Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS399840.roa
File: AS399840.roa (raw, json)
Hash identifier: flmoVQAWzGGtaOCRJAUkoR4xugu8bDZ/Lrd+LqUdVDg=
Subject key identifier: 1F:F9:96:A2:02:52:05:2D:63:E5:F5:08:F8:DD:F1:7E:E9:96:6F:9D
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 5C33450A5346882333114F71268DEC9063AFDA4A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS399840.roa
Signing time: Thu 05 Sep 2024 16:10:08 +0000
ROA not before: Thu 05 Sep 2024 16:05:08 +0000
ROA not after: Thu 04 Sep 2025 16:10:08 +0000
asID: 399840
IP address blocks: 2602:fed2:712a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 08 Sep 2024 16:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:33:45:0a:53:46:88:23:33:11:4f:71:26:8d:ec:90:63:af:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Sep 5 16:05:08 2024 GMT
Not After : Sep 4 16:10:08 2025 GMT
Subject: CN=1FF996A20252052D63E5F508F8DDF17EE9966F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:b8:0c:ff:95:31:ae:95:d0:04:f2:37:db:
b1:b6:06:9f:3a:52:bf:ec:bd:c5:81:36:d9:69:81:
b6:17:45:ea:d9:44:71:ca:78:f4:d7:e0:56:8d:21:
2c:54:17:f7:8d:e8:7c:e7:fb:3b:66:f7:3f:0c:47:
ed:41:d0:e3:85:e7:96:f5:4c:e0:a9:e5:de:ac:e0:
c2:f9:72:6d:e6:13:dc:b2:3b:c5:ea:6e:63:58:5e:
82:51:35:ff:68:d6:d8:bb:a7:f6:60:3d:f0:aa:1f:
50:1e:0e:4f:a2:2a:a7:38:e4:ae:df:a3:e5:29:85:
96:fe:54:56:c9:a4:1f:74:bf:bc:0f:8f:b4:ab:b0:
22:b6:64:b5:db:7b:7d:78:94:da:cb:20:11:bb:4a:
08:93:25:20:13:50:d4:8f:6d:10:3f:0e:00:0c:48:
02:b9:94:cd:a9:f7:31:9e:0f:55:c9:7b:e1:00:a9:
a9:99:4f:a2:20:d7:fc:8c:13:09:2c:6b:19:21:19:
e9:00:09:12:25:8d:2b:d6:6d:49:8f:7e:db:07:b5:
c2:5c:3a:84:37:27:3c:83:00:8b:7c:e1:74:6b:5a:
a8:8b:44:34:e9:af:93:18:80:97:1b:1d:c2:4d:8e:
d8:88:a3:e7:ad:dc:40:29:ee:94:b6:dc:ad:25:59:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F9:96:A2:02:52:05:2D:63:E5:F5:08:F8:DD:F1:7E:E9:96:6F:9D
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS399840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:712a::/48
Signature Algorithm: sha256WithRSAEncryption
7b:f2:9d:ce:16:e8:cb:c0:54:60:d5:99:0b:4a:b3:31:7a:96:
a6:ac:74:b6:ab:5f:02:95:f3:a3:76:97:c4:24:78:13:3e:92:
92:1b:7c:89:67:c7:45:8f:24:88:fa:40:6a:e4:46:f6:4e:95:
66:72:02:ae:36:96:1c:63:17:b5:84:90:a0:4e:90:e7:e0:68:
89:bd:64:58:e4:5d:a1:74:4e:4b:49:f9:0e:6b:18:3e:5b:94:
da:36:c2:38:f9:d8:3f:c2:bb:b6:9b:e8:9c:d7:69:58:be:78:
21:4c:9e:eb:e9:51:34:98:7f:72:a7:e8:bf:7f:eb:14:b4:a9:
65:55:31:05:1f:5b:d8:0c:3b:f3:8d:b4:9f:b4:b2:3d:71:ea:
23:0e:1f:76:0a:2b:9b:e3:00:8d:5f:1c:38:86:0f:ed:8c:22:
f1:75:ab:d5:e7:c3:8e:1b:9b:9f:c2:c9:31:f4:7a:4f:a1:1d:
2a:f5:89:e1:7a:3c:c3:3e:ed:8d:0c:aa:78:b5:e2:fe:d2:18:
a9:76:0f:f7:49:74:e0:e3:bd:f4:d5:ad:ad:81:19:8f:a9:70:
00:b2:04:ed:a0:be:c0:e7:a5:77:61:12:f1:17:36:a5:9d:ba:
04:3f:13:97:fa:c1:16:06:7e:19:9c:a2:ca:12:c5:84:25:73:
1e:ac:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 16:58:46 2024 by rpki-client on console-fra.rpki-client.org