Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/3230362e38332e34312e302f32342d3234203d3e203533333536.roa
File: 3230362e38332e34312e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier: lhlfQolRXENWuMEXcMaWNqbVZjtL60wd4YfjP3lQ7Ls=
Subject key identifier: 02:6D:A0:44:1E:70:95:E7:F6:1D:F8:FD:04:28:77:A2:30:6B:86:C9
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 7548CC8D88551BC4535F0F238DE177614D79ECD8
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/3230362e38332e34312e302f32342d3234203d3e203533333536.roa
Signing time: Thu 16 Dec 2021 03:26:24 +0000
ROA not before: Thu 16 Dec 2021 03:21:24 +0000
ROA not after: Thu 15 Dec 2022 03:26:24 +0000
asID: 53356
IP address blocks: 206.83.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:48:cc:8d:88:55:1b:c4:53:5f:0f:23:8d:e1:77:61:4d:79:ec:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Dec 16 03:21:24 2021 GMT
Not After : Dec 15 03:26:24 2022 GMT
Subject: CN=026DA0441E7095E7F61DF8FD042877A2306B86C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:db:94:9b:cb:39:20:15:e2:b3:34:f2:5e:
33:b6:d3:2f:2e:a2:2b:05:04:16:da:7b:86:9f:bd:
26:08:6e:ea:3b:62:a2:77:4c:3d:a8:8f:fc:4a:9b:
c0:75:ba:3d:90:10:70:52:63:a7:9e:1c:8d:73:e0:
dc:9d:76:27:04:73:e8:8d:3b:4c:cd:c6:82:81:d2:
b4:e2:72:63:16:cb:2d:b4:e3:23:b3:34:9f:6f:dd:
72:0e:ee:40:9d:b2:59:f9:bc:49:9a:1a:92:76:0b:
82:f7:96:1a:9c:a2:a2:19:db:d4:6b:ad:ea:64:5c:
6d:87:cc:ab:8c:f0:cc:7c:44:be:5d:02:17:e9:fc:
7a:64:b0:5b:5a:4e:5b:bd:50:20:b8:2b:5e:70:81:
e1:cb:17:06:6b:d4:07:d1:3f:66:1f:78:49:df:a6:
29:ab:f2:dc:66:f2:bd:be:b6:74:c6:16:68:40:fe:
b5:71:36:55:48:f3:b7:07:d8:2f:1c:a9:f6:f3:b7:
2f:69:59:98:01:1e:81:18:dd:1f:60:3e:5c:b6:ca:
66:81:7a:09:70:c9:1b:12:3d:16:f3:d9:57:d2:39:
3e:6c:b2:d5:8d:4f:06:00:83:02:c2:73:ed:ea:06:
ff:08:98:5b:e9:0e:36:f2:bc:b5:f2:8d:97:4b:a7:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:A0:44:1E:70:95:E7:F6:1D:F8:FD:04:28:77:A2:30:6B:86:C9
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/3230362e38332e34312e302f32342d3234203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.83.41.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a4:08:03:17:3c:82:0e:37:a5:fc:08:db:70:a0:66:5f:5f:
e1:bc:35:9f:25:57:91:7d:e5:ce:c0:35:35:68:f7:ce:9a:90:
e6:c2:0c:2b:30:32:86:20:e1:9b:a5:9c:75:ee:b7:9d:c4:97:
48:e4:b1:c4:80:e0:86:57:64:65:17:b1:e6:3c:da:aa:a6:d0:
28:3c:93:53:92:70:3a:d6:a2:b1:d3:f1:41:62:6e:ff:3c:28:
f9:c9:38:83:e5:e0:2b:70:46:e4:1f:c2:bc:2a:13:a7:94:5c:
38:80:4c:ad:37:b3:b7:36:6d:17:6b:e9:c0:d0:7c:36:9a:9c:
9a:c7:ec:a4:3b:42:64:f3:9d:e3:ed:bc:a0:45:69:56:12:80:
ae:85:99:5d:82:b1:b4:3b:89:0b:02:ec:20:80:e8:60:3e:51:
07:16:13:49:60:7c:f6:21:36:f5:f0:e7:7d:0b:31:03:41:c4:
d0:77:74:d5:cc:18:97:d8:b1:19:fe:65:cd:23:76:62:cf:ac:
72:d8:0a:bb:7c:1b:e3:e2:bc:68:63:06:5f:0f:f0:a1:7d:09:
2c:63:fd:9d:f0:91:b4:00:d6:f2:78:22:68:43:4d:29:ea:bd:
03:6f:ea:99:2b:ec:06:ca:01:12:97:ff:e1:d7:ef:c4:b7:da:
06:e1:cc:d7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUdUjMjYhVG8RTXw8jjeF3YU157NgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTI0WhcNMjIxMjE1MDMyNjI0
WjAzMTEwLwYDVQQDEygwMjZEQTA0NDFFNzA5NUU3RjYxREY4RkQwNDI4NzdBMjMw
NkI4NkM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfXblJvLOSAV
4rM08l4zttMvLqIrBQQW2nuGn70mCG7qO2Kid0w9qI/8SpvAdbo9kBBwUmOnnhyN
c+DcnXYnBHPojTtMzcaCgdK04nJjFssttOMjszSfb91yDu5AnbJZ+bxJmhqSdguC
95YanKKiGdvUa63qZFxth8yrjPDMfES+XQIX6fx6ZLBbWk5bvVAguCtecIHhyxcG
a9QH0T9mH3hJ36Ypq/LcZvK9vrZ0xhZoQP61cTZVSPO3B9gvHKn287cvaVmYAR6B
GN0fYD5ctspmgXoJcMkbEj0W89lX0jk+bLLVjU8GAIMCwnPt6gb/CJhb6Q428ry1
8o2XS6d0eQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFAJtoEQecJXn9h34/QQod6Iw
a4bJMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgYgGCCsGAQUFBwELBHwwejB4
BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3VkLmNv
bS9yZXBvL0ZSQy1DQS8wLzMyMzAzNjJlMzgzMzJlMzQzMTJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM1MzMzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADOUykwDQYJKoZIhvcNAQEL
BQADggEBAJWkCAMXPIION6X8CNtwoGZfX+G8NZ8lV5F95c7ANTVo986akObCDCsw
MoYg4ZulnHXut53El0jkscSA4IZXZGUXseY82qqm0Cg8k1OScDrWorHT8UFibv88
KPnJOIPl4CtwRuQfwrwqE6eUXDiATK03s7c2bRdr6cDQfDaanJrH7KQ7QmTznePt
vKBFaVYSgK6FmV2CsbQ7iQsC7CCA6GA+UQcWE0lgfPYhNvXw530LMQNBxNB3dNXM
GJfYsRn+Zc0jdmLPrHLYCrt8G+PivGhjBl8P8KF9CSxj/Z3wkbQA1vJ4ImhDTSnq
vQNv6pkr7AbKARKX/+HX78S32gbhzNc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:01 2025 by rpki-client