Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS394352.roa
File: AS394352.roa (raw, json)
Hash identifier: Yu9BxKrUd3HC1UqIEwWdJzyLDIukG7KUB1kWcV9kKf4=
Subject key identifier: C9:48:18:94:A8:89:01:E8:7D:30:0D:F5:96:83:F5:97:DB:F5:34:11
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 0B0D1201D3D60D2EB122438CE72EF3A3B0E53D3E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS394352.roa
Signing time: Tue 09 Jan 2024 19:21:28 +0000
ROA not before: Tue 09 Jan 2024 19:16:28 +0000
ROA not after: Tue 07 Jan 2025 19:21:28 +0000
asID: 394352
IP address blocks: 23.133.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 20:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:0d:12:01:d3:d6:0d:2e:b1:22:43:8c:e7:2e:f3:a3:b0:e5:3d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Jan 9 19:16:28 2024 GMT
Not After : Jan 7 19:21:28 2025 GMT
Subject: CN=C9481894A88901E87D300DF59683F597DBF53411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:e2:5a:8b:06:9a:9b:d9:83:02:cc:d1:48:
0e:09:dc:4a:47:c5:80:7b:b4:03:64:b3:b3:54:1c:
36:95:8e:85:2c:6d:e4:26:e3:40:75:88:21:c2:82:
1a:fa:8e:f8:2b:2e:c1:cf:f0:07:9f:29:cc:e8:c4:
b6:ec:d1:9a:ed:8f:9f:c6:ad:61:53:b3:32:7d:0a:
35:8a:25:45:b9:bc:47:10:4c:e6:a4:9d:0c:61:79:
aa:60:0c:0b:2f:fa:92:41:bf:0f:e9:53:f8:d6:e3:
51:44:26:c1:bf:00:88:81:20:7a:29:05:c3:dc:7a:
fe:28:4a:55:2c:b3:ce:1c:21:c8:d1:6a:37:cf:10:
b2:a8:c8:1a:23:ac:98:12:be:98:50:54:47:d5:28:
18:81:25:87:cd:84:83:96:b8:12:a2:2b:ea:22:17:
be:b9:b9:57:e3:d3:2d:18:01:bf:e9:fe:2f:3a:e1:
8c:e6:04:14:29:46:8c:31:b9:e7:50:d7:d9:60:c1:
97:00:43:df:c0:e0:24:51:17:a1:f9:b7:86:e9:ae:
ce:3c:07:c5:ed:e5:20:d0:f5:4d:ee:19:5c:15:96:
cf:8d:74:23:53:3f:1c:58:3b:72:bc:11:8a:d4:dd:
f0:87:86:c4:dd:1f:3d:0c:0e:08:9d:49:74:0a:48:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:48:18:94:A8:89:01:E8:7D:30:0D:F5:96:83:F5:97:DB:F5:34:11
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS394352.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.133.64.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:ea:da:ae:ac:5a:0e:d8:d5:d1:ed:99:6b:8a:d1:63:f5:d4:
c6:9a:75:51:d2:09:95:0e:d2:0b:9d:12:7f:12:d8:83:fe:a3:
61:b4:c2:ff:c6:2b:5e:76:80:6f:0e:bd:d7:5f:57:bc:09:b9:
dd:6e:b5:35:27:be:6b:65:5d:66:15:84:dd:24:dd:ad:02:0a:
68:cf:04:79:cb:72:3d:6a:0c:41:31:55:2a:64:ae:b6:66:da:
47:5b:9b:6c:9a:e8:86:3e:ec:c0:7f:9d:32:9d:a8:29:c0:8d:
bf:1d:e2:35:62:7a:84:78:ae:2a:9c:69:1c:0f:59:7b:66:06:
35:88:81:95:98:d4:9a:a9:a1:fb:9e:55:4a:1d:30:ec:8d:93:
5f:da:20:86:06:6a:43:f1:3a:9c:28:11:b7:de:bb:87:2e:cb:
1b:e0:d6:c8:39:75:6b:bc:c4:1c:9a:5d:c3:6d:ec:96:a6:8f:
61:6d:91:51:81:93:be:21:6b:06:44:78:64:b9:6a:9d:8d:74:
1d:61:5f:b8:4d:95:a5:b9:4e:5f:96:10:53:02:f2:5e:82:b8:
37:3a:d6:03:16:73:80:83:9c:bc:a2:52:cd:23:77:8b:f2:6f:
64:93:fa:0a:a7:30:ba:dc:58:0f:2e:ad:28:a0:be:82:cb:d6:
d1:71:04:fc
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUCw0SAdPWDS6xIkOM5y7zo7DlPT4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwMTA5MTkxNjI4WhcNMjUwMTA3MTkyMTI4
WjAzMTEwLwYDVQQDEyhDOTQ4MTg5NEE4ODkwMUU4N0QzMDBERjU5NjgzRjU5N0RC
RjUzNDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVziWosGmpvZ
gwLM0UgOCdxKR8WAe7QDZLOzVBw2lY6FLG3kJuNAdYghwoIa+o74Ky7Bz/AHnynM
6MS27NGa7Y+fxq1hU7MyfQo1iiVFubxHEEzmpJ0MYXmqYAwLL/qSQb8P6VP41uNR
RCbBvwCIgSB6KQXD3Hr+KEpVLLPOHCHI0Wo3zxCyqMgaI6yYEr6YUFRH1SgYgSWH
zYSDlrgSoivqIhe+ublX49MtGAG/6f4vOuGM5gQUKUaMMbnnUNfZYMGXAEPfwOAk
UReh+beG6a7OPAfF7eUg0PVN7hlcFZbPjXQjUz8cWDtyvBGK1N3wh4bE3R89DA4I
nUl0Ckj6oQIDAQABo4ICVjCCAlIwHQYDVR0OBBYEFMlIGJSoiQHofTAN9ZaD9Zfb
9TQRMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMzOTQzNTIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXhUAwDQYJKoZIhvcN
AQELBQADggEBAL/q2q6sWg7Y1dHtmWuK0WP11MaadVHSCZUO0gudEn8S2IP+o2G0
wv/GK152gG8OvddfV7wJud1utTUnvmtlXWYVhN0k3a0CCmjPBHnLcj1qDEExVSpk
rrZm2kdbm2ya6IY+7MB/nTKdqCnAjb8d4jVieoR4riqcaRwPWXtmBjWIgZWY1Jqp
ofueVUodMOyNk1/aIIYGakPxOpwoEbfeu4cuyxvg1sg5dWu8xByaXcNt7Jamj2Ft
kVGBk74hawZEeGS5ap2NdB1hX7hNlaW5Tl+WEFMC8l6CuDc61gMWc4CDnLyiUs0j
d4vyb2ST+gqnMLrcWA8urSigvoLL1tFxBPw=
-----END CERTIFICATE-----
Generated at Wed Oct 16 23:10:07 2024 by rpki-client on console-ams.rpki-client.org