Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138343a3a2f34382d3438203d3e203533333536.roa
File: 323630323a666564323a373138343a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier: j2lBMAcV74nbkSCwSYjshXhO31nDcHRjDQC/Cv/zgrw=
Subject key identifier: 8E:5E:DC:42:24:0A:7B:B1:9D:EB:99:DB:6A:F2:31:8E:34:20:E3:2D
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 0F539B628C1A20DDDB53CCEC7711E58E7B89110A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138343a3a2f34382d3438203d3e203533333536.roa
Signing time: Thu 16 Dec 2021 03:26:20 +0000
ROA not before: Thu 16 Dec 2021 03:21:20 +0000
ROA not after: Thu 15 Dec 2022 03:26:20 +0000
asID: 53356
IP address blocks: 2602:fed2:7184::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:53:9b:62:8c:1a:20:dd:db:53:cc:ec:77:11:e5:8e:7b:89:11:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Dec 16 03:21:20 2021 GMT
Not After : Dec 15 03:26:20 2022 GMT
Subject: CN=8E5EDC42240A7BB19DEB99DB6AF2318E3420E32D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:c5:dd:ac:ac:88:bd:f7:00:fd:b9:a1:ba:
48:74:f4:66:b9:84:ea:ca:17:01:b0:b8:8b:9e:9a:
09:1c:12:a9:b1:93:cb:b6:9c:0f:6a:3a:3a:39:83:
63:79:87:44:f1:1b:58:3d:3f:4a:5f:40:29:3e:87:
40:85:17:0b:58:21:72:ba:3b:c0:12:e4:02:3a:34:
b5:31:82:6c:02:ba:08:78:ea:12:26:87:dd:1d:7c:
3b:7b:ef:79:df:cd:da:91:82:6d:0b:2b:15:7f:5d:
4c:d8:11:d6:df:ca:8f:90:bb:48:03:2a:68:8b:2b:
36:14:be:f5:ba:3a:79:9a:44:7f:77:01:06:11:c1:
32:8a:39:e6:7d:5b:c5:77:2b:0a:22:3c:b2:d3:1b:
84:7c:7f:6f:d7:4b:2c:7d:1f:49:a3:b2:f7:97:0b:
cb:4e:e5:ec:d4:b1:9b:3c:50:bf:83:f5:36:5a:ec:
90:65:e9:51:81:f1:56:5e:68:be:35:1a:04:32:ef:
2a:42:1a:ff:17:7e:64:29:b4:ba:67:b5:28:96:66:
f6:3d:32:8a:b7:d7:87:d6:33:c8:08:7e:08:67:4c:
f6:ec:5d:07:87:6c:7c:9d:bd:77:4d:ec:69:fe:da:
bc:02:18:47:d9:dd:08:51:f8:07:2e:32:9d:19:41:
67:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5E:DC:42:24:0A:7B:B1:9D:EB:99:DB:6A:F2:31:8E:34:20:E3:2D
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138343a3a2f34382d3438203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7184::/48
Signature Algorithm: sha256WithRSAEncryption
a5:9d:19:d4:d9:f9:a7:95:a5:27:29:25:5d:3f:22:d3:e1:b9:
0f:b2:01:cb:56:69:cd:54:a6:3c:95:80:bc:b3:40:c5:7f:51:
2b:e4:f4:b7:7a:5b:d3:d0:10:25:1a:bd:ef:14:a9:c9:2f:fa:
72:60:08:e7:d0:9d:be:67:87:8a:b5:6a:e1:bb:c7:c2:6a:c5:
e9:75:28:68:fc:9c:9e:c2:ec:2e:e0:d4:e7:85:01:34:64:de:
6b:7a:07:e6:b5:67:b4:27:3b:bf:24:af:51:a7:54:fb:42:1f:
ec:97:f7:8d:90:6d:0b:ef:ac:32:0b:e8:e2:ff:e5:70:c4:95:
d2:ad:d9:4b:ec:e5:78:ad:45:d3:b9:c7:7e:9d:43:09:c1:bd:
64:e8:df:6b:9b:ba:b1:a0:8e:e5:1a:2b:21:bf:53:2e:d4:46:
87:49:3f:4a:98:c3:9e:46:28:bf:28:84:da:dd:fc:14:e3:2a:
03:15:94:9d:4a:2b:5c:a1:ba:1d:62:f5:40:a2:23:7d:6f:4d:
20:20:64:70:98:3c:d0:cb:cf:c0:d0:af:77:72:77:9a:4b:2a:
4d:89:d7:f3:3c:fd:27:07:b4:5c:c9:61:8c:d6:2d:b5:26:94:
ca:74:c9:be:b1:61:90:d7:71:b4:d1:0e:03:71:b7:a1:b4:04:
35:26:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:48 2025 by rpki-client