Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206729.roa
File: AS206729.roa (raw, json)
Hash identifier: czG2Y9A4ggjPXfoRi+kVtnLDojqohAdSHUn2jdD0jg0=
Subject key identifier: 3A:68:38:5B:D3:CD:63:6E:0A:78:73:3A:3C:0F:8D:BE:20:19:D1:81
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 240DA2E241C7434E6F4B4509401322F2B62ADC20
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206729.roa
Signing time: Wed 10 Jan 2024 08:07:39 +0000
ROA not before: Wed 10 Jan 2024 08:02:39 +0000
ROA not after: Wed 08 Jan 2025 08:07:39 +0000
asID: 206729
IP address blocks: 2a0f:9400:6907::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Feb 2024 04:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0d:a2:e2:41:c7:43:4e:6f:4b:45:09:40:13:22:f2:b6:2a:dc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jan 10 08:02:39 2024 GMT
Not After : Jan 8 08:07:39 2025 GMT
Subject: CN=3A68385BD3CD636E0A78733A3C0F8DBE2019D181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:0b:1a:44:b0:65:e8:4f:76:9f:97:12:d2:
26:41:5a:c9:f0:4b:c6:79:ff:42:ca:a2:30:7d:06:
90:64:e4:15:46:6a:b5:a0:58:c4:d8:5d:2d:6d:57:
49:78:ba:9d:67:c5:6f:97:f2:c9:5c:15:8e:7a:21:
c9:9e:30:fe:65:78:13:b1:66:5b:ff:ba:83:ff:c4:
9f:bf:2c:10:6f:03:e4:36:df:ed:e3:a9:1d:73:bf:
e5:5b:72:6d:86:b1:62:30:56:9f:e3:6c:44:b2:5f:
97:ae:20:bc:74:cb:89:15:88:71:ee:94:ad:f8:0d:
74:a3:db:5e:7b:a5:68:08:ee:54:2b:35:1e:80:0a:
bf:94:8d:37:ac:3c:9f:6b:97:52:40:ef:3b:f3:18:
a9:6e:84:a9:93:23:5a:81:60:da:8a:ab:ae:19:51:
40:88:fb:8b:c8:09:63:a6:33:ea:eb:92:a1:c7:96:
4b:b3:2b:3e:88:1a:a4:da:78:07:82:11:16:94:7e:
e7:f6:b6:dc:e2:c7:5b:26:25:5a:10:2c:56:fa:fc:
7b:ac:6b:48:b7:5f:ba:70:06:30:0f:59:1a:5a:5f:
a1:2d:19:55:ea:ea:a3:a5:19:a1:24:cb:57:e9:f9:
a4:98:01:bf:b2:a0:db:56:4a:3a:81:b2:20:41:04:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:68:38:5B:D3:CD:63:6E:0A:78:73:3A:3C:0F:8D:BE:20:19:D1:81
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6907::/48
Signature Algorithm: sha256WithRSAEncryption
55:88:e7:34:fc:67:ca:ab:cc:f3:ae:1e:cd:28:cc:81:08:de:
0c:57:bc:9c:3c:ba:d1:ae:85:cb:ea:dc:df:31:07:b2:10:96:
dc:4c:89:13:14:e3:91:56:62:6e:f9:b9:66:6b:40:22:01:84:
39:69:1f:ee:9a:06:fd:14:5f:8f:c5:2b:b3:0c:fc:2a:50:00:
0c:1b:4b:10:4e:51:39:d2:5a:4e:22:28:4e:7d:34:93:af:59:
e1:c2:5b:ed:6f:6b:f8:6e:05:e4:40:c8:72:f9:13:c4:93:07:
0c:9e:25:db:7f:7d:9d:d0:05:18:d5:bd:c7:96:af:a9:67:2b:
08:8a:ef:f3:9e:38:1b:03:9e:e9:46:63:79:9f:6b:04:7a:04:
61:8f:b6:56:3d:d2:db:c5:d1:e1:11:ca:cf:8a:9b:3b:ca:57:
66:f1:47:90:61:52:0e:b7:f9:79:96:49:d3:8a:3c:d8:bc:94:
a3:d9:66:cb:c5:68:45:44:6b:3a:ac:78:21:27:f3:04:73:c6:
68:04:16:c7:67:64:09:0d:60:8b:0d:f8:1e:12:2e:c9:d3:2f:
50:06:f4:f9:95:a7:4f:5f:c8:b6:42:d5:75:f4:f7:d9:02:37:
dc:bd:cd:8d:41:78:0d:82:66:83:f5:4a:41:c9:e2:ef:3f:cb:
93:a4:64:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org