Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS29632.roa
File: AS29632.roa (raw, json)
Hash identifier: wXha/t6BccFpWKsSnPk0X91m6788lshtzPMYjZbT0JA=
Subject key identifier: 7C:39:84:EB:6F:9D:67:1D:0D:E8:7F:76:10:BB:34:AC:9B:E1:6A:8B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4D41AE0BC975FEA53845CC0AC07BA260751AD183
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS29632.roa
Signing time: Tue 25 Oct 2022 15:58:02 +0000
ROA not before: Tue 25 Oct 2022 15:53:02 +0000
ROA not after: Tue 24 Oct 2023 15:58:02 +0000
asID: 29632
IP address blocks: 2a0f:9400:6170::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:41:ae:0b:c9:75:fe:a5:38:45:cc:0a:c0:7b:a2:60:75:1a:d1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 25 15:53:02 2022 GMT
Not After : Oct 24 15:58:02 2023 GMT
Subject: CN=7C3984EB6F9D671D0DE87F7610BB34AC9BE16A8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:87:7b:e5:34:46:3b:42:ec:63:ab:53:ac:84:
53:04:6b:30:d0:2a:c4:cd:1e:1c:6a:f2:88:88:fe:
8a:2d:48:69:e5:7b:61:73:4c:af:10:55:1a:43:26:
fd:7b:4f:9d:c8:5b:5d:51:95:78:74:89:86:95:37:
29:47:df:d7:3c:94:63:c7:3c:f0:6d:cb:1d:df:ac:
68:72:e8:06:82:c3:87:2e:82:88:e4:98:f0:9d:48:
c2:c5:9e:9e:5e:74:bc:68:96:b3:f7:a8:6b:53:c9:
8b:12:b1:c8:14:56:1e:ae:c1:8a:5d:e1:2c:1c:18:
d5:1c:f6:d6:74:41:7f:1e:f6:42:eb:26:9f:ae:94:
31:fb:68:a3:e6:bf:56:81:56:8b:6d:27:86:3a:a7:
25:81:30:af:e7:54:2a:5b:22:43:92:43:d1:b5:c1:
58:91:5f:66:08:03:26:9b:a4:5b:79:8e:ab:24:e5:
ee:37:2b:77:0a:c6:1a:da:de:92:4b:2b:67:4a:b8:
e3:74:e0:15:e2:e0:45:c1:da:aa:a4:de:8d:cc:aa:
98:63:21:0a:45:5b:8f:02:79:3f:61:fb:d6:86:ea:
23:8e:1a:a8:f7:4f:d8:3c:88:80:08:99:e9:1d:81:
35:f1:5b:30:fb:2a:75:99:cd:dc:6a:a0:e8:19:a3:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:39:84:EB:6F:9D:67:1D:0D:E8:7F:76:10:BB:34:AC:9B:E1:6A:8B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS29632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6170::/44
Signature Algorithm: sha256WithRSAEncryption
b2:57:c5:56:88:46:2e:d8:2c:4d:50:f1:58:d4:0c:f2:3a:ff:
7c:c6:73:c8:2f:6f:d0:06:5c:c6:c9:2a:f7:3c:f4:19:9b:ce:
96:f0:78:c7:58:3b:e6:6f:c9:a3:f7:e3:7d:35:8d:d7:9f:06:
58:44:be:7f:37:b8:63:f4:02:d6:37:3c:13:67:b0:f3:6d:90:
b2:49:d5:3c:5a:1e:64:56:40:d1:49:60:0b:fd:2a:6e:06:f8:
1e:7a:5e:06:f8:a9:01:b9:a5:c1:ae:12:00:60:ea:f7:80:7b:
e8:e3:34:2b:ba:6c:c7:bc:13:de:72:69:43:76:01:96:63:33:
69:2b:d1:41:f0:cc:ec:da:31:7a:f8:3f:c5:9f:81:8f:f0:36:
54:1c:20:9d:32:b8:93:0c:74:d8:30:0b:b2:68:50:d0:61:50:
96:33:65:91:4f:e4:0f:a2:01:26:e2:8c:c3:e7:81:c9:80:cc:
1a:07:41:f1:32:37:6b:a8:65:04:09:c1:72:1f:66:31:47:3d:
b7:4e:93:fe:95:8d:d3:ac:8d:85:d3:ad:ea:a3:6f:bd:e5:db:
46:c3:bf:10:23:ca:85:d3:1a:c8:71:e4:2c:66:7d:f0:2c:2a:
46:1e:47:38:85:5a:c2:aa:54:6b:a3:e1:b3:a2:4a:0c:65:02:
bc:35:fb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org