Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: ctrBTHDjU8Lkyd4ChXZ9TWVba8QUZGdbld9f8n7ZrXI=
Subject key identifier: 63:3D:8D:9D:8C:FA:9E:AE:D4:5F:17:DA:CE:67:F6:26:05:11:D1:C5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2B5DC123894BB63379A7548FC086D7750C88511A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS62240.roa
Signing time: Tue 13 Sep 2022 01:20:23 +0000
ROA not before: Tue 13 Sep 2022 01:15:23 +0000
ROA not after: Tue 12 Sep 2023 01:20:23 +0000
asID: 62240
IP address blocks: 2a0f:9407::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5d:c1:23:89:4b:b6:33:79:a7:54:8f:c0:86:d7:75:0c:88:51:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:23 2022 GMT
Not After : Sep 12 01:20:23 2023 GMT
Subject: CN=633D8D9D8CFA9EAED45F17DACE67F6260511D1C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cc:2f:6b:47:fa:36:d9:1a:17:31:16:f9:a4:
da:be:b6:f7:c5:c5:50:03:f7:f0:91:ef:be:7c:0c:
b1:95:79:fe:91:37:f4:73:e8:f3:7f:f3:c9:ba:38:
b3:99:dc:a2:50:05:19:d0:13:11:51:53:c1:88:9d:
fc:7b:24:cc:af:32:9d:ae:f6:80:f7:3a:76:3c:91:
5b:78:c9:e1:bc:fd:d5:5e:f9:34:f9:80:09:eb:8f:
c5:72:f4:ca:82:e6:9a:e5:5f:f9:5f:91:ed:0b:20:
7c:e2:c8:3e:f1:49:8b:e6:30:fc:6e:9d:41:84:8d:
4b:60:b5:f8:46:20:2c:71:3b:39:7f:57:b8:d4:cc:
7a:42:fd:70:c2:5b:44:e5:1e:37:81:8e:11:61:c4:
6d:f2:5b:f5:d7:28:27:11:43:15:c8:db:b5:9b:2b:
56:49:18:43:07:85:41:f0:ee:e6:fa:7d:f3:66:51:
85:61:ad:43:a9:37:cd:cd:46:3a:b3:06:e3:e7:78:
ed:92:d7:21:40:11:46:22:92:06:fc:c5:cf:d1:df:
6e:0e:ee:e4:fe:10:3d:fd:2d:84:d6:89:c4:05:60:
3b:0a:af:e8:35:38:76:a3:b4:d3:21:79:19:c3:df:
7a:97:36:65:0a:c8:ed:e4:73:61:9a:dd:f4:80:30:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3D:8D:9D:8C:FA:9E:AE:D4:5F:17:DA:CE:67:F6:26:05:11:D1:C5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9407::/32
Signature Algorithm: sha256WithRSAEncryption
95:a6:6a:06:5a:18:ad:86:20:a7:47:9b:61:70:2e:68:40:fa:
29:e5:f7:68:e5:5e:2c:f5:dd:ce:16:c0:ac:e3:38:45:5f:29:
d7:c5:45:ba:59:99:b4:e1:ba:df:79:ca:02:05:02:31:46:ac:
82:d7:c8:7f:df:d1:2a:70:2c:d1:37:ba:56:c2:44:7e:e2:af:
d4:e7:0e:45:04:d4:bb:23:59:ed:05:41:ed:1b:cd:0b:1b:84:
55:58:aa:27:69:37:f2:8b:5f:7f:05:6b:e4:49:31:77:e5:65:
c8:a5:98:38:b0:56:fe:96:73:bf:f7:5c:7c:16:2b:00:7e:1c:
7a:ae:0c:c5:37:af:52:b8:c3:02:63:68:a6:39:45:e5:f7:6f:
5b:de:5a:cd:98:81:92:90:7d:12:af:9c:09:97:ec:42:24:b2:
fc:fd:72:4d:97:2b:a9:5b:cc:7b:8a:18:08:08:3a:4c:bb:da:
cd:7c:8e:eb:30:4b:e2:49:fe:a4:67:c3:44:96:a6:b0:35:73:
db:fa:4e:95:3f:82:59:3c:5f:42:6d:60:c7:7e:02:dd:eb:42:
8c:7b:5e:20:e0:8c:11:13:91:ce:66:49:c4:83:2f:b4:b9:64:
70:32:11:c4:ca:6c:f3:40:b0:1c:ae:31:98:56:cd:9a:e9:d8:
8e:97:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org