Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/32332e3133332e36342e302f32342d3234203d3e20333934333532.roa
File: 32332e3133332e36342e302f32342d3234203d3e20333934333532.roa (raw, json)
Hash identifier: 1aWjFjqKWeMkyGj6NmjQ9Zjp7vIeroY8gIRZirOl1dU=
Subject key identifier: 7C:3B:C8:4F:D2:AE:9C:27:E5:93:81:68:E4:10:E9:D9:F8:66:FB:35
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 31153CA66B4F15FD2C859325007A6FD14C08403D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/32332e3133332e36342e302f32342d3234203d3e20333934333532.roa
Signing time: Thu 16 Dec 2021 03:26:30 +0000
ROA not before: Thu 16 Dec 2021 03:21:30 +0000
ROA not after: Thu 15 Dec 2022 03:26:30 +0000
asID: 394352
IP address blocks: 23.133.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:15:3c:a6:6b:4f:15:fd:2c:85:93:25:00:7a:6f:d1:4c:08:40:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Dec 16 03:21:30 2021 GMT
Not After : Dec 15 03:26:30 2022 GMT
Subject: CN=7C3BC84FD2AE9C27E5938168E410E9D9F866FB35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:2a:84:61:ad:c9:74:22:d3:5d:2f:2f:48:
37:21:22:e0:78:57:bf:81:60:49:76:96:b8:7a:f8:
43:07:cd:92:00:16:64:80:3f:54:e2:75:a4:cb:90:
6a:c0:7c:20:cf:52:ac:4d:08:47:18:91:ab:29:72:
81:c2:34:3e:76:9f:1a:c9:1c:ad:ef:ca:21:8e:2f:
f1:a0:c0:1c:69:70:f3:34:ec:11:ef:2c:18:53:f8:
e5:46:95:25:0e:bc:d6:3a:65:fd:b3:e3:2c:fe:8a:
e5:28:7f:27:59:02:ed:7d:a6:a4:ae:d1:a8:b8:75:
3b:bc:a6:7a:93:2e:d1:f0:75:90:37:37:92:1b:85:
55:8d:78:7a:62:69:a1:a7:3c:56:98:f2:6f:71:16:
3c:6d:8d:ba:f9:8d:21:15:22:e4:09:fe:59:08:f1:
36:bd:f1:69:ab:6a:d4:1a:a2:75:05:9a:c7:40:6c:
8b:f0:c6:1f:c3:17:13:fb:ff:74:6e:95:ee:78:c3:
80:fb:d6:92:27:8d:aa:6e:d9:0c:df:1d:b8:9f:25:
4c:c6:e1:0e:91:f6:ad:f0:93:82:52:de:bf:d7:a8:
ea:ea:00:7c:2f:ca:12:c2:3f:84:51:ea:21:ce:0a:
1e:7b:67:66:62:78:3f:e7:c9:0c:93:d5:71:2d:cb:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:C8:4F:D2:AE:9C:27:E5:93:81:68:E4:10:E9:D9:F8:66:FB:35
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/32332e3133332e36342e302f32342d3234203d3e20333934333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.133.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:c8:3c:4b:e5:2d:15:d6:24:72:91:8a:73:83:d6:0b:0a:f0:
fa:2c:f3:31:63:e2:3e:92:b0:b5:8f:83:20:39:dc:e4:df:4f:
66:53:66:54:e1:25:43:a3:76:b8:93:83:82:fe:7b:63:f7:27:
81:9e:8b:ac:4b:a0:95:05:dd:e0:46:df:1e:d4:a0:b3:37:14:
ea:36:d9:f0:ed:17:bc:28:bd:89:bd:09:23:34:24:ea:03:18:
e0:fb:6e:e0:39:67:c0:f1:50:bc:01:c6:3f:15:fb:be:1a:f9:
e0:f6:5e:d8:4c:49:0e:13:78:54:7e:1b:70:60:89:75:66:e0:
84:c1:42:79:51:9d:58:5c:d7:ce:ac:ac:c7:7e:6b:22:75:64:
f4:d1:8f:cb:e0:90:cf:0b:cd:37:d7:f3:f3:50:ca:03:75:ff:
59:40:d8:a1:9c:7f:f3:29:c4:08:e9:02:35:b2:2b:bc:67:15:
6c:04:e6:96:d5:6e:50:0b:f4:be:bc:fc:09:9e:fc:a5:cd:f2:
96:6b:9b:ce:55:d5:56:cb:28:ec:e9:08:bb:df:ee:49:0d:16:
ab:1e:9b:ed:cd:51:69:fa:ce:e3:83:8a:8a:ec:e8:fd:8d:fc:
e5:68:60:d7:cf:c6:c9:41:5e:5a:09:a6:ac:da:b2:28:dc:b0:
7f:d9:04:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-ams.rpki-client.org