Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198075.roa
File: AS198075.roa (raw, json)
Hash identifier: S0Y8AELHRUeGUPJnWP29ZYZfjgjUxy44u331wpkCWeY=
Subject key identifier: A0:04:96:49:73:E1:CF:73:7A:E2:87:D4:61:92:B6:3D:7A:FC:F0:9E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 30BE946EE7BC5B27CF3A15903ED7BB42697DCD30
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198075.roa
Signing time: Thu 23 May 2024 13:24:46 +0000
ROA not before: Thu 23 May 2024 13:19:46 +0000
ROA not after: Thu 22 May 2025 13:24:46 +0000
asID: 198075
IP address blocks: 2a0f:9400:7385::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 28 Jun 2024 02:26:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:be:94:6e:e7:bc:5b:27:cf:3a:15:90:3e:d7:bb:42:69:7d:cd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 23 13:19:46 2024 GMT
Not After : May 22 13:24:46 2025 GMT
Subject: CN=A004964973E1CF737AE287D46192B63D7AFCF09E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:83:de:e3:5f:53:c7:6f:c7:8d:02:f9:97:
4b:f6:89:1e:66:cf:45:de:9b:3f:96:b2:ff:c6:b1:
53:3c:a1:19:83:14:cc:fe:2f:15:0f:87:39:61:e7:
ad:6b:77:04:c2:e3:9f:8c:43:18:a6:61:df:9c:b6:
79:8b:bf:fc:5e:b5:a5:71:4a:8f:4a:8a:86:0e:95:
a1:bd:02:92:2f:3e:43:1e:b9:90:66:48:87:0a:58:
b6:f2:3d:8e:d8:05:e4:84:58:b7:d7:a3:1f:8e:19:
6e:49:85:46:3e:91:ca:56:f0:7e:7b:af:ba:22:b8:
83:59:14:da:31:21:49:dc:00:44:6f:3b:e5:ec:d2:
8f:a4:1e:4a:ed:4f:7b:60:c8:25:c0:ce:26:02:ac:
47:ac:81:2c:1b:34:f5:ca:49:99:a5:e6:c6:4d:dc:
3a:5a:66:17:c0:f6:c4:a1:a6:4d:51:9b:50:7d:06:
38:7c:99:4a:5d:87:70:8c:0e:1a:42:72:e7:1e:e3:
5b:41:85:60:1a:f5:9e:44:71:5d:63:68:79:df:bf:
cd:95:74:c0:7f:2f:3f:4b:aa:08:ff:20:8b:8a:38:
7f:e0:7d:a2:18:4c:ad:26:81:3e:38:fd:02:68:83:
9f:6b:8e:5b:cb:f1:44:4a:2a:72:74:4b:b2:95:22:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:96:49:73:E1:CF:73:7A:E2:87:D4:61:92:B6:3D:7A:FC:F0:9E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7385::/48
Signature Algorithm: sha256WithRSAEncryption
ad:ac:cb:10:a6:05:34:cb:c4:8b:9b:a2:2c:4e:3f:54:b1:9c:
e9:f8:47:f3:ce:79:d8:19:2b:9f:09:14:2a:f5:b1:43:77:cc:
ad:b9:28:e9:a1:d2:15:f6:91:43:b1:40:9a:a1:84:c8:83:dc:
d5:71:d0:95:2b:24:2f:cc:d2:5f:fc:da:41:ae:96:54:03:84:
24:d8:32:3d:57:fa:a3:00:fb:71:d4:10:55:fb:cf:2c:4a:ba:
8c:17:d5:cf:8e:fb:8d:57:e0:df:5f:f3:07:cf:86:7c:4a:ed:
11:88:fb:20:55:df:54:8d:1e:23:96:13:52:cd:52:8f:dd:4a:
d3:52:28:04:25:cc:9e:26:81:bf:eb:05:95:82:6c:d4:6e:b2:
ad:52:ec:6f:46:3a:bb:18:0b:62:63:1d:9c:28:a7:ba:0b:75:
27:f8:83:c7:a0:55:1a:eb:9f:1b:b2:a9:8f:05:14:c0:9d:d3:
29:d4:6a:32:db:1c:d9:c0:20:ef:c9:a2:ca:1b:a0:54:7d:53:
dd:f4:e3:a3:e0:c8:8f:86:04:0d:fe:fd:11:fe:38:9a:ed:59:
12:27:14:fc:c6:fc:f5:02:b3:ae:af:e8:67:0f:85:87:c1:a4:
18:70:94:44:2a:0b:2d:44:a4:cd:65:6c:fc:13:27:48:f2:7c:
f6:cb:43:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:16:23 2024 by rpki-client on console-ams.rpki-client.org