Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: 08Vzhn4SMcbLIsF7ZnSoX1Qz73LTtedJUVbHtVo/2XQ=
Subject key identifier: C5:84:36:05:46:44:56:9A:A7:BF:9D:BD:EA:30:42:63:48:6D:2E:D6
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7E11484E32551F6D022CDD6F6ACAD912101B8DDD
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS63023.roa
Signing time: Mon 21 Nov 2022 02:58:04 +0000
ROA not before: Mon 21 Nov 2022 02:53:04 +0000
ROA not after: Mon 20 Nov 2023 02:58:04 +0000
asID: 63023
IP address blocks: 2a0f:9400:6800::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:11:48:4e:32:55:1f:6d:02:2c:dd:6f:6a:ca:d9:12:10:1b:8d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 21 02:53:04 2022 GMT
Not After : Nov 20 02:58:04 2023 GMT
Subject: CN=C58436054644569AA7BF9DBDEA304263486D2ED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a3:1d:f7:a9:3b:0b:a8:b0:5a:d3:a2:7f:25:
c9:de:6f:fd:98:e6:ff:fb:26:3c:7d:a2:37:22:c5:
0d:81:03:09:a8:27:4b:88:f1:e6:08:64:6f:4c:d3:
dc:0f:1d:a3:4d:af:bb:20:0a:bb:65:aa:83:04:df:
fa:a1:98:9b:7b:48:64:d7:65:58:67:0f:6f:98:0d:
de:ad:2e:6d:09:bb:14:86:3d:33:23:76:c1:4f:81:
72:15:50:65:43:6c:be:b8:30:e2:d0:2e:27:f3:c2:
15:b1:a1:46:e0:dd:dd:5f:c9:bb:74:fc:6a:51:49:
18:7d:92:44:c2:91:2e:c9:81:70:62:64:0d:09:2b:
b9:05:0a:85:e8:f5:6f:84:85:04:f5:5c:d3:62:56:
15:08:8e:44:77:1c:63:0b:7e:14:f5:f8:c9:91:f4:
75:33:2f:92:b4:8b:70:08:ad:25:06:18:d1:24:c8:
9a:0b:c8:b7:49:a9:04:d2:5f:5b:43:5b:3c:83:a9:
4f:13:d7:ae:c9:bc:f0:8c:9e:38:1f:c5:71:71:30:
58:2a:ba:a8:56:6b:f8:9c:ed:85:70:50:b4:ff:94:
6e:3f:c0:45:26:10:11:b8:4f:ba:29:9a:59:22:6c:
1c:b3:47:91:63:b0:2f:01:b3:1f:b0:fe:3b:8a:31:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:84:36:05:46:44:56:9A:A7:BF:9D:BD:EA:30:42:63:48:6D:2E:D6
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6800::/40
Signature Algorithm: sha256WithRSAEncryption
51:d5:f2:51:01:83:73:57:f0:ee:a9:29:28:28:a0:a5:fd:d9:
26:4f:b9:04:0f:76:ff:80:d5:41:59:43:cb:db:1b:c3:80:80:
00:60:ee:42:c2:8e:bc:61:bd:12:27:04:61:62:9d:80:0b:bf:
35:84:33:3a:28:9e:fb:20:f3:4d:84:8d:f9:8d:29:3e:bd:10:
ba:d7:db:ce:05:4b:7a:5c:35:0d:f2:96:f9:a2:7f:bd:2d:d7:
d9:ad:0a:90:66:e5:a3:40:d7:5e:69:2e:41:e9:e1:7f:f5:5c:
13:45:51:70:95:38:1d:d6:06:b8:40:2a:11:71:db:ad:49:be:
bc:85:c7:cc:39:98:f8:0e:34:11:52:8e:c1:83:42:bf:8a:56:
e6:af:ce:b3:5f:76:ba:6f:0f:59:c3:25:f8:3e:48:87:1f:78:
f0:c4:69:c3:47:d0:86:5c:08:5c:ae:7a:32:50:73:8b:bd:b2:
8d:18:ad:6c:c8:13:d5:dc:40:52:bb:2e:5a:38:42:49:c2:d9:
06:f8:5e:bd:e8:60:d3:ea:ed:d1:b7:a3:58:02:9b:bf:cd:a9:
c8:a9:19:e3:a2:2d:53:0b:6f:20:f5:dd:54:7e:2a:6c:c0:5d:
24:6f:ff:74:3e:b8:1b:98:06:1c:f0:65:8a:a9:cc:1b:36:10:
b6:f4:1b:42
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUfhFITjJVH20CLN1vasrZEhAbjd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMjExMjEwMjUzMDRaFw0yMzExMjAwMjU4MDRaMDMxMTAvBgNV
BAMTKEM1ODQzNjA1NDY0NDU2OUFBN0JGOURCREVBMzA0MjYzNDg2RDJFRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3ox33qTsLqLBa06J/Jcneb/2Y
5v/7Jjx9ojcixQ2BAwmoJ0uI8eYIZG9M09wPHaNNr7sgCrtlqoME3/qhmJt7SGTX
ZVhnD2+YDd6tLm0JuxSGPTMjdsFPgXIVUGVDbL64MOLQLifzwhWxoUbg3d1fybt0
/GpRSRh9kkTCkS7JgXBiZA0JK7kFCoXo9W+EhQT1XNNiVhUIjkR3HGMLfhT1+MmR
9HUzL5K0i3AIrSUGGNEkyJoLyLdJqQTSX1tDWzyDqU8T167JvPCMnjgfxXFxMFgq
uqhWa/ic7YVwULT/lG4/wEUmEBG4T7opmlkibByzR5FjsC8Bsx+w/juKMYehAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQUxYQ2BUZEVpqnv5296jBCY0htLtYwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzYzMDIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+UAGgwDQYJKoZIhvcNAQELBQADggEB
AFHV8lEBg3NX8O6pKSgooKX92SZPuQQPdv+A1UFZQ8vbG8OAgABg7kLCjrxhvRIn
BGFinYALvzWEMzoonvsg802EjfmNKT69ELrX284FS3pcNQ3ylvmif70t19mtCpBm
5aNA115pLkHp4X/1XBNFUXCVOB3WBrhAKhFx261JvryFx8w5mPgONBFSjsGDQr+K
VuavzrNfdrpvD1nDJfg+SIcfePDEacNH0IZcCFyuejJQc4u9so0YrWzIE9XcQFK7
Llo4QknC2Qb4Xr3oYNPq7dG3o1gCm7/NqcipGeOiLVMLbyD13VR+KmzAXSRv/3Q+
uBuYBhzwZYqpzBs2ELb0G0I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org