Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373930303a3a2f34302d3430203d3e203533333536.roa
File: 323630323a666564323a373930303a3a2f34302d3430203d3e203533333536.roa (raw, json)
Hash identifier: +U8ZpqsxKeJBCojiE0xwtxQ+RdM9WZaPYyfemLxGvQo=
Subject key identifier: A4:F3:5A:AB:31:74:7C:8C:78:88:A7:49:D2:78:5A:3D:93:B3:31:7E
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 09FA9128BF50A5351FD66C63E7A531A6447F0BAE
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373930303a3a2f34302d3430203d3e203533333536.roa
Signing time: Thu 16 Dec 2021 03:26:23 +0000
ROA not before: Thu 16 Dec 2021 03:21:23 +0000
ROA not after: Thu 15 Dec 2022 03:26:23 +0000
asID: 53356
IP address blocks: 2602:fed2:7900::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:fa:91:28:bf:50:a5:35:1f:d6:6c:63:e7:a5:31:a6:44:7f:0b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Dec 16 03:21:23 2021 GMT
Not After : Dec 15 03:26:23 2022 GMT
Subject: CN=A4F35AAB31747C8C7888A749D2785A3D93B3317E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d9:90:23:5f:f8:a2:83:e5:07:a5:5d:4a:3d:
c6:31:be:3e:83:23:2e:6c:96:a4:1e:30:1f:9d:2d:
0f:30:8b:b6:3f:f2:52:3a:88:71:4d:12:33:1e:ee:
cd:16:d8:4c:72:93:16:55:14:66:c7:d7:80:14:a6:
93:0b:87:5f:25:70:e4:77:22:14:a2:80:a6:3c:b0:
d9:e3:76:f1:b1:31:d1:65:fc:03:9d:29:65:94:1c:
d6:19:95:7c:d9:99:50:ba:94:81:aa:49:44:f9:97:
39:67:52:71:b7:5e:aa:81:6e:b0:37:e8:90:4a:c0:
d9:4d:59:94:d9:f8:de:2d:df:f5:23:01:e7:89:c2:
09:63:d3:6a:ef:71:10:3d:a6:db:31:fd:b1:9d:bb:
d9:58:85:e2:e0:81:d4:a3:a9:d3:66:2c:15:41:d0:
14:7f:7d:bb:9c:1c:7a:b7:9e:b1:bd:82:df:7e:7f:
0c:7c:39:3f:a3:68:8c:e4:42:d0:54:c5:44:ef:70:
1b:f7:fc:23:8a:80:5b:d2:09:bb:9e:a7:fb:83:b4:
dd:9c:88:4d:c5:51:87:e8:56:27:74:8d:69:d8:71:
fd:d5:ec:e5:9e:16:7e:e6:91:fb:9b:67:d6:4c:c7:
3f:61:9c:8c:61:c7:3c:79:74:d6:4b:de:f5:1d:ed:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:5A:AB:31:74:7C:8C:78:88:A7:49:D2:78:5A:3D:93:B3:31:7E
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373930303a3a2f34302d3430203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7900::/40
Signature Algorithm: sha256WithRSAEncryption
47:97:1a:5b:35:18:d7:97:f3:bc:d0:30:35:10:50:3a:2a:c4:
ff:ed:af:78:16:43:e5:37:c3:7e:04:e4:bc:b4:23:cb:65:7b:
f1:03:3e:9b:e2:de:b1:9c:34:dd:06:f5:e6:ed:5b:7a:04:e8:
77:cb:06:b5:a3:00:9f:d1:bf:cf:46:20:94:0e:8e:3e:97:5a:
34:21:7b:4b:8a:cd:1d:c6:39:0a:24:97:78:a0:d4:65:2b:d1:
45:73:6c:d5:08:16:b3:d9:50:b5:2f:62:f9:2d:39:1b:23:ef:
26:9b:fd:f1:e8:c7:8f:aa:d5:c7:14:1d:cd:6a:f6:76:51:b4:
44:80:d4:63:f6:18:af:f5:0b:46:7a:9a:98:1d:c0:3b:fc:04:
ee:88:61:76:33:c3:ef:b8:c3:cd:e9:47:09:f0:52:40:ea:6c:
18:50:68:4d:8a:71:2c:ef:91:bd:46:dc:59:3b:92:03:ac:17:
d6:7f:29:83:8b:76:b1:bc:14:5d:d9:63:b3:be:05:07:6f:c7:
75:78:e6:eb:e5:6d:61:d8:56:9b:d1:a6:e9:b7:0d:b3:9a:01:
ab:21:70:bc:e4:97:38:f9:bc:54:ed:f5:71:c4:c6:4f:be:a6:
55:13:96:59:da:b0:d2:be:76:dc:d2:14:37:b6:f6:c8:60:6f:
85:05:a3:b0
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIUCfqRKL9QpTUf1mxj56UxpkR/C64wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTIzWhcNMjIxMjE1MDMyNjIz
WjAzMTEwLwYDVQQDEyhBNEYzNUFBQjMxNzQ3QzhDNzg4OEE3NDlEMjc4NUEzRDkz
QjMzMTdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dmQI1/4ooPl
B6VdSj3GMb4+gyMubJakHjAfnS0PMIu2P/JSOohxTRIzHu7NFthMcpMWVRRmx9eA
FKaTC4dfJXDkdyIUooCmPLDZ43bxsTHRZfwDnSlllBzWGZV82ZlQupSBqklE+Zc5
Z1Jxt16qgW6wN+iQSsDZTVmU2fjeLd/1IwHnicIJY9Nq73EQPabbMf2xnbvZWIXi
4IHUo6nTZiwVQdAUf327nBx6t56xvYLffn8MfDk/o2iM5ELQVMVE73Ab9/wjioBb
0gm7nqf7g7TdnIhNxVGH6FYndI1p2HH91ezlnhZ+5pH7m2fWTMc/YZyMYcc8eXTW
S971He23OwIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFKTzWqsxdHyMeIinSdJ4Wj2T
szF+MB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhMzczOTMwMzAz
YTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNTMzMzMzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+
0nkwDQYJKoZIhvcNAQELBQADggEBAEeXGls1GNeX87zQMDUQUDoqxP/tr3gWQ+U3
w34E5Ly0I8tle/EDPpvi3rGcNN0G9ebtW3oE6HfLBrWjAJ/Rv89GIJQOjj6XWjQh
e0uKzR3GOQokl3ig1GUr0UVzbNUIFrPZULUvYvktORsj7yab/fHox4+q1ccUHc1q
9nZRtESA1GP2GK/1C0Z6mpgdwDv8BO6IYXYzw++4w83pRwnwUkDqbBhQaE2KcSzv
kb1G3Fk7kgOsF9Z/KYOLdrG8FF3ZY7O+BQdvx3V45uvlbWHYVpvRpum3DbOaAash
cLzklzj5vFTt9XHExk++plUTllnasNK+dtzSFDe29shgb4UFo7A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-ams.rpki-client.org