Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6664303a3a2f34342d3434203d3e203533333536.roa
File: 323630323a666531333a6664303a3a2f34342d3434203d3e203533333536.roa (raw, json)
Hash identifier: 2zgOnEtJnS+xZqYd75Oth41lIdhoWTHe93QxUfjbGRk=
Subject key identifier: 16:91:3A:18:73:F3:5D:F4:8B:FD:14:E7:19:65:04:D9:F1:4A:A0:F5
Certificate issuer: /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial: 2005D231D0786F25A538A984529FE2D5E7954CC8
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6664303a3a2f34342d3434203d3e203533333536.roa
Signing time: Tue 08 Nov 2022 05:13:20 +0000
ROA not before: Tue 08 Nov 2022 05:08:20 +0000
ROA not after: Tue 07 Nov 2023 05:13:20 +0000
asID: 53356
IP address blocks: 2602:fe13:fd0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:05:d2:31:d0:78:6f:25:a5:38:a9:84:52:9f:e2:d5:e7:95:4c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Validity
Not Before: Nov 8 05:08:20 2022 GMT
Not After : Nov 7 05:13:20 2023 GMT
Subject: CN=16913A1873F35DF48BFD14E7196504D9F14AA0F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:32:c7:67:17:33:6c:c5:8c:29:26:47:a7:
5b:86:76:0d:c0:1e:99:e6:67:28:cb:58:ba:fb:50:
13:29:b3:af:88:ef:72:5a:87:96:a5:b3:44:bc:33:
0c:29:8f:c7:27:db:2a:a3:2c:bc:43:f1:54:98:7a:
c6:5d:9c:5f:b8:c2:95:fc:f8:5c:82:db:c0:ce:41:
94:db:bf:21:ce:28:4f:19:d0:33:0e:0c:92:86:b8:
1b:e7:8b:b6:63:c9:67:9e:e2:5f:b6:87:23:f4:aa:
f4:52:1f:fe:85:7b:e4:15:44:8b:bb:03:0b:37:09:
d5:a5:27:a4:0f:7f:71:8f:85:c1:9a:47:40:65:71:
72:73:f1:a4:e9:3d:9d:12:c6:ea:2c:62:9a:7f:49:
8d:67:f0:98:fe:39:3e:cc:12:26:3d:ae:51:0f:f8:
66:fe:b4:3d:32:fb:54:0d:a2:6b:15:17:31:45:4b:
5b:55:a1:05:04:27:7c:b0:12:a3:5f:c9:a7:06:8a:
17:34:33:4c:19:68:9a:9d:7a:7b:20:78:b4:86:68:
8e:d5:f6:f3:b7:a8:af:9c:d9:1f:de:65:68:3c:03:
f0:ef:af:67:9b:a6:b8:6c:86:95:a3:9e:74:da:9d:
c2:af:4a:b2:48:50:e9:c2:14:b9:41:ac:ba:62:10:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:3A:18:73:F3:5D:F4:8B:FD:14:E7:19:65:04:D9:F1:4A:A0:F5
X509v3 Authority Key Identifier:
keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6664303a3a2f34342d3434203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fe13:fd0::/44
Signature Algorithm: sha256WithRSAEncryption
43:bd:b7:4d:00:e6:af:dd:65:53:02:97:90:8a:8c:5d:f7:82:
c2:d0:5e:2d:d7:52:b4:0c:7d:4c:b8:23:4d:28:b9:92:f0:0d:
50:de:93:e8:63:71:19:44:a8:a8:4e:cc:31:26:78:ab:9f:ab:
60:df:f6:de:71:88:18:b6:14:06:4a:48:27:ce:48:24:f7:ad:
ef:b0:62:0a:35:7c:41:d8:43:3c:fd:c8:0d:47:04:b9:8d:b8:
2f:25:87:e5:bb:00:fa:a3:b3:17:4a:f3:8d:53:80:72:0a:ee:
bd:77:37:49:69:a0:a6:67:c0:b7:b4:4c:97:c3:f1:bf:fa:e2:
29:32:30:cf:d2:61:f1:a5:6a:b3:1a:c9:6b:3a:e4:2c:75:31:
1a:a3:0f:ec:5a:ad:45:77:af:e3:6e:b3:2a:10:51:6a:ed:f5:
71:f5:7d:19:9d:83:6a:1d:9e:00:88:6b:14:ee:08:2e:d8:68:
25:d8:69:c3:f6:c3:4a:db:d4:5b:e0:d2:7d:14:70:21:78:34:
fa:4f:eb:60:15:b1:e1:bf:98:56:57:22:af:16:1e:f4:ce:7f:
97:56:d7:85:cf:48:9e:39:a7:e1:3e:f9:c1:02:84:59:23:81:
97:07:5f:4b:fb:11:4d:2e:bd:96:51:1d:16:a8:4a:e3:c8:4a:
2d:d7:c1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-ams.rpki-client.org