Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS199157.roa
File: AS199157.roa (raw, json)
Hash identifier: wocQt6y6ezE6D10n9GYv9VG4xYH+GUK1zKQdiVRFl+Y=
Subject key identifier: 3F:E4:2A:5F:F4:F0:16:C7:FD:77:64:B0:4E:3D:02:2A:C3:D9:E0:AD
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 0AA0F68FA1654959AC6516B46B97EDC6984F3D70
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS199157.roa
Signing time: Sun 09 Jun 2024 04:12:18 +0000
ROA not before: Sun 09 Jun 2024 04:07:18 +0000
ROA not after: Sun 08 Jun 2025 04:12:18 +0000
asID: 199157
IP address blocks: 2602:fed2:7044::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 Aug 2024 06:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a0:f6:8f:a1:65:49:59:ac:65:16:b4:6b:97:ed:c6:98:4f:3d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Jun 9 04:07:18 2024 GMT
Not After : Jun 8 04:12:18 2025 GMT
Subject: CN=3FE42A5FF4F016C7FD7764B04E3D022AC3D9E0AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:ce:d0:83:8b:81:13:b0:37:96:26:ab:82:
4a:9c:f4:4b:51:90:2c:34:6b:63:03:c7:b4:a7:41:
e9:3a:ff:f8:c6:6a:c6:ca:ce:3d:c5:08:7c:d0:5d:
11:4c:c8:c5:58:d1:48:f4:fc:f8:08:51:3e:40:70:
08:f3:03:1a:99:cf:e2:e7:a0:bf:15:b1:8e:5b:df:
aa:06:fe:59:3e:ac:8a:58:e8:47:3b:ff:72:d7:10:
fe:34:6f:67:a6:3c:e1:d7:be:c6:e4:b6:7c:8b:a3:
44:8b:01:e1:77:9e:54:cf:4b:57:3b:f6:cd:ce:c6:
45:55:09:60:d4:b5:0f:e7:71:63:da:e2:52:e7:06:
ad:ae:81:ea:b6:f8:ff:01:38:b1:e1:4a:b9:59:3a:
9c:42:36:c3:c3:33:85:f7:f2:f8:73:b7:1c:47:9a:
6c:e4:cc:61:b1:ac:c3:ff:9e:2a:b8:68:b9:4f:33:
e9:5b:75:65:e4:aa:05:33:70:50:fc:03:20:9e:a0:
00:87:31:34:e7:7a:b6:cb:56:b1:c8:df:37:4e:84:
39:a3:49:ef:60:54:3c:e9:60:54:d4:d4:51:6e:02:
15:b7:de:50:d8:4e:42:28:f9:07:6a:9b:ac:ac:3d:
7d:3c:70:1f:d4:41:53:19:0f:d6:16:e2:d3:b9:18:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:2A:5F:F4:F0:16:C7:FD:77:64:B0:4E:3D:02:2A:C3:D9:E0:AD
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS199157.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7044::/48
Signature Algorithm: sha256WithRSAEncryption
50:3b:33:a7:c7:ef:4c:b1:40:4e:e2:ce:5b:b0:12:ff:50:90:
05:64:54:7f:e7:44:9f:ee:b4:7b:8d:62:1f:1c:e6:5c:c7:dd:
56:5d:58:4e:d1:3e:1a:90:71:78:f6:68:db:e2:af:3c:3f:5e:
dd:17:28:36:79:21:b4:16:a9:06:cc:6f:97:a0:3c:1c:e9:fd:
d3:08:3c:c2:68:02:dd:6f:3d:a7:b8:f7:cf:a0:d0:d6:7c:df:
85:3c:af:1a:1f:6a:34:23:1a:86:8a:4e:e4:06:d1:d3:22:e1:
da:8e:28:82:22:6e:49:31:64:92:ed:21:d5:3f:f7:9b:a3:45:
e4:f0:14:a5:3a:35:64:5b:11:00:6a:a4:d8:8d:10:3d:bf:b5:
08:17:04:0d:42:84:79:33:1d:d8:42:9b:d8:5e:79:75:1e:9f:
c6:04:e8:92:a3:7d:cc:40:de:fb:8f:e6:ac:44:29:e1:df:90:
c7:51:75:19:d7:f3:d6:68:c6:e4:1b:a7:52:2d:37:57:d5:63:
75:90:3e:3d:ff:09:85:17:20:37:62:cf:10:3f:29:d1:85:ef:
89:c1:b2:00:50:2e:69:9c:93:6a:c6:ea:fb:49:a5:58:cd:5f:
87:9e:c0:fd:06:3a:50:f0:dd:f9:02:e5:19:5f:62:d9:bf:47:
94:50:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 08:01:10 2024 by rpki-client on console-fra.rpki-client.org