Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: uDYP8ZiAg5I6YnoWykG4tZ7S9XzBiT3OYZkBOR62BlM=
Subject key identifier: 40:BE:50:70:C2:60:9A:F0:62:9D:7B:77:83:77:5C:CD:9F:C4:25:58
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 15BFE6F34E9D7EC353F68E7F599F4ECD8BD17030
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
Signing time: Sun 02 Feb 2025 18:48:09 +0000
ROA not before: Sun 02 Feb 2025 18:43:09 +0000
ROA not after: Sun 01 Feb 2026 18:48:09 +0000
asID: 23470
IP address blocks: 2602:fed2:7319::/48 maxlen: 48
2602:fed2:7708::/48 maxlen: 48
2602:fed2:7e04::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Mar 2025 16:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:bf:e6:f3:4e:9d:7e:c3:53:f6:8e:7f:59:9f:4e:cd:8b:d1:70:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Feb 2 18:43:09 2025 GMT
Not After : Feb 1 18:48:09 2026 GMT
Subject: CN=40BE5070C2609AF0629D7B7783775CCD9FC42558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:94:24:7d:87:2a:59:a1:3f:86:28:b5:0e:
67:c8:50:24:76:3c:21:23:dd:8a:0c:a6:f8:5d:4c:
0c:eb:8d:d5:54:e0:0d:f0:61:2c:a1:b0:4a:42:eb:
7b:c5:0f:ae:68:6c:bc:13:48:78:2f:81:58:21:18:
75:3e:91:ac:67:a2:02:54:42:0b:0a:f2:8a:1d:1b:
51:77:ee:d9:0e:34:2c:88:86:10:bd:3b:54:95:b5:
21:ce:e7:7a:d9:0d:d3:21:7e:0d:70:b5:da:6c:d4:
58:57:fa:df:a6:1e:d5:93:f1:34:62:6a:1e:24:5e:
58:30:0f:db:ff:42:4c:9e:2a:59:f5:ce:55:cf:33:
d1:01:ab:d6:1d:d1:2a:3f:9e:d3:38:fb:d5:a9:84:
93:5f:02:35:60:83:b7:4f:97:a7:e4:d0:56:18:9c:
43:8f:aa:4f:46:a4:71:78:d8:14:48:3a:21:03:c4:
9c:f4:f5:f2:fe:30:62:22:60:a5:f7:de:b0:37:e3:
e2:c9:99:de:19:76:44:03:80:f1:c6:4e:50:c6:e7:
88:c2:d6:7b:a1:e9:c9:16:ba:3a:24:05:ef:4e:07:
38:99:aa:4b:b1:13:19:9e:dd:d2:a4:77:4a:c1:69:
e8:03:f3:78:6b:2f:15:f3:7a:50:2d:f7:51:da:fb:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BE:50:70:C2:60:9A:F0:62:9D:7B:77:83:77:5C:CD:9F:C4:25:58
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7319::/48
2602:fed2:7708::/48
2602:fed2:7e04::/48
Signature Algorithm: sha256WithRSAEncryption
ad:ed:21:b1:6e:80:07:5a:b7:9c:14:d1:f6:4f:31:67:2a:a6:
99:a4:c4:2d:40:4f:40:a2:b2:bc:aa:f2:60:a2:1d:ce:a7:f4:
f1:41:05:ef:48:f2:bd:25:64:56:3a:2e:33:48:71:51:fe:34:
92:a4:43:10:29:4a:bd:69:fc:2a:8c:3a:2a:2a:ef:94:8f:96:
e8:e8:a7:b2:aa:f9:93:ce:3c:e5:67:28:ae:e8:9e:5e:b3:50:
33:31:31:14:4b:03:1f:df:5d:10:c4:71:f0:b1:b0:84:bf:2b:
73:bc:71:16:6a:01:4c:13:a1:0d:95:fa:52:aa:ec:2f:04:58:
88:12:d3:9b:06:ad:c3:16:ad:b8:94:d2:51:5f:8a:8a:b2:3e:
e6:18:7e:1d:84:40:97:dc:c1:73:bf:e0:e2:05:c7:78:18:ce:
62:e5:67:f5:16:94:ff:11:f3:6b:b5:d3:67:f1:f8:11:72:e5:
cf:dd:72:69:b0:09:c2:ed:49:5a:82:b0:bb:91:78:0f:e0:86:
f8:d0:00:81:b3:23:19:90:36:53:28:11:ff:cb:16:ab:81:03:
e7:af:11:05:37:04:f5:44:36:4e:1a:11:a1:35:bc:e4:ba:82:
37:13:83:41:6d:ee:02:fe:c2:b9:80:ce:ca:2a:db:cd:df:e3:
df:be:e2:e0
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIUFb/m806dfsNT9o5/WZ9OzYvRcDAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwMjAyMTg0MzA5WhcNMjYwMjAxMTg0ODA5
WjAzMTEwLwYDVQQDEyg0MEJFNTA3MEMyNjA5QUYwNjI5RDdCNzc4Mzc3NUNDRDlG
QzQyNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpuUJH2HKlmh
P4YotQ5nyFAkdjwhI92KDKb4XUwM643VVOAN8GEsobBKQut7xQ+uaGy8E0h4L4FY
IRh1PpGsZ6ICVEILCvKKHRtRd+7ZDjQsiIYQvTtUlbUhzud62Q3TIX4NcLXabNRY
V/rfph7Vk/E0YmoeJF5YMA/b/0JMnipZ9c5VzzPRAavWHdEqP57TOPvVqYSTXwI1
YIO3T5en5NBWGJxDj6pPRqRxeNgUSDohA8Sc9PXy/jBiImCl996wN+PiyZneGXZE
A4Dxxk5QxueIwtZ7oenJFro6JAXvTgc4mapLsRMZnt3SpHdKwWnoA/N4ay8V83pQ
LfdR2vvsXQIDAQABo4ICajCCAmYwHQYDVR0OBBYEFEC+UHDCYJrwYp17d4N3XM2f
xCVYMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyMzQ3MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwIQQCAAIwGwMHACYC/tJzGQMHACYC/tJ3
CAMHACYC/tJ+BDANBgkqhkiG9w0BAQsFAAOCAQEAre0hsW6AB1q3nBTR9k8xZyqm
maTELUBPQKKyvKryYKIdzqf08UEF70jyvSVkVjouM0hxUf40kqRDEClKvWn8Kow6
KirvlI+W6Oinsqr5k8485WcoruieXrNQMzExFEsDH99dEMRx8LGwhL8rc7xxFmoB
TBOhDZX6UqrsLwRYiBLTmwatwxatuJTSUV+KirI+5hh+HYRAl9zBc7/g4gXHeBjO
YuVn9RaU/xHza7XTZ/H4EXLlz91yabAJwu1JWoKwu5F4D+CG+NAAgbMjGZA2UygR
/8sWq4ED568RBTcE9UQ2ThoRoTW85LqCNxODQW3uAv7CuYDOyirbzd/j377i4A==
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:42:23 2025 by rpki-client