Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS399748.roa
File: AS399748.roa (raw, json)
Hash identifier: 0aMVKRZ4Lb74kIhzsTi5rKZgBP0RHuSF5EdevEdd6cQ=
Subject key identifier: 42:A6:DE:7B:4E:8E:9E:3D:1E:58:60:DA:99:D6:25:7D:D0:F5:41:12
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 19702DA3D84B62EA8EFA532C5611F954FD0B6D04
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS399748.roa
Signing time: Tue 16 Jul 2024 02:42:27 +0000
ROA not before: Tue 16 Jul 2024 02:37:27 +0000
ROA not after: Tue 15 Jul 2025 02:42:27 +0000
asID: 399748
IP address blocks: 2602:fed2:7031::/48 maxlen: 48
2602:fed2:7032::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Sep 2024 19:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:70:2d:a3:d8:4b:62:ea:8e:fa:53:2c:56:11:f9:54:fd:0b:6d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Jul 16 02:37:27 2024 GMT
Not After : Jul 15 02:42:27 2025 GMT
Subject: CN=42A6DE7B4E8E9E3D1E5860DA99D6257DD0F54112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:23:85:67:b6:0e:7e:c7:7f:ed:75:2c:ce:
75:35:2b:c9:29:53:42:22:24:2e:35:50:2f:83:b0:
6a:be:64:ab:b6:33:e5:2e:bb:f3:d7:54:33:1c:42:
32:e6:43:10:0b:d1:0e:ae:a7:62:0e:03:6c:f6:8e:
6d:79:19:da:68:f5:10:e4:69:66:55:93:48:59:0b:
c6:03:6a:f7:7a:a5:6b:10:1c:4d:cf:0d:93:e0:d7:
f5:51:18:cd:e9:92:45:9a:41:37:65:af:a0:e8:9d:
11:3b:17:ec:94:d1:84:e7:f9:49:21:ff:19:59:52:
eb:2e:01:8d:f9:3a:e7:cb:d6:9d:84:5d:b9:c3:25:
90:95:2c:10:ff:4d:db:fe:27:e3:03:a2:c5:de:c5:
e0:2e:96:2b:40:8a:d5:03:ff:76:ef:43:90:7c:e6:
2e:23:09:ca:35:3d:c2:7e:51:1d:c0:94:be:b0:c4:
95:2c:c4:f9:02:d4:48:53:ea:e9:c8:49:c1:a0:97:
67:76:3b:8c:ee:36:a1:2a:88:28:a5:43:3b:4a:2f:
d0:b6:e1:f6:45:aa:10:69:32:8a:07:89:a5:24:a4:
d2:d2:74:20:32:7b:2d:cb:10:1e:f1:68:1d:2c:ad:
04:a5:eb:d0:4f:da:1b:58:3b:e2:a9:ee:2c:19:eb:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A6:DE:7B:4E:8E:9E:3D:1E:58:60:DA:99:D6:25:7D:D0:F5:41:12
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS399748.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7031::-2602:fed2:7032:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
68:8e:8c:90:a8:00:0a:bd:3e:51:1e:18:17:12:32:3e:bc:3c:
72:a1:d7:30:b5:cb:d2:04:93:b0:11:ab:d5:89:21:f9:9a:07:
25:6a:29:dc:65:9c:cf:9f:d4:56:f4:cd:e8:44:81:0d:b3:96:
cb:1a:15:2f:e9:a7:46:18:2b:c8:a4:df:02:de:aa:1b:71:1a:
55:ad:dd:4f:52:fc:f2:85:15:fd:c8:e7:52:a2:90:30:9a:ae:
c7:da:f6:55:31:6d:75:e2:3b:5d:94:58:42:2c:15:63:76:b7:
d9:9c:7d:c7:8a:3d:ca:76:e0:e9:00:4e:96:7b:4c:a1:3d:0d:
bb:9c:73:a7:31:c8:10:b3:8e:d1:0a:df:96:ad:63:3a:fd:39:
40:a2:86:04:45:34:20:49:c1:28:6e:eb:16:56:19:cb:f8:99:
ed:78:f2:90:4e:32:30:ce:8a:dd:5c:89:bd:0a:f7:3a:71:be:
f1:36:dd:9d:62:91:fe:a5:13:2c:b3:74:d6:df:b2:41:7b:2f:
52:b9:c0:d8:1c:36:7d:4f:5e:01:cd:26:8d:f3:22:56:d3:51:
61:e2:65:e8:b2:16:e0:f9:72:d0:74:c2:76:b0:ac:93:88:63:
28:1a:ac:0f:0e:f2:fd:28:41:b3:b2:65:18:80:3c:34:6a:a1:
99:c9:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 22:20:45 2024 by rpki-client on console-ams.rpki-client.org