:bb:dc:e7:ba:51:91:06:7a:e1:9d:22:08:98:83:
8d:d1:06:25:06:23:e0:b0:e0:39:8f:c5:46:5b:fc:d1:87:b1:
6c:13:80:04:a7:df:c5:3f:68:56:ed:21:a8:7f:be:6c:53:5a:
b0:c0:cd:b2:ae:11:49:e1:5a:f0:4c:8c:ca:34:16:d0:5d:df:
fd:bc:a3:e8:53:89:2a:d5:a2:d1:ed:9a:7c:04:e7:e6:54:4e:
60:f4:a3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org