Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: D3nNUTVYOTARTkJ+bXMN0pcGzogaKGbzpwbnmoat5+I=
Subject key identifier: 35:A9:87:47:9E:E4:1C:45:33:56:45:2F:6B:86:C0:65:8E:EE:5E:95
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 29738475BDC16971A23EF854228D0E388C34F392
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS14618.roa
Signing time: Wed 06 Nov 2024 18:04:29 +0000
ROA not before: Wed 06 Nov 2024 17:59:29 +0000
ROA not after: Wed 05 Nov 2025 18:04:29 +0000
asID: 14618
IP address blocks: 2a0f:9400:610f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 10 Nov 2024 08:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:73:84:75:bd:c1:69:71:a2:3e:f8:54:22:8d:0e:38:8c:34:f3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 6 17:59:29 2024 GMT
Not After : Nov 5 18:04:29 2025 GMT
Subject: CN=35A987479EE41C453356452F6B86C0658EEE5E95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:be:54:27:30:60:c7:40:30:01:31:be:c1:
39:4e:77:a0:aa:e5:73:ef:3e:59:28:a4:b8:07:dc:
94:8f:18:d0:ba:b8:b5:e3:de:86:e7:9b:97:a3:f2:
5e:44:97:34:a8:0e:30:fa:66:7e:9f:03:c1:fc:3c:
b4:01:b6:af:c0:00:b2:12:d8:38:6d:91:ea:fb:39:
e3:a3:20:bf:38:58:95:23:96:0b:e6:f9:e6:cd:9b:
d4:bf:71:55:1b:b8:c5:0c:a6:fa:44:1b:0f:1e:51:
61:8f:c0:a0:d2:c8:a9:03:19:87:f8:29:2d:a9:c9:
ea:1b:67:4c:85:f3:b2:4a:34:bf:fa:62:a2:14:47:
72:b4:66:89:63:66:18:d3:8a:c8:a2:b5:c1:29:ae:
1e:f9:c7:17:66:0b:69:bd:dc:05:ac:4b:82:62:d5:
02:11:4f:3e:71:17:2f:23:41:4b:c2:7d:53:a3:48:
b6:b1:7d:a3:c1:ce:03:02:dc:2a:aa:e3:0d:aa:55:
8f:93:c8:46:73:18:6d:a7:a1:1e:46:d0:92:02:57:
96:1a:8c:87:89:96:b7:d6:b1:5a:e5:e5:a4:4d:9f:
b8:7f:9c:53:a4:dd:1d:1b:40:7d:19:5d:19:7d:66:
8f:26:f3:9b:e3:6d:19:28:2b:be:5c:15:cf:4b:cc:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A9:87:47:9E:E4:1C:45:33:56:45:2F:6B:86:C0:65:8E:EE:5E:95
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610f::/48
Signature Algorithm: sha256WithRSAEncryption
2b:ee:cf:e9:6a:1e:b4:db:7c:41:6b:5c:5a:56:3e:0d:24:c6:
5e:9c:6f:ac:9b:1e:ba:38:3f:09:e6:1b:36:ea:81:81:3f:70:
52:10:22:30:fb:b8:e4:84:c0:a6:cc:97:58:c6:2f:2e:de:5e:
12:a5:65:42:56:83:df:5c:15:68:ad:84:ad:db:6a:d7:02:e4:
bd:10:de:fe:22:5e:4c:18:7e:3c:47:5f:4b:60:6c:b0:24:95:
be:24:a8:56:c4:8c:42:bd:72:4c:7c:68:d8:08:11:73:f8:ec:
84:6f:02:97:62:8e:07:e3:9a:f8:b4:ff:60:69:bb:22:92:55:
0b:a4:95:e6:ca:fa:ff:72:50:bd:7a:f6:34:77:ba:2b:6c:2a:
0b:de:06:fb:b7:ea:42:55:25:74:df:9b:a7:ce:a0:5b:65:bf:
a6:ed:01:08:6a:0e:af:bc:d4:80:0a:10:91:f2:cf:2c:26:46:
d7:84:f6:61:f2:e2:1f:df:6a:1f:50:39:79:c9:28:ee:3d:6a:
6a:68:29:42:5e:e3:39:36:40:65:ce:c4:88:62:5d:ae:66:08:
98:d8:60:bb:d3:da:8c:c4:bf:0f:d9:e3:00:f0:12:82:87:13:
dc:a7:a5:d5:99:53:62:50:d2:b2:ec:7a:1a:e4:16:b5:3d:98:
52:36:5d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 12:46:23 2024 by rpki-client on console-fra.rpki-client.org