Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/3230362e38332e34302e302f32342d3234203d3e203533333536.roa
File: 3230362e38332e34302e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier: Gi/cayDE6l2EM3Jar0De0z++Us4BGLNEsctBU8u2sho=
Subject key identifier: 84:FC:E3:6A:6B:71:85:8B:C7:D9:1B:00:BD:4C:09:CA:6F:9C:68:70
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 47A0C9FA3D02CFDCF43A1093CF4DFED0D37AF860
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/3230362e38332e34302e302f32342d3234203d3e203533333536.roa
Signing time: Thu 16 Dec 2021 03:26:23 +0000
ROA not before: Thu 16 Dec 2021 03:21:23 +0000
ROA not after: Thu 15 Dec 2022 03:26:23 +0000
asID: 53356
IP address blocks: 206.83.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a0:c9:fa:3d:02:cf:dc:f4:3a:10:93:cf:4d:fe:d0:d3:7a:f8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Dec 16 03:21:23 2021 GMT
Not After : Dec 15 03:26:23 2022 GMT
Subject: CN=84FCE36A6B71858BC7D91B00BD4C09CA6F9C6870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:29:3f:6b:f8:03:07:4b:50:56:3b:2b:91:
10:14:45:2e:54:b2:fc:00:d8:cd:b5:23:34:b0:30:
88:59:4d:92:9f:f5:da:ee:c2:d3:3d:0e:bc:1e:8a:
9c:53:05:a1:9d:d4:5f:75:82:cc:ef:58:a5:d5:e8:
7a:17:6e:b2:d3:9a:0f:b4:87:52:7d:bb:ed:22:02:
89:f4:6e:59:3c:e1:60:54:18:4c:29:ea:37:14:9d:
db:4b:3e:9d:a2:72:97:c5:e6:cf:7d:37:10:d8:f9:
20:56:49:d3:7b:f8:36:42:ae:57:1f:b1:2e:e1:c3:
6c:79:84:bb:b7:03:06:01:d2:17:fc:7f:a0:60:28:
bf:93:8a:53:58:26:da:28:23:fa:c5:74:4f:98:a5:
6e:c5:16:f0:20:5d:49:1b:90:58:43:ba:94:7e:95:
8e:a1:2e:3d:ea:2f:c4:4a:be:c3:6d:e9:f3:1b:fe:
6a:5c:ed:f0:34:3c:d4:f7:e5:f2:e5:01:7b:95:ae:
03:93:c1:3c:7d:c0:30:ad:32:b2:36:c9:fe:31:19:
33:0d:0f:85:e3:39:66:bb:e9:49:c3:c4:ec:8e:33:
8c:01:11:41:9f:24:f5:41:f1:d3:5e:70:10:38:de:
16:c7:bc:1e:73:4f:0c:8b:30:86:6b:41:48:3e:57:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FC:E3:6A:6B:71:85:8B:C7:D9:1B:00:BD:4C:09:CA:6F:9C:68:70
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/3230362e38332e34302e302f32342d3234203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.83.40.0/24
Signature Algorithm: sha256WithRSAEncryption
34:80:73:1e:d0:bf:de:e4:f2:57:19:b6:ce:ea:44:0c:96:0b:
91:18:51:ba:68:bc:d9:8e:bd:53:85:87:37:2a:07:8b:fe:f0:
c3:03:e4:5c:8b:b3:54:e7:a5:b5:b8:30:4a:8c:14:c2:6b:63:
77:da:1b:36:71:64:e7:70:79:26:66:05:01:df:2a:a3:7b:2d:
bf:69:b0:07:9d:a8:3d:fd:0d:29:4e:e0:c3:24:5d:6a:09:15:
dc:8d:fc:7f:70:b4:97:8b:a6:e0:64:3d:d2:43:18:8a:1d:e1:
d6:de:50:d7:29:56:56:71:be:6c:df:15:76:70:b4:79:ae:20:
a3:8a:c7:e7:ed:6c:0c:6a:ac:63:0e:68:a3:01:77:1c:b8:2d:
ea:7d:43:b6:5c:cc:8a:99:07:4b:89:d9:d2:80:51:1d:28:34:
51:31:e4:91:63:54:ad:c8:13:d7:b4:4e:5d:f1:15:12:0e:09:
45:63:b1:68:89:f2:4b:3d:25:f6:c3:31:5d:74:f4:52:16:b1:
e6:41:0c:dd:f8:74:61:f8:1e:a4:43:25:71:9a:0f:dc:4e:75:
f7:63:d9:00:e2:28:5b:f4:e8:d5:6b:e2:3a:81:ac:a7:90:4d:
45:bb:72:de:41:97:91:66:89:de:99:3a:a4:9a:d3:e7:66:20:
8a:e0:39:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:32 2025 by rpki-client