Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213196.roa
File: AS213196.roa (raw, json)
Hash identifier: rMrqv6bjRvZbC6tTMiC6Q866txv4BqSvXIGIJb92PDk=
Subject key identifier: 50:D1:0A:ED:A5:39:AD:B6:9F:66:17:AE:27:F4:A3:94:D8:D1:70:96
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 294912613200087AADC866447055F228C55489A2
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213196.roa
Signing time: Thu 16 Dec 2021 03:26:36 +0000
ROA not before: Thu 16 Dec 2021 03:21:36 +0000
ROA not after: Thu 15 Dec 2022 03:26:36 +0000
asID: 213196
IP address blocks: 2a0f:9400:801b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:49:12:61:32:00:08:7a:ad:c8:66:44:70:55:f2:28:c5:54:89:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 16 03:21:36 2021 GMT
Not After : Dec 15 03:26:36 2022 GMT
Subject: CN=50D10AEDA539ADB69F6617AE27F4A394D8D17096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:06:7d:a6:19:5b:ea:7b:24:1a:8e:6a:e8:
6f:a0:39:b9:30:fa:c9:60:c3:bc:30:97:56:f1:b3:
58:a2:de:85:5e:66:7a:d0:dc:46:1e:e2:fe:4e:78:
f1:45:6f:28:a8:c6:b5:00:04:16:19:b3:e0:52:b9:
61:70:3d:70:9f:e8:14:57:7c:b0:69:98:fe:0d:df:
b5:d6:0d:67:7b:b0:10:1b:ee:ec:66:fa:e1:cf:6d:
af:a7:b4:46:58:7e:13:2c:4e:1c:fa:88:12:30:be:
df:57:df:92:75:41:e2:fa:be:13:46:3e:6f:07:06:
e2:6f:c1:46:a9:65:17:ab:2b:ca:26:83:e4:85:ed:
2a:9e:e7:02:1f:b6:7c:4d:88:c7:48:56:a4:dd:cc:
b2:ae:00:f5:69:f8:57:aa:ca:5f:9b:d7:ac:ea:cd:
cc:90:eb:6d:15:11:35:f1:5e:fe:b7:f3:63:df:25:
12:67:d7:e3:dd:57:e8:6c:8a:6d:25:50:0f:eb:ff:
11:b2:e5:df:63:ed:98:bd:47:db:4d:5b:10:03:8b:
5a:f9:1b:29:94:4e:77:21:82:ed:e9:44:ca:d6:85:
d0:aa:20:56:15:88:93:08:01:29:7d:e3:87:9c:1d:
fb:38:13:45:bb:b5:ce:fe:47:c9:c1:89:34:8b:1b:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:0A:ED:A5:39:AD:B6:9F:66:17:AE:27:F4:A3:94:D8:D1:70:96
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213196.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:801b::/48
Signature Algorithm: sha256WithRSAEncryption
c0:f7:da:2f:84:44:7d:53:3f:0e:bc:08:86:e0:4f:6c:de:85:
88:e5:91:97:9d:be:9f:13:0f:ad:6a:0e:8a:38:47:17:35:ea:
7f:f8:6a:a6:af:e7:72:0c:50:f8:25:2f:ca:3b:79:1a:a2:3f:
47:8e:18:d8:ed:45:2f:d9:9c:6f:fc:97:ab:bd:c9:87:ed:43:
24:01:02:d1:ee:03:e6:5e:77:50:b1:83:08:ef:29:f7:75:0b:
53:7a:47:7c:b5:73:99:9d:a7:b4:3e:b0:79:db:12:fc:a2:82:
79:12:68:00:45:ac:e4:bc:1a:34:f0:6a:88:7d:b1:23:c9:64:
76:ef:a7:6e:84:12:be:05:57:87:93:25:d0:4f:e3:a9:db:ab:
6d:53:60:6a:63:33:f6:9c:cd:3d:3a:b5:c5:b7:60:06:c7:71:
1d:10:3c:02:26:9f:68:41:49:e2:59:0e:b9:08:3b:d3:8a:e8:
e6:78:32:3d:fd:5d:c3:72:22:51:91:9a:7d:95:ae:2c:cb:b4:
8c:5c:7e:d1:73:15:a7:23:5b:c7:a3:64:c8:fc:8f:7e:7e:43:
36:4a:64:6a:0a:57:17:c1:1f:71:9a:8c:f5:fd:ab:d4:12:f5:
01:c2:90:43:19:38:ab:44:19:59:0f:e5:dc:ad:25:34:8e:6b:
90:e2:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org