Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS4288000560.roa
File: AS4288000560.roa (raw, json)
Hash identifier: wy0k4QPRlQ/d7aNsuGhVDijQ3imtsqu0OdDbOKyztxY=
Subject key identifier: C8:FF:0A:3E:4B:48:A0:18:B9:BA:C2:D1:FC:5B:CA:53:B4:6F:AF:20
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 596924C3D4410B971C636B95B9AFE88F6C5C79B0
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS4288000560.roa
Signing time: Wed 08 Nov 2023 23:23:14 +0000
ROA not before: Wed 08 Nov 2023 23:18:14 +0000
ROA not after: Wed 06 Nov 2024 23:23:14 +0000
asID: 4288000560
IP address blocks: 2a0f:9400:6104::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 11 Nov 2023 01:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:69:24:c3:d4:41:0b:97:1c:63:6b:95:b9:af:e8:8f:6c:5c:79:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 8 23:18:14 2023 GMT
Not After : Nov 6 23:23:14 2024 GMT
Subject: CN=C8FF0A3E4B48A018B9BAC2D1FC5BCA53B46FAF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a0:e0:da:1a:2a:03:bd:3f:52:08:22:9a:f7:
ef:0f:d5:88:65:bf:08:85:fe:c8:f5:d3:c8:2a:c1:
0b:13:c2:2f:12:b6:37:eb:db:8c:37:09:9e:46:60:
1a:01:81:73:25:a0:d1:d5:a4:73:f5:72:2f:9d:6c:
18:da:04:ed:ed:b9:db:ad:50:9c:5b:9c:14:9d:6d:
1a:14:fe:43:26:17:28:57:d3:eb:c5:35:85:a7:f0:
0c:f4:68:a2:39:20:2b:af:2f:46:d8:6a:06:e9:74:
0a:e2:75:17:fb:f5:39:63:73:7d:2d:4d:68:1b:8d:
3b:e1:76:7f:56:28:ee:68:68:41:ba:5a:bf:0a:cb:
d1:31:45:c1:9d:f4:55:7f:98:43:33:07:0f:5e:75:
43:60:75:11:75:40:b7:54:fd:c5:fc:e5:b5:07:af:
a7:b4:fd:38:b7:b8:2f:8a:1b:e4:5d:dd:1d:90:56:
10:49:10:cf:81:fd:65:7d:87:67:5c:67:16:21:ea:
a4:88:af:3e:71:79:42:a9:23:70:55:16:7c:c0:d1:
9c:ce:6d:0f:e1:a5:b5:f1:af:78:0e:d7:79:e7:65:
31:d5:20:f7:66:6c:8f:9c:67:b8:5f:85:a1:78:e6:
4a:6c:ff:ac:99:44:24:3c:06:62:5a:b3:7b:95:e9:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FF:0A:3E:4B:48:A0:18:B9:BA:C2:D1:FC:5B:CA:53:B4:6F:AF:20
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS4288000560.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6104::/48
Signature Algorithm: sha256WithRSAEncryption
32:5c:61:8c:68:32:a1:2e:fb:de:c2:33:f4:39:5f:9c:96:ee:
44:b8:35:06:7f:24:fe:51:cc:8a:12:e5:cb:38:e1:26:cc:cf:
3d:d5:45:c5:6c:9f:92:28:70:34:93:5f:2e:7a:15:ec:1b:f1:
27:b4:db:8b:ce:df:2b:61:36:1c:68:07:22:5c:0b:07:83:c8:
8f:c1:34:8f:47:a2:8f:f9:7e:ae:4c:ee:40:0b:51:9e:4b:fc:
6a:5d:61:94:4c:7b:52:9f:a5:f4:6c:a5:97:34:14:02:42:96:
2e:4a:d0:e0:56:40:45:3d:3f:ea:93:74:df:79:6d:bf:ae:21:
a4:b9:2f:be:52:61:c2:4c:4e:27:0c:c6:4b:c3:14:71:9c:ff:
fc:de:11:95:0e:80:21:2b:4a:06:7f:95:fe:92:45:fc:8d:43:
b7:c3:21:74:c3:9b:8b:5c:82:bb:5d:ec:46:be:32:75:51:58:
34:c0:a7:e5:8f:15:6a:54:57:1d:5d:c2:3f:a7:ac:98:60:04:
fa:71:63:b1:21:2e:7c:0b:a7:fb:d8:6d:76:09:6d:3d:35:8f:
6c:24:f1:57:8a:bf:0d:33:5f:35:fe:be:c2:9c:5f:f0:dc:47:
98:7a:18:92:0b:e7:73:28:bb:4e:54:10:30:0b:f0:63:16:b7:
3f:fa:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org