Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203979.roa
File: AS203979.roa (raw, json)
Hash identifier: 7H6Riqrzy5JhvfNNP15l4L7LxbOd3EXbc8L0/MfFM9E=
Subject key identifier: 87:CF:3C:4F:57:2C:99:F1:07:12:FA:DB:F5:5F:4F:7C:88:91:7A:DC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 459DA66DB55BB18A601481B4CD9D396B32ADD7EC
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203979.roa
Signing time: Tue 13 Sep 2022 01:20:26 +0000
ROA not before: Tue 13 Sep 2022 01:15:26 +0000
ROA not after: Tue 12 Sep 2023 01:20:26 +0000
asID: 203979
IP address blocks: 2a0f:9400:7721::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:9d:a6:6d:b5:5b:b1:8a:60:14:81:b4:cd:9d:39:6b:32:ad:d7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:26 2022 GMT
Not After : Sep 12 01:20:26 2023 GMT
Subject: CN=87CF3C4F572C99F10712FADBF55F4F7C88917ADC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:da:bb:58:d2:3f:2a:b2:b6:89:37:4c:92:
84:ba:5e:91:c0:ae:eb:6f:68:a2:7c:21:4d:24:7a:
31:96:05:b7:3b:41:48:47:e4:2d:6f:a9:ea:bc:62:
ab:94:31:07:a7:3b:c6:5a:0e:36:d6:b2:76:b7:f2:
31:82:0d:85:64:18:17:b2:69:ea:07:5a:7b:14:f1:
38:b0:eb:59:76:14:db:d4:ec:26:3b:a7:c7:e4:82:
16:1c:dd:71:93:cf:77:39:8e:ac:90:b4:ae:28:28:
ad:57:c5:7f:4c:df:86:6b:32:00:12:94:42:ee:88:
40:64:14:fc:65:8c:d0:6a:fb:63:68:70:1d:9f:e5:
e5:e5:f0:db:d5:a6:26:a6:e6:b8:dd:6b:f2:37:ed:
56:ef:70:5d:2e:8c:fb:c0:3c:2a:7c:bb:f0:11:c9:
21:53:1e:0b:3e:7b:7f:b0:83:c9:e1:1e:a9:dd:d4:
02:d3:45:b6:61:5e:70:b5:a5:ce:ce:01:fa:26:28:
bb:0d:04:45:40:2a:c1:78:d1:65:a6:3c:29:b1:fd:
ae:a3:84:0b:e6:a9:03:9d:a5:11:3f:da:d7:8d:c6:
40:3d:3c:d2:6b:52:23:e0:26:9d:90:f3:85:71:70:
98:f3:1b:56:1f:12:41:8e:23:23:95:a0:0f:df:70:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CF:3C:4F:57:2C:99:F1:07:12:FA:DB:F5:5F:4F:7C:88:91:7A:DC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7721::/48
Signature Algorithm: sha256WithRSAEncryption
0b:c6:fa:71:b1:09:16:e6:ee:d5:b6:84:46:06:8d:34:2f:46:
04:17:f8:d2:61:ed:bd:56:5f:6b:9c:a2:e4:04:99:5b:8c:fc:
95:12:84:88:a8:4b:59:69:3e:82:d9:f7:21:60:8a:9a:74:fc:
78:09:41:53:4d:27:20:9c:a0:d6:ec:16:04:5e:fd:cf:0a:81:
b2:8a:cc:ca:88:a3:70:bc:44:8d:d7:bf:03:24:ee:d4:82:2c:
a4:ab:51:3b:c7:d7:bb:31:68:e2:b8:3d:5f:ea:f2:d6:19:7c:
0b:3e:49:ad:45:ec:d4:ea:02:b2:8f:a6:b0:54:dd:43:f0:14:
fc:c5:8a:52:4a:1b:a5:0b:45:d1:19:8c:f5:d5:92:49:7c:56:
84:02:70:fb:19:fe:ea:a8:20:94:a8:3f:0f:c7:72:91:9e:19:
bb:96:68:1a:42:df:39:30:ba:bc:7c:b0:6c:ac:4f:68:f3:84:
93:9f:2c:d4:9d:9e:5f:fd:26:a6:b8:2c:a6:2a:72:53:e2:31:
cb:53:b4:1f:d5:7c:71:1d:7b:d3:68:2a:4e:d2:ae:ab:31:a5:
3e:1f:aa:76:8d:be:b2:e4:28:ea:da:22:3b:da:32:e4:c2:85:
61:c1:3a:e3:0b:af:87:09:57:df:7f:6e:e4:f9:f7:af:5f:57:
e2:3f:d7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org