Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373037303a3a2f34342d3434203d3e203331373938.roa
File: 323630323a666564323a373037303a3a2f34342d3434203d3e203331373938.roa (raw, json)
Hash identifier: w23AQKWA0yfIDh7v8mhasFK1HlVI+q3uHeqQx+BjSZ0=
Subject key identifier: AC:27:17:05:96:20:9A:61:28:67:34:8D:8F:57:BC:D4:DA:B9:00:D9
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 0DE32D6D9B03538A4060C96A8EEE5BCB20767D58
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373037303a3a2f34342d3434203d3e203331373938.roa
Signing time: Thu 16 Dec 2021 03:26:26 +0000
ROA not before: Thu 16 Dec 2021 03:21:26 +0000
ROA not after: Thu 15 Dec 2022 03:26:26 +0000
asID: 31798
IP address blocks: 2602:fed2:7070::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e3:2d:6d:9b:03:53:8a:40:60:c9:6a:8e:ee:5b:cb:20:76:7d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Dec 16 03:21:26 2021 GMT
Not After : Dec 15 03:26:26 2022 GMT
Subject: CN=AC27170596209A612867348D8F57BCD4DAB900D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:39:a7:d0:12:18:3a:8a:a3:0c:15:b5:32:
48:f9:70:0d:0d:0f:39:cd:ad:4a:20:a9:e3:39:d7:
f0:33:b8:f8:95:77:3d:64:15:b6:92:fb:ee:9e:e2:
88:47:0b:3b:62:3c:d7:24:25:35:93:4e:48:9c:72:
e6:16:5f:20:63:d3:68:7a:8a:13:ee:b2:81:ea:01:
48:da:69:20:bd:63:a8:bb:a8:e0:6a:58:f7:52:d6:
d7:e8:3d:7d:6f:0c:0d:0c:11:8d:a5:4b:30:ea:46:
06:df:c2:85:7b:ec:3e:77:e1:8f:a2:7e:ba:73:c2:
84:75:63:69:74:8e:43:74:5e:52:64:d3:d6:eb:ef:
52:45:ff:f9:17:c8:c1:c9:50:32:3c:65:e4:77:9e:
e2:0b:6d:5d:d0:22:13:43:6b:7d:3e:7f:58:f1:3d:
c5:3c:ec:73:8f:aa:08:fa:0e:bb:36:94:60:9e:17:
84:94:36:79:d2:9c:39:32:e1:99:b9:5b:17:28:9e:
fb:3e:94:d6:92:2c:cd:3a:cb:6e:c1:e4:db:1d:f9:
f8:06:b8:fe:58:2d:88:85:e6:24:a3:ba:92:40:43:
c5:28:df:9a:0e:e0:d8:37:5e:2b:5b:90:09:9f:db:
10:a3:bb:25:32:f5:81:be:c3:a4:32:65:bd:8c:0e:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:27:17:05:96:20:9A:61:28:67:34:8D:8F:57:BC:D4:DA:B9:00:D9
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373037303a3a2f34342d3434203d3e203331373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7070::/44
Signature Algorithm: sha256WithRSAEncryption
11:c6:61:97:39:d8:58:d6:15:36:4c:72:dd:bb:18:ba:5c:c8:
33:b4:17:f7:cf:2d:5d:eb:d7:b7:cd:3f:00:b0:9a:46:c3:d5:
f6:a5:3a:0a:ad:ac:e8:9c:f9:19:27:47:bf:cb:ce:cf:79:9c:
a0:a2:3b:51:a5:39:7f:fa:ab:11:d3:12:5d:82:29:82:88:bb:
73:59:17:2f:49:97:be:70:2c:5e:e7:3a:21:e7:3c:4d:25:a2:
cf:65:0b:4e:2d:76:c9:6b:9d:8e:95:ab:70:9f:a2:e7:30:77:
38:7f:c2:4e:2b:06:d9:e2:ff:0a:a9:99:5b:bc:cf:f5:0a:47:
85:58:9b:d5:55:c1:8b:db:56:52:9b:dd:0e:b9:4c:ab:31:59:
f5:d9:1a:fa:c0:10:c7:aa:bd:aa:9e:bb:df:03:89:af:46:fe:
1f:ad:8e:22:f2:f4:8f:a9:19:1e:25:01:94:89:49:67:f6:c9:
21:8a:b7:70:2e:4d:f4:63:98:6f:bb:d7:7d:b0:77:66:b7:94:
1c:a6:c8:9d:67:b5:23:59:29:06:a2:b0:36:14:47:c2:f1:ef:
dc:5d:71:57:58:5c:b6:77:48:ec:12:d0:e7:a5:9f:22:93:d3:
56:27:ef:26:a6:08:52:03:f5:e1:7a:86:0a:69:e9:96:f8:4a:
9f:b9:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:03 2025 by rpki-client