Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS64515.roa
File: AS64515.roa (raw, json)
Hash identifier: FfN+zfYsC5zi2mTk3QCqsleHNIgkx0I2XlnxvdCMIlw=
Subject key identifier: 16:EA:BF:9D:8B:4A:C5:F6:9C:D6:A1:3A:65:E4:6B:59:1E:49:A8:E7
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3F0C19C834C45084405D360EE03983A89D4EBB80
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS64515.roa
Signing time: Tue 12 Mar 2024 13:47:30 +0000
ROA not before: Tue 12 Mar 2024 13:42:30 +0000
ROA not after: Tue 11 Mar 2025 13:47:30 +0000
asID: 64515
IP address blocks: 2a0f:9400:690e::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Mar 2024 15:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0c:19:c8:34:c4:50:84:40:5d:36:0e:e0:39:83:a8:9d:4e:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 12 13:42:30 2024 GMT
Not After : Mar 11 13:47:30 2025 GMT
Subject: CN=16EABF9D8B4AC5F69CD6A13A65E46B591E49A8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:40:e0:69:bd:71:ce:cd:85:60:b3:55:27:
76:48:49:16:33:ee:df:b5:1d:6a:e3:2c:4e:88:2b:
31:82:6e:e5:58:cf:b8:61:9c:37:be:6f:06:28:6b:
9f:13:bc:d2:18:ab:22:58:f1:ec:23:b3:32:ae:92:
05:54:b2:b4:aa:73:ed:a0:10:76:a5:fd:97:26:b8:
6e:85:1e:50:f0:96:5d:6d:f4:97:dd:1e:39:11:83:
c2:85:2f:fb:73:43:1b:e2:7b:8f:73:46:ad:23:87:
a6:86:ac:de:4f:4f:b2:c1:2f:4d:28:a5:f3:5b:84:
b3:0b:fa:d2:e8:98:d3:df:34:65:6a:ca:b3:3b:c7:
af:2e:50:52:11:eb:61:06:05:14:e9:12:19:2b:09:
5f:00:96:4f:3c:03:ce:ef:3e:95:78:96:02:67:a2:
d6:82:4d:97:3d:cc:fa:b1:7f:2a:5f:0b:96:99:31:
5b:aa:4c:eb:89:48:19:62:d6:61:46:bb:74:3e:9e:
71:b0:4c:ef:37:52:1a:c4:72:4b:f5:1f:a0:fc:b4:
ec:22:1b:b3:9b:46:b2:fc:7c:31:41:32:31:ea:e2:
f4:2e:f1:a8:98:1b:c9:ec:8c:99:34:e7:45:02:65:
74:92:13:f3:28:f6:ca:a7:26:62:2c:4b:a8:32:05:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:BF:9D:8B:4A:C5:F6:9C:D6:A1:3A:65:E4:6B:59:1E:49:A8:E7
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS64515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:690e::/48
Signature Algorithm: sha256WithRSAEncryption
3d:20:da:c0:2f:1e:6d:8c:80:71:db:4c:c2:92:99:00:de:90:
25:98:7a:64:9a:f2:94:e7:42:42:50:c6:90:3a:03:47:09:42:
fa:9c:2c:da:e8:52:56:43:89:91:be:58:91:8e:11:ad:0f:97:
d2:57:28:b2:ec:64:65:73:26:96:f1:0f:50:fc:58:98:73:c6:
67:9d:f4:45:0f:e0:b9:f2:4a:98:7c:65:39:cc:53:fa:2b:1d:
d1:13:03:a4:2b:40:9c:3c:b0:e8:8c:d4:da:04:f5:50:d5:c0:
dd:f5:1a:91:a3:42:06:41:02:c4:89:d2:a8:40:df:e3:18:57:
25:a2:9f:de:ed:97:90:9c:17:81:6f:71:76:e3:d9:13:1c:ec:
d4:c2:a4:23:74:97:27:02:4f:34:e7:92:ae:c5:9d:26:95:b5:
11:9e:91:eb:33:8a:30:fe:ae:98:80:1f:92:eb:8f:b9:7e:8f:
db:61:d0:fc:53:95:d0:d5:8f:5c:d0:ef:eb:ce:98:64:d5:25:
9f:7a:8c:87:12:c2:74:df:23:44:e6:50:4a:7b:df:e4:09:b3:
dc:4e:fb:ca:e1:bd:8a:80:59:a0:2b:37:a7:cb:5a:8e:5b:5a:
88:a2:8f:31:7a:4f:82:8e:45:32:26:97:74:a0:da:01:19:36:
c5:4a:60:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org