Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138643a3a2f34382d3438203d3e203533333536.roa
File: 323630323a666564323a373138643a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier: 4IxxIyJrWmdCs+qeILJkutJq0KoA/RBQ5bjivbaAP1s=
Subject key identifier: D0:AF:28:42:9E:03:DC:D4:35:23:CF:5D:3D:5D:82:7E:F9:96:03:DD
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 683FC78A61C7FCC3315607F57506A64F7501B925
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138643a3a2f34382d3438203d3e203533333536.roa
Signing time: Sun 09 Jan 2022 08:06:01 +0000
ROA not before: Sun 09 Jan 2022 08:01:01 +0000
ROA not after: Sun 08 Jan 2023 08:06:01 +0000
asID: 53356
IP address blocks: 2602:fed2:718d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3f:c7:8a:61:c7:fc:c3:31:56:07:f5:75:06:a6:4f:75:01:b9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Jan 9 08:01:01 2022 GMT
Not After : Jan 8 08:06:01 2023 GMT
Subject: CN=D0AF28429E03DCD43523CF5D3D5D827EF99603DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:c7:eb:74:b6:3a:47:d5:91:95:ef:ad:b9:
3f:29:d5:71:9c:ed:01:78:0c:01:f9:16:fa:e9:95:
04:d9:45:a7:b9:fc:75:6f:f1:09:48:00:04:50:6c:
24:5f:da:0e:68:16:90:5b:c8:33:77:a6:24:1c:63:
e8:f9:8d:5b:46:37:b7:89:94:ad:07:2e:d2:7f:0e:
24:61:0f:d7:a6:3f:63:f2:bb:41:8b:5f:89:7f:c4:
8c:14:d6:31:2c:8b:43:81:65:de:74:9b:77:e3:a3:
31:46:2a:2d:be:14:a8:93:16:bc:6b:af:5e:ec:43:
a8:e2:ab:85:0f:dd:e4:54:04:3b:22:5d:a6:33:86:
dd:c0:55:81:10:8c:97:a9:57:f3:93:ce:7e:b2:36:
39:63:0e:b8:be:7c:a8:75:e2:ff:ba:9a:81:4d:7e:
96:b8:2a:24:6e:22:d7:7e:8f:c5:fe:ad:37:0a:af:
db:74:7d:89:eb:a7:27:15:da:6b:86:b6:aa:7b:2d:
ea:a8:ea:71:b7:70:b3:ee:ff:8e:26:dd:73:20:7b:
18:3c:12:3b:88:53:14:a6:d0:fc:5e:bf:75:74:91:
82:78:54:07:30:b6:53:26:cc:dd:a3:91:c5:3e:b7:
b4:a8:7a:c6:51:4a:f8:16:0b:e7:ea:4e:78:4c:5b:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AF:28:42:9E:03:DC:D4:35:23:CF:5D:3D:5D:82:7E:F9:96:03:DD
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138643a3a2f34382d3438203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:718d::/48
Signature Algorithm: sha256WithRSAEncryption
80:e5:bb:8e:a8:7d:5c:f9:f0:04:6e:80:b7:a0:60:b4:fc:b7:
69:cd:c5:29:f6:9a:ac:b1:5c:8d:97:44:b1:08:0a:30:14:19:
70:86:af:20:7c:ba:ef:55:6d:e3:d0:1f:fe:33:4c:4e:1b:36:
2b:e5:01:5d:61:2d:ef:c9:09:e4:8a:eb:11:7d:7c:13:17:c3:
9a:a9:0f:c3:2e:33:37:b8:d7:e2:f4:27:89:6e:e2:91:5d:a6:
e3:ea:7f:2b:3a:08:d3:ad:40:8f:db:35:e3:f9:bf:b1:de:0d:
76:1c:42:bd:de:73:75:e2:e7:11:5a:ed:2a:42:5d:6c:83:de:
b5:ed:18:2b:8c:90:1e:04:fa:b4:ad:98:64:9f:85:54:9e:09:
e2:5a:cd:a7:64:de:a7:2d:55:6e:00:68:07:99:ba:b1:b0:6e:
5a:97:3b:91:be:9c:66:23:23:65:ac:ac:96:9e:77:d1:3b:b5:
50:18:bf:0d:71:bf:e4:34:d8:70:c4:06:33:d8:22:b0:6d:0c:
e7:98:3a:aa:78:b3:7d:52:37:51:4c:47:59:c5:ec:28:ab:df:
11:71:1a:b6:ac:83:b3:6a:bc:36:42:16:26:46:13:e5:e1:88:
cb:e1:3f:ef:9f:a3:7e:b4:e5:fb:a8:ac:13:eb:df:43:5c:19:
78:b8:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-ams.rpki-client.org