Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207756.roa
File: AS207756.roa (raw, json)
Hash identifier: JALo4YBIIlVECV5iHyXBft/uzTlneep1JYtD/W2LlnE=
Subject key identifier: 0D:CE:DC:58:97:BD:2F:4C:04:6A:16:B7:33:E2:76:E5:DE:FC:04:5B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 500C7E2669A223DDB00CDEC2D9CF4CEF630DF855
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207756.roa
Signing time: Tue 16 Jul 2024 02:42:23 +0000
ROA not before: Tue 16 Jul 2024 02:37:23 +0000
ROA not after: Tue 15 Jul 2025 02:42:23 +0000
asID: 207756
IP address blocks: 2a0f:9400:8008::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 10 Aug 2024 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0c:7e:26:69:a2:23:dd:b0:0c:de:c2:d9:cf:4c:ef:63:0d:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:23 2024 GMT
Not After : Jul 15 02:42:23 2025 GMT
Subject: CN=0DCEDC5897BD2F4C046A16B733E276E5DEFC045B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:ab:60:ec:2e:81:a5:75:ba:49:39:97:c9:
33:ba:1c:48:86:36:5b:a9:07:fc:02:68:af:3e:09:
15:dd:77:36:2e:65:e8:94:2d:83:b9:f6:58:e4:ef:
01:c2:47:21:96:4d:26:1c:94:6b:cc:10:05:ad:cb:
bb:91:d4:c6:99:72:54:2e:63:c4:21:1b:eb:a7:fa:
f3:a3:fa:84:c2:41:c1:4c:a5:7f:58:ca:95:e0:70:
f8:ba:a5:00:db:0a:10:01:38:92:c6:77:62:a4:03:
c5:5c:50:cd:39:b7:38:f9:de:8d:ef:e8:5e:a5:bc:
f6:b7:4e:58:4d:84:97:7b:db:f4:a0:37:28:31:e9:
62:ac:78:89:0c:7c:12:e4:b0:10:0e:37:b0:df:42:
8b:c7:7d:3f:8f:dc:cb:1a:28:5c:12:f8:91:31:2f:
26:33:85:d7:58:01:60:b0:9d:87:3d:38:ea:55:00:
fa:44:62:78:5e:5a:eb:5a:6e:ba:c3:b9:e1:88:bb:
fa:d2:0f:05:87:3f:7a:c5:0e:88:22:c4:df:1f:4f:
df:fe:ed:73:4c:d0:de:ce:94:49:e2:25:cb:16:5b:
45:c4:bf:67:8f:87:f7:dd:0b:96:7f:ef:87:cf:e9:
17:f7:73:4d:80:ff:a4:04:a9:0a:7a:9b:74:2c:11:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:DC:58:97:BD:2F:4C:04:6A:16:B7:33:E2:76:E5:DE:FC:04:5B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207756.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8008::/48
Signature Algorithm: sha256WithRSAEncryption
5f:70:50:8f:d8:e9:ce:64:e4:67:98:0b:03:73:23:4b:39:4b:
90:13:cd:a2:d3:a1:7e:df:db:2c:58:46:b8:fa:ee:af:b8:c7:
64:33:ae:60:c5:95:e5:c1:72:aa:89:2e:ba:06:b8:4c:aa:d9:
10:5d:b8:ec:85:80:a1:37:44:a1:e1:2f:9d:96:fb:76:ed:fc:
51:71:59:bd:dd:fd:a7:d8:02:52:3f:09:50:49:9e:24:eb:71:
56:7c:df:1f:94:ba:8a:55:cd:97:c7:97:6f:53:ea:d1:24:55:
30:1d:ca:77:5c:1d:1b:20:af:e6:93:25:fa:e2:7b:7d:a4:e7:
65:16:fb:fd:1f:70:ff:4b:58:ff:c7:75:b9:05:91:c0:d1:20:
ca:9b:f5:be:e7:b8:0f:6d:51:af:b5:1d:0c:9b:be:7f:57:6d:
54:bf:4d:97:f0:9d:1b:12:9c:5d:32:d5:82:f5:12:bd:b1:93:
03:1f:39:8e:e5:5e:9a:b5:65:31:f1:7f:2e:6b:ef:36:a4:3e:
e0:60:92:7c:bc:1c:60:a8:c7:30:af:33:5a:d9:63:7f:63:af:
5f:c4:89:c1:0c:37:55:07:5b:4f:d6:e4:e8:c9:c8:b6:23:f0:
44:55:01:66:8a:b9:0a:92:0b:d8:49:88:ff:27:ec:57:07:60:
36:45:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 05:08:21 2024 by rpki-client on console-fra.rpki-client.org