Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330383a3a2f34382d3438203d3e20323037333238.roa
File: 323630323a666564323a373330383a3a2f34382d3438203d3e20323037333238.roa (raw, json)
Hash identifier: O+xmDrM8cjIQxff6RjCgnF5yiEXPfjwVJ74UgvvNPno=
Subject key identifier: 3F:B1:42:EE:FC:79:71:43:74:60:D2:0E:29:23:13:F2:09:26:67:DD
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 43F29A3CF977FD6E819F15BE42BBDCE2BE4AB34C
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330383a3a2f34382d3438203d3e20323037333238.roa
Signing time: Thu 16 Dec 2021 03:26:21 +0000
ROA not before: Thu 16 Dec 2021 03:21:21 +0000
ROA not after: Thu 15 Dec 2022 03:26:21 +0000
asID: 207328
IP address blocks: 2602:fed2:7308::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f2:9a:3c:f9:77:fd:6e:81:9f:15:be:42:bb:dc:e2:be:4a:b3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Dec 16 03:21:21 2021 GMT
Not After : Dec 15 03:26:21 2022 GMT
Subject: CN=3FB142EEFC7971437460D20E292313F2092667DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:90:41:01:6a:9e:62:04:ff:34:c3:e2:65:
0c:e6:2d:22:2a:40:89:db:4c:5a:38:ed:ec:93:1a:
ea:e5:4d:d6:fd:45:39:4b:bc:4d:99:9e:6f:2d:10:
cd:7d:f3:a2:a6:f7:0f:b0:57:d7:7a:3c:de:69:51:
5f:04:93:fa:51:f0:42:1a:47:eb:37:ae:75:90:36:
59:35:26:dc:7d:d0:ea:5c:46:e2:6a:9e:24:34:e7:
f8:8e:2a:cd:d8:e2:89:40:0c:f7:96:bb:5c:b3:80:
87:05:3a:42:a4:53:07:5c:e6:1c:ca:7d:8b:13:5f:
3a:46:fb:c4:e5:5a:d0:81:cc:9a:e2:97:61:d3:b7:
4d:4e:91:f4:72:d6:c4:73:89:1c:59:17:f1:80:19:
1c:70:b8:19:ad:6f:36:c2:36:38:0d:25:76:2a:23:
7b:95:77:23:2f:cd:da:0d:ac:5d:fe:2d:91:72:0f:
f0:28:7e:05:ee:e5:d8:78:00:ea:00:0b:d2:a3:6e:
3d:91:4e:2e:ef:b3:80:30:57:23:39:e7:50:4d:56:
f0:1e:59:03:e1:24:11:12:88:5b:16:77:bc:af:6d:
3d:f2:97:33:56:c4:a6:9a:b4:e2:a4:61:aa:e0:29:
e4:a0:5e:ec:b5:d9:e3:d6:09:c8:52:6c:5c:80:c5:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B1:42:EE:FC:79:71:43:74:60:D2:0E:29:23:13:F2:09:26:67:DD
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330383a3a2f34382d3438203d3e20323037333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7308::/48
Signature Algorithm: sha256WithRSAEncryption
11:c6:47:7c:77:3d:c9:d2:e8:c1:2c:f3:c5:c7:00:7e:83:3e:
7b:81:93:67:b2:c5:1b:43:d5:e6:79:bc:86:3e:89:c2:e0:90:
a5:6b:16:64:0b:8b:90:9c:73:ea:0f:fe:d2:1f:fe:d9:a2:cc:
27:ef:b3:09:a1:10:20:38:77:d7:2d:f5:41:a5:31:64:20:09:
5d:cc:71:df:a9:bb:4e:e9:3c:e4:e0:7c:39:bc:13:51:9d:53:
94:43:e6:7f:69:03:f6:a0:06:d5:88:75:5a:66:bf:fe:67:00:
e3:3b:33:3e:f3:e0:88:ef:89:c3:5a:ef:b4:ac:7c:a9:95:13:
73:1d:61:50:d2:1f:7e:88:17:48:70:bc:ba:5a:35:0c:1f:b3:
a2:33:81:b9:36:ee:0c:05:b9:ca:9f:d1:78:48:5f:ec:12:c3:
0b:f5:b2:d8:9a:9a:64:24:c7:c0:5f:ec:4e:ac:7f:00:e5:d3:
3f:31:cc:a9:01:cd:a1:75:9d:89:4b:3c:33:1c:c5:c1:4f:8f:
59:63:33:b0:9c:46:1e:65:e5:45:97:67:e8:29:74:93:49:61:
14:5b:55:be:82:0e:37:c5:02:87:67:a2:e2:2d:a7:b9:ba:18:
99:dd:0b:46:7b:5b:4e:57:7b:ea:c8:d2:56:77:8e:20:2c:df:
de:c8:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org