Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/3136372e38382e34392e302f32342d3234203d3e203632393937.roa
File: 3136372e38382e34392e302f32342d3234203d3e203632393937.roa (raw, json)
Hash identifier: zeHQBFQc/VGbJeW4WJsN9sLzenKIFVaADacjgYp9rH0=
Subject key identifier: AA:11:6F:5D:87:C8:37:27:A0:68:6D:D7:FD:4B:E2:56:AC:0E:C4:8D
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 7E24A77919C6452D801DD7E0BE3B5E3934B7F499
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/3136372e38382e34392e302f32342d3234203d3e203632393937.roa
Signing time: Thu 20 Jan 2022 17:53:58 +0000
ROA not before: Thu 20 Jan 2022 17:48:58 +0000
ROA not after: Thu 19 Jan 2023 17:53:58 +0000
asID: 62997
IP address blocks: 167.88.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:24:a7:79:19:c6:45:2d:80:1d:d7:e0:be:3b:5e:39:34:b7:f4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Jan 20 17:48:58 2022 GMT
Not After : Jan 19 17:53:58 2023 GMT
Subject: CN=AA116F5D87C83727A0686DD7FD4BE256AC0EC48D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:50:b4:ea:4d:64:a6:77:34:a2:c9:68:71:
d3:c2:62:a8:72:1b:b0:82:18:2c:1f:c1:2b:ae:0f:
e0:3b:e8:34:d1:f3:5e:73:06:a5:01:f3:6f:a4:94:
a2:64:db:15:d6:8a:4a:63:55:78:c6:53:52:73:cb:
24:9b:3c:d1:7e:33:5f:9c:ae:b0:f6:fa:bf:5d:0b:
59:c4:2b:9d:f2:aa:ce:89:b9:b0:a0:19:eb:9d:d3:
67:a3:cd:78:af:e1:dd:7c:00:8e:ca:be:56:0c:37:
a1:2d:0c:6d:38:60:09:95:22:29:4b:1a:c4:e2:a5:
da:1c:a3:43:eb:d9:68:49:00:92:88:c4:47:07:08:
71:9f:39:d5:9c:d8:d5:12:48:e1:d3:36:7d:53:5c:
7d:d9:f9:67:01:dc:3d:9f:00:27:1a:2f:75:34:e0:
69:7b:25:75:7b:18:98:cb:bd:4d:77:c0:e5:16:ae:
68:b3:80:eb:75:12:1b:ef:88:32:c1:a4:37:24:23:
be:63:73:b2:fe:88:a5:9d:cb:81:a1:9f:c9:c5:55:
fd:7f:8d:39:6d:76:bf:ca:2d:7c:9d:5e:d1:9f:3f:
29:0a:ae:7a:23:b3:8b:60:d4:5a:c2:5b:bc:36:1c:
4f:77:f7:da:2e:e5:16:41:70:1a:1f:ac:d7:62:8d:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:11:6F:5D:87:C8:37:27:A0:68:6D:D7:FD:4B:E2:56:AC:0E:C4:8D
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/3136372e38382e34392e302f32342d3234203d3e203632393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.49.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:39:d0:62:23:f8:bb:31:60:22:2e:8c:a7:dc:3c:44:46:7c:
45:5e:10:be:ed:1b:cc:bc:df:fc:21:b0:d3:59:d8:b4:82:18:
ab:0c:a0:7c:3b:b4:f1:22:e8:76:67:a2:71:db:af:e2:c9:53:
58:5f:a4:f0:50:62:83:89:9a:28:29:fb:4a:3a:66:02:5c:ae:
f4:ac:e6:7d:17:98:a1:cd:72:d8:17:7d:c8:db:36:86:ad:2e:
f7:c5:ab:48:b9:e8:66:3a:54:35:d1:e7:0f:48:33:43:26:08:
80:84:18:a7:62:59:33:7d:a4:7f:cb:75:4c:c2:ab:cb:57:95:
f4:19:30:10:9b:c2:6a:05:e2:8b:72:65:d5:36:50:00:84:7b:
33:0c:a6:5b:98:48:c6:02:79:de:73:d2:33:0b:1d:b8:9a:df:
15:ac:ae:27:60:a3:5c:99:94:21:3c:88:20:dd:b3:4c:81:e5:
0f:d2:4d:81:8a:7f:8e:83:10:b8:ad:30:22:87:78:05:68:7e:
a8:d9:d3:ae:6b:b7:ba:26:e1:a2:98:12:c1:30:dc:c0:8b:d4:
7d:6b:9d:2e:29:7d:f2:3d:bc:34:23:c0:63:7b:78:cc:a2:33:
87:93:73:7e:5a:9a:45:8d:fd:a8:a6:04:c4:7e:ce:4c:b8:06:
76:57:88:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUfiSneRnGRS2AHdfgvjteOTS39JkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjIwMTIwMTc0ODU4WhcNMjMwMTE5MTc1MzU4
WjAzMTEwLwYDVQQDEyhBQTExNkY1RDg3QzgzNzI3QTA2ODZERDdGRDRCRTI1NkFD
MEVDNDhEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKNQtOpNZKZ3
NKLJaHHTwmKochuwghgsH8Errg/gO+g00fNecwalAfNvpJSiZNsV1opKY1V4xlNS
c8skmzzRfjNfnK6w9vq/XQtZxCud8qrOibmwoBnrndNno814r+HdfACOyr5WDDeh
LQxtOGAJlSIpSxrE4qXaHKND69loSQCSiMRHBwhxnznVnNjVEkjh0zZ9U1x92fln
Adw9nwAnGi91NOBpeyV1exiYy71Nd8DlFq5os4DrdRIb74gywaQ3JCO+Y3Oy/oil
ncuBoZ/JxVX9f405bXa/yi18nV7Rnz8pCq56I7OLYNRawlu8NhxPd/faLuUWQXAa
H6zXYo36VQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFKoRb12HyDcnoGht1/1L4las
DsSNMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgYgGCCsGAQUFBwELBHwwejB4
BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3VkLmNv
bS9yZXBvL0ZSQy1DQS8wLzMxMzYzNzJlMzgzODJlMzQzOTJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM2MzIzOTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACnWDEwDQYJKoZIhvcNAQEL
BQADggEBAKo50GIj+LsxYCIujKfcPERGfEVeEL7tG8y83/whsNNZ2LSCGKsMoHw7
tPEi6HZnonHbr+LJU1hfpPBQYoOJmigp+0o6ZgJcrvSs5n0XmKHNctgXfcjbNoat
LvfFq0i56GY6VDXR5w9IM0MmCICEGKdiWTN9pH/LdUzCq8tXlfQZMBCbwmoF4oty
ZdU2UACEezMMpluYSMYCed5z0jMLHbia3xWsridgo1yZlCE8iCDds0yB5Q/STYGK
f46DELitMCKHeAVofqjZ065rt7om4aKYEsEw3MCL1H1rnS4pffI9vDQjwGN7eMyi
M4eTc35amkWN/aimBMR+zky4BnZXiJ8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:28 2025 by rpki-client