Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS35913.roa
File: AS35913.roa (raw, json)
Hash identifier: eZHSNoqNk4FufMxDgFOi4OacibAa3BUhLqToZWPvcvY=
Subject key identifier: E0:03:F4:EB:37:65:B7:D7:02:30:F4:47:66:D3:94:1E:7D:6D:CC:EF
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2AD11A4D4A179E718D31FD1CA76624873ECB6954
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS35913.roa
Signing time: Tue 13 Jun 2023 00:52:09 +0000
ROA not before: Tue 13 Jun 2023 00:47:09 +0000
ROA not after: Tue 11 Jun 2024 00:52:09 +0000
asID: 35913
IP address blocks: 2a0f:9404::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Jul 2023 20:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d1:1a:4d:4a:17:9e:71:8d:31:fd:1c:a7:66:24:87:3e:cb:69:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 13 00:47:09 2023 GMT
Not After : Jun 11 00:52:09 2024 GMT
Subject: CN=E003F4EB3765B7D70230F44766D3941E7D6DCCEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:95:1f:01:34:39:c2:ce:36:25:43:1c:6c:
9e:86:2b:05:88:8d:d6:bb:59:0c:0f:70:2d:59:cb:
62:78:3a:6b:65:5d:b7:78:0c:05:8c:60:dd:34:6b:
9c:e9:b6:58:50:0c:96:1c:36:c3:fa:4b:a6:ac:9c:
45:8f:67:c5:28:e1:50:81:63:17:60:59:a0:92:4c:
fd:a9:4c:81:f9:eb:f3:a6:ac:ae:df:05:c2:bc:65:
99:13:44:9d:cd:b1:d1:c3:2f:a4:79:fe:f1:75:e7:
82:49:fc:c6:e7:be:e8:fe:6a:ef:5a:b1:fa:f3:56:
42:d2:64:b9:24:37:cd:42:78:9e:7d:ff:7b:c8:d2:
04:b3:b3:5d:33:e3:87:a9:7e:05:10:57:95:80:c7:
49:1b:73:36:ae:cc:98:0b:65:37:2a:9a:0b:4b:23:
89:86:21:ea:50:b8:11:e0:c0:18:8f:06:94:1b:2b:
04:61:b5:5f:87:e2:50:11:ba:94:38:14:fd:41:8d:
d3:c2:4c:31:3c:d3:1d:4e:bf:4e:43:22:25:6f:db:
d6:ee:ea:6e:1d:8a:d1:bf:61:36:af:0d:29:81:41:
d1:97:30:44:9f:6c:95:8c:42:a1:f3:03:bb:f3:88:
25:2a:a7:c4:9b:39:dd:70:a6:4d:aa:00:74:6e:dd:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:03:F4:EB:37:65:B7:D7:02:30:F4:47:66:D3:94:1E:7D:6D:CC:EF
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS35913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9404::/32
Signature Algorithm: sha256WithRSAEncryption
a6:11:be:bd:6d:1f:84:05:8b:a9:7a:c4:03:6b:c2:b5:e2:d8:
e1:ee:b0:17:fe:eb:14:e1:8b:5f:7c:b1:92:21:97:99:47:00:
27:8d:53:bb:3c:30:60:2d:7f:dd:58:90:9e:90:02:58:64:0a:
be:a7:63:21:37:09:ca:4e:97:5c:c5:79:54:e6:89:07:d6:c3:
82:04:b4:95:4c:ba:48:21:99:6e:f6:9c:02:1f:2b:77:1a:76:
cb:7b:7f:07:30:6e:c7:4e:a5:d5:56:40:2c:b2:fd:f8:e8:3a:
f3:e1:7f:9e:a2:ec:85:d8:88:93:c6:9f:63:ac:81:76:fb:71:
a2:db:d6:00:e9:79:26:7e:43:ad:ab:05:3d:fc:20:de:0c:e2:
7a:95:35:70:8e:67:1f:c3:71:b6:5b:1d:ea:16:66:c0:5c:bc:
9f:f4:9b:ed:7e:45:a1:15:9d:14:81:31:f1:2a:16:aa:48:d3:
88:25:2f:5f:ed:6e:60:83:0f:4f:7f:2a:38:02:9d:44:da:2a:
1c:bc:77:a9:bb:ee:c4:e2:ec:47:62:72:13:3d:15:b3:98:f9:
fc:29:c1:c2:99:3f:e3:5d:28:6f:43:27:a8:ad:73:69:65:07:
69:c3:a2:c2:f8:4e:2f:18:6b:d0:a4:be:dd:27:19:76:e0:7d:
3c:7a:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org