Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206216.roa
File: AS206216.roa (raw, json)
Hash identifier: W20ZSZv7rqJxRtKTGC8XnZuigCE9LVZHDxL1J0DtPX4=
Subject key identifier: 2B:58:79:77:FE:BB:78:FC:AA:DB:EF:D0:7E:86:1F:99:0E:A3:84:49
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 268A334C83B20EF0FAA26C7EA439DDC27775E604
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206216.roa
Signing time: Tue 13 Sep 2022 01:20:23 +0000
ROA not before: Tue 13 Sep 2022 01:15:23 +0000
ROA not after: Tue 12 Sep 2023 01:20:23 +0000
asID: 206216
IP address blocks: 2a0f:9400:770f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:8a:33:4c:83:b2:0e:f0:fa:a2:6c:7e:a4:39:dd:c2:77:75:e6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:23 2022 GMT
Not After : Sep 12 01:20:23 2023 GMT
Subject: CN=2B587977FEBB78FCAADBEFD07E861F990EA38449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:61:95:05:56:e2:d0:1e:5d:8a:69:7e:ae:
7c:c1:04:9a:d6:05:58:43:98:0d:ec:d4:4c:2f:42:
2c:d2:33:54:85:52:21:e5:74:35:58:40:06:c2:10:
23:9a:e4:90:de:29:0e:50:86:0a:b8:5d:c0:35:ac:
dd:38:2d:5d:75:b1:53:95:18:3b:a9:3a:c7:5f:16:
78:15:f9:10:0b:b9:06:3f:5c:bc:59:29:fe:54:f7:
f2:78:d9:0f:b4:4f:de:11:77:0c:7a:6b:ed:c4:77:
cf:d0:f0:71:3f:93:8d:47:64:e2:2f:4b:77:60:cd:
22:5a:fe:91:9f:08:07:0b:12:e0:fc:cf:98:da:7c:
77:fa:22:3f:5b:40:2c:99:04:b8:dc:4c:a7:8f:7d:
d5:b6:5d:5d:79:63:0b:61:23:d0:05:a3:22:1c:58:
61:67:3b:39:8a:10:e4:39:74:9c:16:2e:aa:19:1f:
a7:30:0a:82:5d:30:85:b3:e4:cd:e2:a4:af:ca:b4:
7a:c4:5c:ba:3a:8f:2b:5b:ff:2e:68:1d:80:ac:2c:
34:c8:6b:3f:4d:23:3a:70:8f:3e:3f:68:44:6a:70:
af:69:71:32:7f:3a:e1:9b:1c:b1:65:dc:5e:b7:ae:
ed:02:54:96:5b:0f:3d:f3:c7:64:d3:cb:6d:12:bd:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:79:77:FE:BB:78:FC:AA:DB:EF:D0:7E:86:1F:99:0E:A3:84:49
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:770f::/48
Signature Algorithm: sha256WithRSAEncryption
02:e7:36:4a:7d:49:95:06:ea:2a:ff:cb:36:9a:e9:5d:9a:f8:
55:e6:26:1b:27:e3:29:1e:04:fe:a5:04:88:0b:65:fa:c4:1c:
e9:eb:57:9b:2c:7a:30:05:63:82:ca:f8:e7:89:49:38:17:00:
5a:ae:01:96:c8:a8:ee:b9:98:de:e9:f5:7d:f2:2c:9f:15:38:
e9:19:d7:d8:89:65:dd:b8:92:ee:62:1b:b3:f4:b2:e2:76:e0:
1e:df:d8:0d:39:0a:e4:39:f5:da:80:c8:97:a2:cb:07:5f:b6:
66:a2:00:e6:bf:37:a4:4c:1c:96:aa:38:f6:0e:5c:7b:e9:e6:
79:f5:bf:d0:dc:c8:7e:5c:4f:54:08:74:fb:ee:8b:6b:14:82:
51:47:81:f4:6a:5e:73:ee:25:50:bd:73:78:4b:02:f6:0a:2d:
93:08:38:a3:de:74:41:09:63:00:bb:d5:93:55:33:7d:e4:80:
7f:f0:60:eb:60:01:e5:b6:96:21:58:0d:2e:56:62:c9:63:c0:
9f:4a:03:bd:94:08:8d:26:28:61:a8:26:91:a9:19:3e:70:ed:
2c:71:36:e8:16:1a:69:8c:72:24:82:f8:24:49:04:74:7e:f5:
aa:a4:81:7a:9e:ad:72:ba:2c:fe:e3:9c:c2:f6:43:63:73:7f:
bc:09:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org