Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206981.roa
File: AS206981.roa (raw, json)
Hash identifier: l9IEZSsdCNRpsHzH3kpKeDpaPNh6e76nnTPQ88k/NV8=
Subject key identifier: 0E:3C:9C:F6:5E:D9:FF:D1:FD:CA:55:D2:E0:0E:94:6D:07:96:34:D2
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1D9442A24492012F0DA54EA2E9665E2A4195FAD1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206981.roa
Signing time: Tue 13 Sep 2022 01:20:23 +0000
ROA not before: Tue 13 Sep 2022 01:15:23 +0000
ROA not after: Tue 12 Sep 2023 01:20:23 +0000
asID: 206981
IP address blocks: 2a0f:9400:6300::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:94:42:a2:44:92:01:2f:0d:a5:4e:a2:e9:66:5e:2a:41:95:fa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:23 2022 GMT
Not After : Sep 12 01:20:23 2023 GMT
Subject: CN=0E3C9CF65ED9FFD1FDCA55D2E00E946D079634D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b6:1a:98:1f:40:f8:82:b5:38:4c:eb:03:ee:
14:9d:ab:c4:ef:87:e7:0f:9d:e9:3e:3c:77:cc:24:
f2:cd:8c:43:bb:32:21:87:a4:d5:1b:ea:2b:b3:1c:
ec:9f:12:d8:a4:05:25:9a:7e:79:36:cd:0d:4a:4c:
e1:d5:bd:c0:e8:98:80:5d:e6:5c:16:e7:ac:04:be:
76:7a:4b:83:b3:f2:b8:18:3c:4f:c0:55:52:72:6e:
dd:6a:cf:5a:d6:fc:05:62:d9:c8:f2:0f:3e:a7:37:
15:cf:66:12:88:71:cf:72:e7:1c:25:ae:e1:40:d7:
32:9a:8c:eb:8e:4f:22:19:cd:f4:3c:fd:51:d2:44:
ab:bd:84:64:dc:b4:a9:50:e8:95:6b:a8:bd:c8:5b:
68:5f:43:43:6e:88:b4:4a:30:45:63:3a:f3:56:28:
15:22:0f:24:2f:19:ec:e1:3b:4f:8c:97:a8:e4:6e:
43:70:06:0d:fd:64:ea:01:16:28:4b:66:6e:49:22:
2b:eb:28:42:a3:e5:f2:46:7e:b6:da:bc:81:54:44:
3e:b6:86:dd:a1:24:94:c6:34:db:52:a7:ba:c6:ce:
12:4f:32:ca:bf:64:65:a7:96:bf:27:3e:03:7c:6a:
c6:d8:50:49:52:d2:2b:9b:6c:39:b1:de:4d:8d:de:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3C:9C:F6:5E:D9:FF:D1:FD:CA:55:D2:E0:0E:94:6D:07:96:34:D2
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6300::/44
Signature Algorithm: sha256WithRSAEncryption
90:39:1d:6f:63:bb:85:23:8a:35:2a:41:11:9f:69:56:58:66:
ae:5b:76:c0:74:1e:f1:3a:7e:03:98:c9:a4:1c:5d:22:71:c5:
06:0e:f7:54:9b:37:4e:7b:f3:5d:76:f8:66:37:f0:fd:61:11:
0d:b4:e9:8e:91:33:31:db:15:81:fe:71:78:58:5a:a4:2d:98:
ef:38:ab:c9:dd:1e:44:35:28:96:6e:02:58:e9:a2:e3:f0:84:
fa:19:b1:5c:16:ed:84:c1:14:2d:d7:18:51:ea:23:fe:a2:21:
91:49:88:eb:2a:de:3c:e4:72:0d:b1:6c:7f:b2:7d:a0:3a:1d:
e6:62:e2:b0:9e:79:19:c1:52:e1:a7:a9:be:80:b6:8f:c8:b4:
13:77:a9:8d:09:9c:18:02:03:34:95:b3:13:79:85:52:76:47:
0c:61:18:2b:3b:b6:f0:e6:88:f5:9f:1c:73:53:12:1a:a6:09:
2e:11:6b:f0:01:af:66:a7:4c:24:b5:fd:1c:52:ae:94:53:19:
11:29:66:9e:45:88:94:1a:03:ba:93:5c:03:9c:7c:7b:6d:37:
de:3d:15:85:8c:9e:7c:15:78:3b:d2:2e:49:bf:24:28:90:19:
83:c2:82:02:18:55:b4:43:94:bb:bb:67:55:10:b3:5a:1a:db:
fe:95:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org