Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: A1Lub4QmjPf00Z/iPkQbkAo+B6+t7/QkUQfn/aKFpyc=
Subject key identifier: 71:C9:2E:95:F4:63:15:9D:E3:6C:E8:CE:7D:A2:63:7C:8C:62:38:18
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2B43748423EBDF83609D463CDE34E344580233C8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS16509.roa
Signing time: Wed 06 Nov 2024 18:05:08 +0000
ROA not before: Wed 06 Nov 2024 18:00:08 +0000
ROA not after: Wed 05 Nov 2025 18:05:08 +0000
asID: 16509
IP address blocks: 2a0f:9400:610f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 10 Nov 2024 08:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:43:74:84:23:eb:df:83:60:9d:46:3c:de:34:e3:44:58:02:33:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 6 18:00:08 2024 GMT
Not After : Nov 5 18:05:08 2025 GMT
Subject: CN=71C92E95F463159DE36CE8CE7DA2637C8C623818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:df:a2:20:7d:37:aa:8b:fb:83:e2:f9:bc:
1b:a2:a6:f5:3a:b4:d2:8e:84:88:9d:ba:f3:b3:3d:
5b:49:8b:1b:c6:e2:3c:e9:a4:b4:d8:01:3a:40:df:
ef:c4:71:36:d0:f0:76:f4:80:87:f2:1f:c9:78:88:
93:31:d3:24:1e:6f:68:7e:a5:07:14:92:36:95:2a:
98:e9:0a:29:a9:68:28:4c:3f:7c:6a:69:f3:ea:cf:
10:99:89:80:6f:be:ad:90:e1:c8:8c:0a:db:40:7a:
ba:49:fc:df:30:d5:62:56:93:77:56:50:19:76:fe:
4c:e4:34:00:57:c6:8c:ee:af:a6:79:04:25:8d:a9:
33:34:ab:78:19:9f:4f:d2:91:5a:40:97:47:87:49:
9f:ef:d9:60:d7:14:f6:30:02:ee:79:bd:ac:2f:45:
10:9b:3b:d5:72:a7:2b:36:24:76:44:b2:a8:8d:9d:
c9:55:60:80:fe:25:c5:53:19:f9:a4:d6:97:c3:ce:
7e:9a:61:7d:78:43:93:94:99:45:16:05:a9:0c:94:
d7:cb:2b:5e:c1:fe:16:41:af:d7:8d:59:97:9e:63:
17:ff:8e:26:93:e1:36:9e:3b:e8:92:4e:be:97:8b:
b2:8e:67:d9:6d:ea:85:ff:c6:ed:0b:d9:4d:cd:52:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:2E:95:F4:63:15:9D:E3:6C:E8:CE:7D:A2:63:7C:8C:62:38:18
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610f::/48
Signature Algorithm: sha256WithRSAEncryption
32:fa:68:01:2e:06:43:74:14:5a:25:21:e2:84:63:14:27:84:
1c:0c:81:6c:03:e5:83:d8:fb:3f:5e:10:08:ec:8f:20:4f:d8:
d3:ef:7e:84:20:52:14:8e:37:6d:0a:0e:2f:db:4d:39:bb:39:
14:ae:be:5a:e3:29:64:c4:b0:03:df:17:66:1f:3d:7c:74:ae:
26:e5:f0:42:8e:2d:df:98:56:57:1f:05:7d:a8:03:0b:fa:be:
8f:f7:b0:07:d2:9b:d7:a5:bb:7b:61:f1:56:a2:03:bc:1d:68:
c5:e1:c0:7e:c7:58:87:f2:42:e0:cd:d5:b8:d6:50:2d:86:f4:
3f:6c:89:0d:37:18:b6:5e:00:35:9d:a8:dd:2e:82:ed:3a:06:
b3:ce:c3:ed:69:a7:06:1d:1e:94:b7:5f:6a:dd:cc:d2:f2:7c:
63:0d:0a:ad:63:88:44:34:9f:df:ad:99:e3:62:4b:d2:df:d4:
79:76:10:ce:dd:d3:cd:ba:77:68:07:86:25:99:13:d2:29:8f:
ce:a7:cb:7f:45:25:e4:d6:ae:95:52:b2:8a:6b:fc:35:d8:2e:
54:15:92:9a:7b:76:d9:65:77:b4:6a:83:d2:fc:9e:85:90:41:
18:27:72:c1:2c:9e:8e:80:32:f3:6f:b5:7b:82:6b:26:2d:93:
c0:f2:01:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 12:46:23 2024 by rpki-client on console-fra.rpki-client.org