Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS48741.roa
File: AS48741.roa (raw, json)
Hash identifier: Y4JbFa0riHjKJhUmlQMNmQNIADteYpbWB7dAYn/0zO4=
Subject key identifier: 02:B2:52:9C:35:57:48:24:05:7A:A5:9E:C3:DF:DE:42:3A:A7:73:18
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 5E91AE57E04879832B8EE5C6E5C6F61B4F6D63C7
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS48741.roa
Signing time: Thu 26 Oct 2023 15:14:56 +0000
ROA not before: Thu 26 Oct 2023 15:09:56 +0000
ROA not after: Thu 24 Oct 2024 15:14:56 +0000
asID: 48741
IP address blocks: 2602:fed2:7800::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Nov 2023 21:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:91:ae:57:e0:48:79:83:2b:8e:e5:c6:e5:c6:f6:1b:4f:6d:63:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Oct 26 15:09:56 2023 GMT
Not After : Oct 24 15:14:56 2024 GMT
Subject: CN=02B2529C35574824057AA59EC3DFDE423AA77318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:b8:dc:4c:13:5e:10:71:20:12:0f:e1:b5:
50:11:22:6f:8d:50:61:8a:21:5e:f6:3e:2d:1a:79:
b0:6c:96:c3:0b:ef:fc:2c:a4:e7:3f:3a:18:5e:98:
e9:bd:b5:b2:8c:d5:89:b4:c7:81:fe:06:bf:0c:f2:
8a:00:76:31:4e:eb:e7:4b:a2:e4:c7:9c:7b:6e:97:
20:64:96:2d:f2:2a:c7:c7:91:0a:c6:97:3c:d4:ee:
65:6f:e2:5c:88:ba:06:74:b0:45:05:7e:db:e5:96:
50:00:d2:13:21:62:13:a7:a9:c3:a8:39:cd:97:3d:
dc:71:69:52:8b:68:59:43:98:f3:cf:e2:d8:2d:22:
db:c8:6b:a8:37:2b:ae:e2:15:06:a9:f1:00:0d:2b:
82:9f:e3:ac:07:08:a8:9d:39:9f:6b:6b:26:ae:76:
22:6b:e4:59:17:00:28:18:db:ad:be:27:13:ad:79:
d1:a3:72:f9:d0:1c:95:e0:cd:ef:c5:d9:19:59:5d:
d4:7d:8a:86:a5:93:5e:01:ec:6c:1d:13:a2:af:24:
29:06:ce:48:64:67:5d:22:8f:03:26:f4:19:4a:61:
5a:2a:28:08:38:28:5e:41:78:03:24:9e:28:13:b5:
dc:84:ac:f0:77:76:d1:4c:35:bb:7d:c8:b5:36:f0:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B2:52:9C:35:57:48:24:05:7A:A5:9E:C3:DF:DE:42:3A:A7:73:18
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS48741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7800::/40
Signature Algorithm: sha256WithRSAEncryption
3d:3f:11:9b:8d:05:6c:8a:38:fe:af:10:e9:fa:67:de:d5:40:
60:fa:e9:bb:81:ef:29:fc:c5:e4:c3:0e:90:cb:b5:5a:b7:a8:
63:36:c9:81:ea:44:ab:6e:2f:58:e0:80:3a:2f:9f:0d:63:a4:
c1:84:91:50:76:75:2e:64:90:86:8c:0e:d0:21:b5:a1:cb:09:
4f:9a:6b:92:03:15:25:e8:57:c7:c5:c6:05:53:4c:70:bd:3b:
78:c6:97:4f:d3:e6:9e:52:1b:cf:62:14:a9:8b:2c:c1:2b:e8:
3c:bd:42:0d:0e:f5:20:ca:48:63:14:60:a1:21:c8:24:04:d5:
b1:f1:fc:8f:22:77:39:ca:12:55:2e:bf:3b:6f:75:e8:c7:27:
2e:67:97:be:ed:e5:4d:11:52:5a:1f:82:81:39:32:f0:8c:d5:
24:67:ea:64:e5:b4:46:3c:2f:a1:22:14:9d:bb:26:ef:13:14:
fb:a7:0f:ab:09:f7:18:fe:5d:79:77:0d:12:93:01:d2:3c:30:
db:a2:ed:88:73:7e:55:cc:77:67:64:ed:a0:a8:40:93:e3:10:
bf:5d:4c:fe:37:54:1f:84:ca:cd:f4:88:a8:34:01:e1:86:9f:
0c:aa:82:58:b1:87:f4:0b:14:30:93:37:22:47:fe:1d:dc:31:
9f:13:d8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-ams.rpki-client.org