Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207328.roa
File: AS207328.roa (raw, json)
Hash identifier: PkycsStRk3GBteupU1ZHDDSktSRTpuCmSOEHVS9901M=
Subject key identifier: A8:1E:56:1E:C9:B5:99:04:5D:7D:91:85:80:E3:C2:A7:03:07:5C:91
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1BF0CA77D680F37CCE453FC5C0F2F817BF946E0F
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207328.roa
Signing time: Fri 26 Jan 2024 15:14:23 +0000
ROA not before: Fri 26 Jan 2024 15:09:23 +0000
ROA not after: Fri 24 Jan 2025 15:14:23 +0000
asID: 207328
IP address blocks: 2a0f:9400:8012::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Apr 2024 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:f0:ca:77:d6:80:f3:7c:ce:45:3f:c5:c0:f2:f8:17:bf:94:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jan 26 15:09:23 2024 GMT
Not After : Jan 24 15:14:23 2025 GMT
Subject: CN=A81E561EC9B599045D7D918580E3C2A703075C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:7e:31:e8:34:80:bf:0d:91:13:b3:b8:ef:
14:c0:85:d9:c2:f0:f9:24:f1:d3:5e:9d:69:68:8c:
50:12:0f:b3:b8:57:cd:b4:2c:fd:00:36:62:1c:80:
f3:9a:e0:8f:88:bf:2a:47:c4:3e:eb:ed:09:49:53:
1d:13:ea:91:b5:91:ab:f9:5c:3d:c8:25:fe:c3:b8:
5a:70:b7:36:8d:91:c1:55:cc:5a:f7:9c:3d:7e:32:
5a:de:f9:3e:b9:b0:d4:bc:59:8e:5d:78:2f:c3:98:
7c:76:35:b1:59:35:d2:25:22:f3:9d:69:be:68:69:
d4:9b:cb:6e:72:be:70:87:cf:08:0f:b7:bf:ce:86:
63:92:69:e7:ea:2b:1b:53:3d:03:5e:17:43:ad:61:
f7:de:d8:a0:4f:ee:59:86:cf:3f:e3:88:1d:5e:8f:
fb:d1:a2:62:f0:aa:8f:99:ce:f2:3e:99:b7:2f:6c:
9b:48:04:a0:96:99:cb:41:06:19:03:70:a1:d2:3e:
4a:29:d2:28:03:57:95:60:20:df:04:a3:6d:4b:76:
22:88:40:51:a4:44:58:d3:fc:a6:cc:91:7e:ba:50:
af:20:16:c0:18:b8:bd:8b:1b:94:3e:ef:ed:7b:58:
b2:3c:cd:ac:75:b9:27:99:8e:4c:e3:bd:f8:6a:67:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1E:56:1E:C9:B5:99:04:5D:7D:91:85:80:E3:C2:A7:03:07:5C:91
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8012::/48
Signature Algorithm: sha256WithRSAEncryption
d3:1d:fd:e2:92:15:ba:95:9d:0c:88:30:77:a8:fe:5f:3a:f4:
c1:ac:bd:51:f5:31:3d:f7:90:95:38:b8:7c:ee:ad:33:f4:8a:
28:9f:97:01:46:ec:38:22:ea:10:3a:a7:38:eb:ff:fd:03:be:
e7:a0:42:fb:1f:c0:c1:04:6f:c9:1d:f9:c3:0c:f3:c6:c0:7e:
ac:e1:a1:fe:56:05:31:db:6a:fd:33:da:72:35:54:34:c9:08:
1e:38:de:bc:aa:b9:4c:15:70:bb:64:e1:9a:a4:45:06:25:d8:
33:f1:d7:c4:9a:d8:d7:a0:ce:9a:77:a0:d0:27:4f:1f:25:3b:
0e:b6:0f:70:d3:54:bf:eb:bf:7b:f3:24:84:bf:1c:10:24:31:
ff:2d:35:16:64:c0:17:57:77:89:6d:bc:a6:a4:58:3b:00:30:
92:ef:9c:21:b1:dd:d5:7b:93:57:a9:7d:dd:e3:2d:92:62:a6:
0f:e7:6c:b2:22:de:20:cb:bf:22:a5:d6:0b:b4:12:21:48:83:
a8:56:cd:e4:b8:47:49:56:b5:5b:17:a2:f6:4d:e0:72:c3:93:
fa:14:20:6c:ea:3c:45:df:9a:a5:de:88:c8:4d:dc:85:58:40:
58:41:9c:94:9b:6f:ce:3c:a7:28:19:08:46:f6:7d:41:e8:4c:
55:d4:27:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org