Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209101.roa
File: AS209101.roa (raw, json)
Hash identifier: L+Y+GpgiH1q7lRlBY0e+nf+wFnHvnk77GGJXTnTCT4s=
Subject key identifier: 4C:06:05:03:CC:F1:68:98:92:91:20:75:E8:02:2E:30:0F:47:AE:A3
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1EB44C7632DB98F79793F73BB682DD8FD23B03AF
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209101.roa
Signing time: Fri 30 Dec 2022 21:02:59 +0000
ROA not before: Fri 30 Dec 2022 20:57:59 +0000
ROA not after: Fri 29 Dec 2023 21:02:59 +0000
asID: 209101
IP address blocks: 2a0f:9400:7340::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b4:4c:76:32:db:98:f7:97:93:f7:3b:b6:82:dd:8f:d2:3b:03:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 30 20:57:59 2022 GMT
Not After : Dec 29 21:02:59 2023 GMT
Subject: CN=4C060503CCF1689892912075E8022E300F47AEA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:8d:99:10:cd:26:9a:09:d7:68:ee:28:98:
6c:27:33:2d:a0:66:f2:73:56:68:df:38:93:21:18:
0d:11:73:9e:c7:86:e5:7c:fa:42:71:e9:49:48:85:
b0:34:17:85:e4:e6:86:5f:40:07:0a:23:01:e1:04:
53:ac:3e:c0:0a:5d:07:2d:6a:4f:83:f4:96:1a:b1:
51:dc:f7:d6:87:9c:74:d8:c5:a9:a9:08:69:b1:2c:
7f:a2:95:a9:6a:0e:e8:7b:2f:6a:43:89:ac:bc:e9:
29:23:0e:fb:f0:92:cb:bf:1e:d9:f6:b6:19:22:71:
12:13:dd:2c:bd:e2:14:77:3d:65:0a:d5:0f:b4:b1:
81:2f:af:bc:c8:d9:c2:d9:58:27:d9:30:63:3e:f0:
37:e3:f3:8f:da:7b:c0:7f:68:36:da:ab:1f:62:c2:
6a:b2:18:7a:72:f6:6d:3f:42:88:38:e4:a2:58:14:
88:cf:63:09:bc:cd:bf:ef:bf:36:5a:53:b7:f1:67:
03:20:1f:81:3d:9a:79:bb:77:fc:84:c3:ed:69:6a:
63:09:09:2f:56:72:d4:ea:fe:71:b7:e6:88:da:a6:
b3:06:1c:76:1b:a5:6d:d6:3c:6e:ea:08:53:d6:0f:
08:89:ed:4b:fd:e5:d2:d6:14:25:bd:9a:36:8e:01:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:06:05:03:CC:F1:68:98:92:91:20:75:E8:02:2E:30:0F:47:AE:A3
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209101.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7340::/44
Signature Algorithm: sha256WithRSAEncryption
0a:5d:81:e1:89:7f:a9:9b:32:e9:96:e7:c1:ec:15:17:33:3c:
f9:2a:2e:a0:fc:32:c2:95:e6:1d:8f:71:c9:1f:f7:bb:9b:b9:
b7:0e:d0:5a:b7:4e:f0:36:e7:ef:4b:14:9d:0b:08:3e:1f:14:
7c:07:6b:b2:5d:17:61:c3:7d:68:7d:0f:a9:08:a5:f7:91:06:
9e:b9:4f:b7:22:45:35:dc:78:7d:5b:ad:ee:2f:79:7f:9c:fc:
4d:69:36:6e:53:c3:32:36:71:5d:2b:0f:31:65:58:0a:cb:8c:
d4:b0:a9:66:47:8e:fd:b0:9e:dc:cc:c2:80:ae:68:4d:ce:11:
ba:f3:12:4b:fd:9c:5e:7c:62:df:1a:5d:6f:bc:66:a0:37:91:
83:89:18:07:e1:0e:09:91:0f:d6:3a:df:f5:72:a0:0f:62:14:
07:3b:2a:73:ab:5f:d1:d5:6e:cc:c3:31:af:9a:11:97:66:dd:
71:15:2a:e3:09:1b:0a:64:c0:21:3d:ca:67:14:b3:ca:ae:84:
40:c4:eb:fe:19:85:77:2c:d8:00:4a:d0:ae:1b:f4:22:5b:03:
68:71:52:d1:11:42:2e:76:b1:56:ff:fc:ea:fc:51:1d:a5:94:
65:d8:00:70:00:d0:1e:27:15:e7:bf:10:95:37:c5:03:ca:16:
5f:31:0e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org