Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: 3OEiflREs+UsIux05N2WU3lHSZekXAhmqXGZTg3zKCE=
Subject key identifier: 3C:04:BC:7D:2F:8B:13:CA:B1:CD:5A:A9:AF:22:DA:92:4D:E2:02:CA
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 2260ABE3D7B192EC0D15D610F3C0C6F61BB7DD0D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS7018.roa
Signing time: Sat 11 Mar 2023 02:50:58 +0000
ROA not before: Sat 11 Mar 2023 02:45:58 +0000
ROA not after: Sat 09 Mar 2024 02:50:58 +0000
asID: 7018
IP address blocks: 167.88.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:60:ab:e3:d7:b1:92:ec:0d:15:d6:10:f3:c0:c6:f6:1b:b7:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Mar 11 02:45:58 2023 GMT
Not After : Mar 9 02:50:58 2024 GMT
Subject: CN=3C04BC7D2F8B13CAB1CD5AA9AF22DA924DE202CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:13:69:16:72:f4:d3:c0:70:e3:18:20:a7:
87:89:e3:e3:4f:8b:de:2e:9b:21:4b:4a:9f:ba:64:
37:bf:e4:05:ef:a5:4a:84:cd:00:0e:e2:7f:69:e2:
4b:fc:9b:fb:b9:44:b2:d6:9d:ee:00:45:cc:db:67:
f5:66:c8:6a:b3:c9:20:ad:53:fc:0f:94:6f:fd:22:
dd:cb:9c:60:a5:51:ce:57:82:46:82:8d:d7:99:d4:
7f:30:d7:c2:5c:46:db:1c:e8:36:1a:d1:9e:cc:44:
0d:d4:77:c2:aa:c8:c5:1c:ee:bd:7d:d8:a6:e7:65:
7c:39:d7:70:5c:1c:be:bf:ab:8e:dc:26:ad:27:36:
e9:d6:ce:a8:a5:c7:40:67:b3:08:af:8e:f2:88:97:
7d:b2:54:82:56:5d:01:21:18:83:bf:56:0c:86:55:
43:d4:c0:39:cd:69:46:e4:e5:fc:98:d2:27:29:df:
40:0b:0e:62:dc:c3:a3:e5:62:ef:f4:ab:74:c4:60:
90:69:d9:4d:19:18:e5:88:63:a7:cb:d4:b4:a2:f7:
cc:dc:ce:77:cd:78:32:91:81:93:42:cc:a3:90:5f:
cb:c8:a8:f5:76:b9:6c:27:f2:70:87:00:57:60:a9:
39:f2:9f:b5:84:b4:20:31:c7:cc:9a:85:2f:af:c7:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:04:BC:7D:2F:8B:13:CA:B1:CD:5A:A9:AF:22:DA:92:4D:E2:02:CA
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.48.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a6:cc:01:8f:a3:8d:de:56:ff:28:7f:26:f0:84:62:09:56:
7a:c2:ab:07:40:1f:b6:bf:e0:93:41:be:07:01:d0:9f:94:d7:
21:d3:22:32:2f:6c:4b:56:5b:af:dc:d6:8a:3e:54:43:d3:45:
ee:07:ee:3f:20:45:d4:aa:bc:c7:0d:75:12:6d:0b:7e:1f:9f:
1a:a9:ed:d9:53:2d:59:fa:3a:29:9a:b4:64:1b:09:0b:62:4e:
27:85:13:04:7a:4c:20:22:ae:06:bf:6d:86:66:8f:b2:08:7a:
c0:f1:a4:62:53:56:10:27:38:ec:73:1d:81:d7:ef:01:6f:a4:
29:02:90:84:2a:9b:cc:af:d0:e7:46:04:3b:aa:2c:e8:d5:6f:
d9:f6:77:8c:8c:73:4a:40:3a:8b:32:4a:91:ad:89:4b:b8:31:
26:10:01:fe:70:49:7d:49:9f:b9:42:5f:05:22:1d:46:6d:09:
bd:9d:0c:28:53:0b:7a:97:bd:51:47:41:29:db:76:a4:b1:82:
d8:b7:c7:e3:38:1c:e9:42:f2:36:1e:ab:73:09:fb:a0:27:04:
3f:40:33:ce:cc:22:10:71:22:94:1e:8f:52:85:b1:7a:80:8d:
ec:df:be:40:ad:48:df:65:b0:36:e1:49:68:a5:02:43:d2:c2:
9e:b2:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org