Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS21868.roa
File: AS21868.roa (raw, json)
Hash identifier: dc06nY/kb+2F8NrinBG5A3kiiQuGELipP2zLhP98gxA=
Subject key identifier: B9:A3:77:02:13:F5:1E:A7:39:BE:98:B6:8D:A0:85:87:27:BF:5D:84
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 4F02C644B82A452C95A721C43F05B169398F6389
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS21868.roa
Signing time: Wed 21 Jun 2023 00:54:49 +0000
ROA not before: Wed 21 Jun 2023 00:49:49 +0000
ROA not after: Wed 19 Jun 2024 00:54:49 +0000
asID: 21868
IP address blocks: 167.88.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:02:c6:44:b8:2a:45:2c:95:a7:21:c4:3f:05:b1:69:39:8f:63:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Jun 21 00:49:49 2023 GMT
Not After : Jun 19 00:54:49 2024 GMT
Subject: CN=B9A3770213F51EA739BE98B68DA0858727BF5D84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fe:88:a0:d2:00:5d:17:a5:6a:fc:b6:9c:b8:
d1:0f:7b:9a:a8:c5:bc:06:48:65:a1:51:0c:4b:51:
7e:bc:7b:45:bc:7d:08:20:3d:8a:c1:62:37:1f:9d:
ac:67:b4:6e:61:76:14:cc:68:ea:03:d1:f8:fc:33:
89:16:13:fc:43:f4:6d:23:89:27:f5:ac:7d:79:a5:
38:5e:8e:1d:bb:1f:ae:a4:16:4f:ea:e9:24:2e:d6:
69:bd:37:67:ac:20:a8:84:15:22:30:2c:6e:4a:1c:
0e:5c:fd:c4:98:60:79:6b:cf:d6:b1:cd:df:9d:71:
28:67:ed:0e:10:9d:31:d3:f0:04:f6:76:37:66:d2:
fa:9a:5e:dc:01:9a:09:75:56:b0:55:c5:c2:d9:06:
c3:8f:27:2d:56:f7:3c:60:5b:41:7a:6a:0c:1e:91:
18:3d:f3:18:0d:2f:88:36:54:9a:fb:25:37:4a:30:
41:80:7c:21:60:5f:8c:bf:b3:ff:ff:8d:53:83:34:
4d:05:2b:91:c2:d7:92:91:f9:fb:25:ad:66:5c:64:
eb:2f:9a:71:60:e8:a8:df:7c:11:af:a6:3d:5c:ba:
b6:19:f8:d1:12:ff:cf:17:16:be:95:22:56:a5:4b:
72:f5:16:a3:43:27:db:10:74:91:61:04:c4:de:f2:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:77:02:13:F5:1E:A7:39:BE:98:B6:8D:A0:85:87:27:BF:5D:84
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS21868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.48.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e7:c5:25:5f:cc:c6:f1:40:3c:00:d6:b6:0e:b0:64:c0:9a:
52:0f:96:bd:22:4b:76:c5:0f:49:e8:da:40:d0:e5:a6:12:bb:
41:d4:ba:4f:6d:9e:2a:56:3f:b5:eb:26:f9:c9:69:70:a9:e6:
6e:cf:a3:56:26:c8:a1:c3:ff:50:2f:22:c8:6a:c3:a7:22:46:
1d:1f:5c:e4:9f:eb:e6:8f:db:14:a7:b8:f8:dc:a6:22:6a:25:
6b:29:54:01:dd:84:8c:00:ca:43:0a:3b:5b:7b:d6:cb:0b:43:
d3:a8:9d:b8:0c:a1:9d:a0:4d:fe:8e:07:ff:e3:e3:23:ea:5f:
06:b2:2c:c4:38:2e:4c:d6:af:73:1d:1a:51:c1:4a:45:55:7e:
7a:09:8b:71:34:6f:71:9a:07:60:48:73:83:61:92:c1:a7:72:
f3:f9:3e:34:5d:29:c3:86:ad:b3:84:bb:7b:50:f2:3a:45:b9:
80:9c:f6:fc:71:43:96:be:f8:c6:51:03:dc:8e:ad:55:3c:84:
c3:a6:a3:b6:ae:33:fe:3f:aa:93:67:5b:5e:ff:33:25:67:56:
0c:7b:85:77:d5:a9:46:b2:31:95:52:f7:5c:38:1a:4c:42:f5:
a5:ce:45:f2:b2:8e:0e:13:34:79:1c:23:02:93:4f:58:41:2c:
24:95:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:53 2025 by rpki-client