Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: 5ZWRQpGUXFvys8vzvg0/eyW6+7tp3DAmtCHm01KUaQw=
Subject key identifier: C5:FF:36:63:BA:5B:F9:85:3F:3A:A5:43:4A:93:DC:46:94:41:EE:F3
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 7B9CD1F80308680701D4A2F72DCBD4C70909FCB2
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS0.roa
Signing time: Tue 14 Feb 2023 16:17:53 +0000
ROA not before: Tue 14 Feb 2023 16:12:53 +0000
ROA not after: Tue 13 Feb 2024 16:17:53 +0000
asID: 0
IP address blocks: 161.129.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:9c:d1:f8:03:08:68:07:01:d4:a2:f7:2d:cb:d4:c7:09:09:fc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Feb 14 16:12:53 2023 GMT
Not After : Feb 13 16:17:53 2024 GMT
Subject: CN=C5FF3663BA5BF9853F3AA5434A93DC469441EEF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:64:fa:57:fb:76:c7:60:3d:c7:11:b4:17:
10:94:48:e9:7e:c3:bf:f0:7b:5c:f7:94:96:2c:ec:
25:e8:54:46:7c:d9:2f:54:5e:03:6a:68:83:58:6f:
36:94:95:7f:0c:be:84:18:48:36:ac:92:55:c1:a5:
bb:6b:75:2b:f0:a3:e1:7a:13:39:99:74:c2:65:33:
b3:8b:5b:19:8b:42:a7:a5:f3:cb:7b:4a:b7:2d:6a:
6b:e0:82:8e:44:80:f1:57:ab:cf:c5:9e:6c:9c:21:
8c:6f:8e:54:dc:47:3c:3b:bf:d0:57:7c:9a:8b:33:
56:47:87:18:70:f5:68:c7:af:2a:1c:1f:67:9c:39:
bf:69:91:f9:c6:15:b7:31:7f:6b:34:e2:d2:5e:00:
d5:24:58:86:5f:cd:d3:e6:35:ac:8e:6c:72:52:0c:
df:5e:9b:58:6e:15:95:3d:56:56:69:18:84:43:7c:
c5:8b:00:8b:ab:5f:7a:39:1a:86:fa:cf:1d:8b:79:
a4:b6:96:b7:f5:20:49:cc:f3:f0:09:db:8c:47:73:
1c:90:93:ce:11:64:07:00:b5:70:59:0b:82:2e:12:
00:7c:39:f6:23:40:64:29:ad:f6:58:6d:90:ac:ff:
e5:bf:27:b4:41:08:65:51:d5:81:f2:c9:68:bd:95:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FF:36:63:BA:5B:F9:85:3F:3A:A5:43:4A:93:DC:46:94:41:EE:F3
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.129.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:05:fd:15:ce:01:7e:1d:89:b8:6a:5f:cc:99:4c:c3:4d:7b:
be:cf:27:47:10:d4:c4:b2:b7:b4:99:e2:ec:69:cb:14:62:f7:
5c:41:9e:d5:b9:de:7b:ef:5c:73:83:3e:7a:d1:ec:02:67:a6:
f1:24:57:34:43:b6:0e:3b:1a:4c:24:c2:5b:1b:02:b2:4c:f1:
9a:5c:ff:9f:85:8c:a5:01:34:41:28:ba:ac:3e:3f:cc:8e:46:
13:12:b0:7b:12:8d:f4:96:66:34:df:1a:fa:d9:db:e4:cf:d4:
e7:03:fd:a9:65:69:57:fc:05:08:31:d0:84:a5:6c:93:fb:86:
f1:bf:2b:52:ee:72:20:85:f9:2a:11:ab:8e:5e:df:d0:43:82:
da:41:ff:01:71:3f:41:95:fd:3b:de:ac:44:2a:04:f0:a8:91:
98:2a:34:a8:24:30:91:94:cf:a0:7e:68:4d:54:d9:d5:4a:b9:
b9:15:ea:48:a6:d8:0b:22:88:c5:2f:c7:1c:b7:07:7f:d4:b4:
34:91:16:72:05:ed:c2:d4:28:80:0f:25:ff:8a:64:be:a1:20:
d9:d8:e8:7d:60:65:b4:35:62:24:17:1f:92:1c:a7:97:ed:94:
35:9c:61:76:99:8c:07:1f:02:3a:1b:20:cc:8d:6c:2d:eb:56:
e4:b3:41:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org