Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: unmgFoS8BAssrs1CBgMjWYKSfZuhOA5aQ1L+UY9oIAw=
Subject key identifier: 3E:A4:66:8C:2A:56:12:2D:0D:68:63:C4:69:DE:A7:02:90:5B:D4:39
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 30314AE3FF7832152DA3FADF573258BDF2C8AC5A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS40676.roa
Signing time: Sat 13 Apr 2024 07:08:28 +0000
ROA not before: Sat 13 Apr 2024 07:03:28 +0000
ROA not after: Sat 12 Apr 2025 07:08:28 +0000
asID: 40676
IP address blocks: 2602:fed2:7316::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 27 Jun 2024 02:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:31:4a:e3:ff:78:32:15:2d:a3:fa:df:57:32:58:bd:f2:c8:ac:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Apr 13 07:03:28 2024 GMT
Not After : Apr 12 07:08:28 2025 GMT
Subject: CN=3EA4668C2A56122D0D6863C469DEA702905BD439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:d0:73:ff:30:b0:28:9b:0e:f3:b5:df:29:
0b:bf:f3:f0:80:d6:10:59:24:6c:34:e2:12:a0:3a:
4c:da:ae:79:37:24:82:ff:8e:6d:a9:41:5e:e7:cb:
d3:f3:10:a6:78:7c:31:6c:01:55:87:b0:52:c3:57:
f1:31:d9:b9:b4:9b:81:eb:67:06:2b:db:05:2d:df:
9e:4c:ff:70:68:fc:c4:95:c6:d3:e8:58:2b:7f:36:
13:e1:93:62:a9:29:22:36:36:86:c3:00:96:78:db:
13:e3:4e:e5:7a:2f:fc:e1:59:96:48:98:47:db:86:
a2:47:6f:89:45:29:c7:23:85:67:17:49:d6:3b:0b:
c6:e5:1c:01:5d:9e:37:b5:ec:2c:13:b4:8f:bf:46:
ca:e6:5c:d7:86:05:19:43:18:4e:af:16:cc:a4:89:
a7:ea:2c:23:d0:e1:76:e2:2c:ac:c0:2f:31:4b:81:
9e:01:e8:be:69:1e:81:57:3f:e6:dd:34:4e:a5:3f:
b9:da:10:de:42:55:a5:49:e5:73:fc:19:3a:12:21:
31:bc:95:66:23:16:8c:58:42:4f:15:69:8c:21:5b:
5b:43:d2:95:20:be:f0:d4:cc:5a:ae:01:47:57:e6:
12:6c:86:0a:11:d7:22:66:9e:75:6f:20:04:ae:6f:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:66:8C:2A:56:12:2D:0D:68:63:C4:69:DE:A7:02:90:5B:D4:39
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7316::/48
Signature Algorithm: sha256WithRSAEncryption
a8:5f:4b:39:db:e5:ae:d0:5d:93:25:4b:3c:70:64:8d:62:9b:
be:26:13:ea:73:7e:b4:44:06:3b:69:78:fc:07:c8:24:ed:bd:
6f:e2:0b:1a:59:f1:d8:c6:d6:cc:d1:8f:43:60:b8:81:2a:44:
09:0a:74:78:d3:5a:e8:2c:a2:c3:6a:d7:57:32:58:b4:59:76:
44:14:82:de:01:9c:dd:8a:62:45:d6:0e:27:8d:99:b1:90:60:
ed:9c:58:2e:e6:63:fc:cf:26:d3:96:72:c0:97:a2:f2:d8:5a:
63:43:da:ae:de:0e:04:be:85:76:8c:bf:ed:8b:45:00:e0:5b:
78:2c:c9:a7:fe:d8:12:34:a2:ae:90:09:9b:19:94:a3:3b:56:
46:cc:78:6c:18:3d:7e:ab:0d:1b:1c:32:4b:b1:20:ae:2b:27:
78:6f:dc:80:f5:00:4c:b2:1b:b0:9e:a8:cf:54:4b:e2:ab:f6:
27:cf:e0:53:b6:0f:5a:7b:5f:be:17:90:7c:de:19:2b:6d:7c:
cf:5d:81:d7:86:72:9d:18:2d:28:0b:ab:b9:64:b8:eb:a6:bf:
6f:6d:e6:c9:48:ce:d8:55:cd:81:ea:a6:70:47:4b:ec:22:69:
ee:93:7b:05:f0:55:92:15:dc:38:dc:6a:bc:01:1a:c1:d2:d9:
94:dd:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 05:39:34 2024 by rpki-client on console-ams.rpki-client.org