Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6530303a3a2f34302d3430203d3e203533333536.roa
File: 323630323a666531333a6530303a3a2f34302d3430203d3e203533333536.roa (raw, json)
Hash identifier: C5L2+Oz5phbybH3Hsi4w3VcofnPa82H/ZJtbkCoGnmA=
Subject key identifier: 57:A9:28:91:AB:E2:57:32:D6:0E:A1:69:0F:C9:CB:F6:72:6A:9F:18
Certificate issuer: /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial: 12378B0C0A162316B4C245DDA5651C56514BB5BF
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6530303a3a2f34302d3430203d3e203533333536.roa
Signing time: Thu 21 Dec 2023 02:12:08 +0000
ROA not before: Thu 21 Dec 2023 02:07:08 +0000
ROA not after: Thu 19 Dec 2024 02:12:08 +0000
asID: 53356
IP address blocks: 2602:fe13:e00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:37:8b:0c:0a:16:23:16:b4:c2:45:dd:a5:65:1c:56:51:4b:b5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Validity
Not Before: Dec 21 02:07:08 2023 GMT
Not After : Dec 19 02:12:08 2024 GMT
Subject: CN=57A92891ABE25732D60EA1690FC9CBF6726A9F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:9d:85:9b:18:ca:c1:4c:93:f4:57:a1:ba:
b2:b1:c0:6e:75:a1:13:c8:6d:fd:e6:d4:bc:8e:42:
ae:44:9c:ca:c8:2a:71:a6:d4:c7:4c:6e:11:15:7d:
cb:f0:8c:e9:42:93:5c:4e:af:41:97:8b:4b:bf:04:
0d:c9:2b:fd:78:8f:a3:6c:47:e5:27:99:c5:51:63:
89:7d:25:ff:4b:70:47:a7:b7:ea:0a:fd:5f:93:2b:
98:23:98:58:31:d5:2a:21:ec:6b:cc:1d:0f:1d:42:
a5:66:fb:e5:56:ad:34:58:4a:6d:68:fc:c4:71:93:
3f:a0:6a:71:e9:a5:ae:5c:fc:95:f3:36:7e:48:d3:
25:7c:e6:30:9c:c6:0f:51:6f:0c:27:17:a3:12:50:
0d:a6:56:49:df:c8:18:53:be:44:b9:78:fc:d3:21:
25:ef:e3:38:21:24:f2:f9:45:2d:24:37:86:29:b5:
ee:5f:fe:5e:7a:11:46:71:db:cd:c6:37:15:3f:c6:
27:91:cf:68:22:33:9b:c8:42:b0:2e:5a:be:5b:e1:
cb:8f:ad:62:9f:1b:49:3c:8d:06:73:42:c5:99:4e:
e3:8c:1b:65:2c:e1:e3:f4:3d:5e:4e:6a:d9:33:b7:
10:5c:43:a8:c3:94:04:17:34:9c:da:e8:c7:b2:e2:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:28:91:AB:E2:57:32:D6:0E:A1:69:0F:C9:CB:F6:72:6A:9F:18
X509v3 Authority Key Identifier:
keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6530303a3a2f34302d3430203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fe13:e00::/40
Signature Algorithm: sha256WithRSAEncryption
79:01:0a:88:17:d8:df:16:57:ba:a2:65:07:fa:a9:ce:18:37:
3f:77:83:0d:0c:ee:6d:b7:38:bf:32:58:f4:8c:c5:88:56:68:
28:40:e1:92:d2:39:95:75:f2:8a:f6:e3:07:77:a7:c7:d8:b9:
00:7b:c7:b6:da:9a:10:d9:28:db:56:17:d6:24:75:f4:70:b9:
2b:df:81:5e:4a:35:04:fa:9c:78:3b:b4:32:ae:b9:fa:85:7f:
e0:72:c2:a7:5f:89:5b:93:1b:1a:69:81:d8:d7:a3:ba:58:a8:
35:a8:c9:31:9f:bc:92:9d:e5:4c:e2:37:da:ed:62:f4:c4:26:
bc:fe:29:c1:59:3f:f3:ae:0c:ca:8a:e1:48:61:90:d0:af:b7:
a7:cd:24:76:1e:ea:5a:7f:5c:5a:35:22:cf:d8:0f:3f:aa:0f:
54:ae:19:52:61:f6:18:ed:90:da:69:75:bd:98:80:cd:1d:8f:
6c:b7:cd:8f:32:f0:a3:1f:ae:3b:01:35:91:5d:f4:61:23:d5:
6b:bd:cb:97:04:af:6e:11:f0:53:fd:b7:10:37:12:1a:6a:32:
22:73:b3:3f:59:b2:ed:94:33:3d:05:fb:5b:dc:c3:28:ea:d1:
83:73:26:eb:a2:d6:3a:26:40:06:39:17:52:89:03:ed:2e:17:
51:59:d6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:37 2025 by rpki-client