Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3434203d3e20333936353033.roa
File: 323630323a666531333a6666303a3a2f34342d3434203d3e20333936353033.roa (raw, json)
Hash identifier: 6RPOWZuLA/CgzUB4bXBLAdwSHo0DDt8rFxsqeg6rKvU=
Subject key identifier: 72:15:83:D5:FD:53:7D:28:EF:5A:03:F1:8F:54:C0:47:BB:1E:D8:80
Certificate issuer: /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial: 4BA0F55CBF8E8D6654036CCD492038B3847E77B2
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3434203d3e20333936353033.roa
Signing time: Wed 30 Nov 2022 03:53:19 +0000
ROA not before: Wed 30 Nov 2022 03:48:19 +0000
ROA not after: Wed 29 Nov 2023 03:53:19 +0000
asID: 396503
IP address blocks: 2602:fe13:ff0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a0:f5:5c:bf:8e:8d:66:54:03:6c:cd:49:20:38:b3:84:7e:77:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Validity
Not Before: Nov 30 03:48:19 2022 GMT
Not After : Nov 29 03:53:19 2023 GMT
Subject: CN=721583D5FD537D28EF5A03F18F54C047BB1ED880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7d:ee:b2:13:04:94:a6:61:d0:90:3a:a5:fe:
8d:52:3d:07:4f:a4:93:63:87:51:df:d3:59:bd:9c:
9c:47:02:ba:c3:d9:22:8d:85:00:85:f1:3f:98:d0:
22:95:8b:2e:53:b2:f5:1c:41:ca:2c:1c:08:bb:22:
25:7f:e4:ca:52:4f:b8:31:4e:bb:57:8c:c2:44:1e:
91:9f:02:73:61:ad:c9:7d:23:0c:f6:99:d5:8b:c1:
d4:6c:76:69:b1:5e:27:05:ce:02:81:3b:5b:0e:1d:
a3:9c:fb:c5:1b:14:15:8b:dc:4c:c2:30:a0:37:5c:
d0:a8:cb:13:34:1b:a4:ce:22:36:48:a6:b8:a5:44:
e9:52:0e:4f:8f:92:89:3e:f0:fd:0e:d4:0d:84:b3:
97:b8:1e:9a:f8:4e:30:32:b3:55:1f:a0:d5:79:0a:
df:30:1b:f9:f3:17:44:bb:78:f6:3a:72:e4:fb:0a:
69:5a:26:6c:62:c3:a2:56:0d:c6:d2:66:cf:ce:ba:
13:08:59:a9:96:1f:1c:8a:5b:ed:4f:c1:64:44:5a:
85:9c:ed:69:cd:d8:20:30:b4:08:0a:49:e2:10:a6:
b4:1c:a5:e3:b4:5f:44:1a:45:ea:f0:0f:16:b4:af:
f2:d9:63:f5:cb:0d:19:47:61:b2:04:a3:b5:11:2b:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:15:83:D5:FD:53:7D:28:EF:5A:03:F1:8F:54:C0:47:BB:1E:D8:80
X509v3 Authority Key Identifier:
keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3434203d3e20333936353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fe13:ff0::/44
Signature Algorithm: sha256WithRSAEncryption
76:1f:42:5a:7a:90:7d:d6:6f:9c:87:0c:3c:80:0f:62:e4:66:
3c:33:2d:e4:25:b1:d4:d8:0e:e3:14:30:84:29:86:b1:a6:71:
11:e1:0c:5f:bf:95:b1:e4:7e:ff:c0:22:fe:24:fa:68:7f:0c:
65:5a:27:fa:a3:35:d5:46:c2:09:13:41:1e:42:75:7a:2e:1c:
b9:2a:82:5e:a8:6a:1c:16:55:92:75:6c:53:a1:2c:44:f4:d6:
97:56:de:34:a1:19:63:62:aa:fe:8f:4b:69:af:ea:7e:33:86:
de:52:cb:cd:89:87:8a:85:71:b0:1a:05:e8:92:eb:7e:4a:ba:
60:1b:21:cf:ef:12:fe:86:a7:cb:01:20:5a:77:81:b5:66:7b:
83:6e:1b:a4:67:0a:b3:de:fa:c7:30:39:dd:08:2b:14:40:c0:
21:5d:14:0a:de:8b:db:af:5b:1b:70:13:27:62:c9:0b:88:ee:
47:4d:3c:91:d0:a4:67:3f:e4:20:44:60:47:52:75:72:94:ce:
7a:99:44:8b:2f:b6:c6:52:8c:57:fd:2a:1f:3e:67:3f:80:68:
8c:db:8d:4f:2a:9a:00:87:60:bf:aa:87:6e:29:e6:17:e4:d4:
87:cf:0d:65:4f:54:bc:d7:4e:7a:82:84:1a:0c:12:d0:5c:45:
b9:1e:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:19 2025 by rpki-client