Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131373a3a2f34382d3438203d3e203537323537.roa
File: 323630323a666564323a373131373a3a2f34382d3438203d3e203537323537.roa (raw, json)
Hash identifier: wT7E+fpp4PKQvGPOTaMwK/d7YxcKpUqGiJsN5CHCqEg=
Subject key identifier: 9F:06:F2:19:B2:9C:E2:C6:7B:F6:5C:E0:BE:A1:FE:9B:F2:30:85:B6
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 33F5AC29DCBFB209A561F20286284E5B79CF8101
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131373a3a2f34382d3438203d3e203537323537.roa
Signing time: Sun 26 Dec 2021 18:25:23 +0000
ROA not before: Sun 26 Dec 2021 18:20:23 +0000
ROA not after: Sun 25 Dec 2022 18:25:23 +0000
asID: 57257
IP address blocks: 2602:fed2:7117::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f5:ac:29:dc:bf:b2:09:a5:61:f2:02:86:28:4e:5b:79:cf:81:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Dec 26 18:20:23 2021 GMT
Not After : Dec 25 18:25:23 2022 GMT
Subject: CN=9F06F219B29CE2C67BF65CE0BEA1FE9BF23085B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1f:81:d5:38:c7:ed:4d:d4:a5:5b:ac:f1:37:
23:5c:be:b8:6a:1a:5c:9a:16:c1:cf:42:60:73:db:
ea:06:3d:34:35:b3:2a:67:e4:f5:14:46:f3:e5:13:
93:58:aa:5c:a1:9e:f3:6b:75:ee:4b:ad:0c:8a:05:
ab:c7:7a:f1:0d:f9:f4:4a:96:09:4c:5a:a8:a2:f9:
40:5f:a2:8e:a3:69:d7:fe:a6:2a:a9:b5:d4:b7:02:
c8:9c:7d:b5:13:62:50:77:c0:1c:e1:89:06:12:ac:
7e:13:47:eb:bc:a4:04:f5:18:34:97:a8:f8:fa:a5:
d1:47:3d:ea:d5:2c:a6:e7:87:72:74:99:98:b6:bc:
85:c1:00:4d:61:3a:c6:0f:d0:83:64:67:87:d1:4f:
af:78:2c:42:84:48:4f:70:06:1c:1d:07:a6:90:78:
1e:c7:d6:12:20:a5:05:fe:2b:30:33:ac:18:b9:f9:
0b:92:e4:f4:e0:f5:b2:a1:58:b4:9a:92:50:84:ae:
d0:9d:52:c9:35:13:e8:ff:b6:80:52:40:04:e4:1e:
e8:2a:8a:9c:16:d6:69:80:71:d3:00:26:9d:9f:2a:
49:8f:88:41:32:04:e5:ee:ed:be:17:fb:e6:40:48:
e5:ab:20:28:47:8e:53:bd:fa:f1:5f:e7:d5:97:02:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:F2:19:B2:9C:E2:C6:7B:F6:5C:E0:BE:A1:FE:9B:F2:30:85:B6
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131373a3a2f34382d3438203d3e203537323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7117::/48
Signature Algorithm: sha256WithRSAEncryption
23:22:9c:51:7b:22:22:4c:4a:ce:3d:7b:b8:de:5c:57:bb:ee:
41:e4:c2:8f:88:44:30:2f:f7:ef:45:70:33:05:35:ef:5a:6e:
53:7c:0b:1c:7c:2d:26:9d:3a:e5:7e:bd:33:91:51:8a:1f:fd:
1f:bd:94:6f:aa:92:1b:f6:60:62:8f:c3:d8:52:c6:d5:fa:9c:
b0:61:4e:71:e4:9b:2d:e7:ad:60:d2:c1:ab:56:76:27:22:d2:
83:5c:00:8f:6b:1e:87:ac:5e:0e:88:e3:b8:6d:be:af:b1:5f:
d8:1a:fc:d5:c8:ce:38:9c:55:1e:0f:b3:2d:dc:af:2a:5b:54:
2a:75:43:da:46:0c:68:b9:2b:d1:9f:c9:81:d5:ea:da:91:95:
e9:f2:ff:43:63:12:dd:43:fb:6d:c0:ea:a9:01:71:1b:13:8f:
83:e4:81:f9:f9:fa:12:0f:06:5c:f0:32:c5:8f:9f:c9:2b:7c:
cb:a3:18:7a:90:7a:5c:42:92:f9:7e:d3:0e:93:db:2f:79:34:
e3:3b:6f:25:ec:c7:f8:5c:d9:6f:8c:b9:f0:3f:f4:c4:56:3c:
c3:d6:a7:c1:86:29:c5:e3:8f:90:40:ef:4c:3e:c2:0c:c7:d1:
7b:a0:6e:2b:80:f4:7c:a2:cd:27:14:8b:8a:9a:e1:eb:3d:86:
82:15:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:01 2025 by rpki-client