Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3930303a3a2f34302d3430203d3e203230343733.roa
File: 323630323a666531333a3930303a3a2f34302d3430203d3e203230343733.roa (raw, json)
Hash identifier: AXka+KvuOk/l8FwyTe69HFwy+Men8uH/SzvjhR0Hs0M=
Subject key identifier: 7F:89:BB:B1:BB:A6:85:B4:29:54:63:D9:CF:F8:F9:5D:07:84:27:CD
Certificate issuer: /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial: 1361FA4C9B675B4C48C8C1C5180A82FACAD1C677
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3930303a3a2f34302d3430203d3e203230343733.roa
Signing time: Mon 11 Sep 2023 18:58:12 +0000
ROA not before: Mon 11 Sep 2023 18:53:12 +0000
ROA not after: Mon 09 Sep 2024 18:58:12 +0000
asID: 20473
IP address blocks: 2602:fe13:900::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 20 Sep 2023 20:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:61:fa:4c:9b:67:5b:4c:48:c8:c1:c5:18:0a:82:fa:ca:d1:c6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Validity
Not Before: Sep 11 18:53:12 2023 GMT
Not After : Sep 9 18:58:12 2024 GMT
Subject: CN=7F89BBB1BBA685B4295463D9CFF8F95D078427CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:9d:c2:e5:f9:f7:e8:0c:bf:b3:84:4b:b1:
51:88:02:0d:fd:99:bb:f5:12:5f:37:42:f6:92:d7:
1c:46:18:20:eb:2b:42:f5:68:98:fc:fe:87:96:88:
5a:6b:e7:54:4d:70:52:0b:c1:20:2b:3a:df:1b:f6:
47:b3:3c:6f:58:5f:33:77:b4:74:54:19:34:e2:07:
d7:13:63:a1:12:e9:c4:9e:c4:64:12:f8:14:38:de:
2c:c7:0c:41:28:36:5d:81:0e:ef:70:50:3e:87:37:
4f:f5:9f:9b:6e:b0:97:68:4e:50:2d:f0:4b:8c:47:
77:00:99:ec:21:1a:f8:b2:47:82:a9:6c:d7:71:59:
ed:83:02:68:59:36:f1:ba:77:83:25:12:a9:57:94:
a5:db:2f:4b:05:19:7a:0d:3c:35:ab:25:61:ba:db:
f9:f9:6e:1a:76:0a:1d:91:53:5e:90:87:df:4b:6b:
18:b7:bb:15:79:bd:95:17:28:e0:b8:ab:89:8b:10:
95:00:11:6d:14:41:f9:4e:5a:ce:5a:e6:4c:88:07:
fa:2f:37:fb:1d:77:0b:36:80:08:7e:02:62:b4:00:
ea:44:27:e6:9c:a0:f1:b9:41:9d:9c:57:65:38:c7:
46:79:1c:c6:15:9f:2b:35:c7:61:64:50:06:26:ec:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:89:BB:B1:BB:A6:85:B4:29:54:63:D9:CF:F8:F9:5D:07:84:27:CD
X509v3 Authority Key Identifier:
keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3930303a3a2f34302d3430203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fe13:900::/40
Signature Algorithm: sha256WithRSAEncryption
2d:53:4e:b2:6b:86:fb:64:2c:db:5a:20:2a:ed:0e:65:70:b5:
9e:a5:43:98:dd:4d:c8:a0:29:c3:57:13:73:1f:3a:9f:74:96:
07:ac:cf:72:6d:3d:8e:8f:03:16:b5:a5:f1:37:e2:60:af:f3:
7a:e3:a7:b2:4f:04:bb:cb:59:c0:9c:5c:93:bb:6c:f3:82:86:
dc:c2:c5:01:ad:c2:d5:e3:40:8b:0f:de:6a:f9:6b:69:49:3c:
d9:46:cf:35:3b:e6:29:82:37:80:73:96:52:81:19:9e:0c:67:
a2:70:bb:23:91:6b:72:c5:f1:ef:09:b1:50:d7:0b:74:3f:93:
0b:d2:20:7e:d5:c5:56:1c:64:19:f4:be:d5:23:6b:75:20:70:
8e:9c:4e:ff:db:ae:50:ce:dd:d7:25:cc:9c:57:b3:75:8b:b2:
07:b9:00:54:d0:2e:85:73:ad:26:2b:ec:db:1b:8c:17:8f:cf:
a3:22:b8:67:87:aa:f7:5a:a9:c0:87:f1:05:b4:e9:49:a3:5c:
8d:86:79:f7:7b:e0:30:85:25:d8:34:18:f4:ea:41:c8:6c:2a:
87:d9:a6:bf:9b:f8:b9:ec:3a:f1:68:92:aa:f8:23:a9:bf:d4:
4c:3b:bb:a6:e3:bd:26:b1:2a:6e:e5:84:e2:95:0d:e0:3d:d5:
89:06:fd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-ams.rpki-client.org