Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209940.roa
File: AS209940.roa (raw, json)
Hash identifier: W8ADf2hBJmE7xgwrCxO62BhTXG+CPIGKTqtyoNjRmLg=
Subject key identifier: 9B:3B:B3:D0:B8:FF:9C:FD:5C:B7:D3:EF:08:20:B7:52:16:66:3B:A9
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1386CB3679FD0CE055A2F8C5BF72EF5855D598D1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209940.roa
Signing time: Tue 13 Sep 2022 01:20:24 +0000
ROA not before: Tue 13 Sep 2022 01:15:24 +0000
ROA not after: Tue 12 Sep 2023 01:20:24 +0000
asID: 209940
IP address blocks: 2a0f:9400:738d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:86:cb:36:79:fd:0c:e0:55:a2:f8:c5:bf:72:ef:58:55:d5:98:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:24 2022 GMT
Not After : Sep 12 01:20:24 2023 GMT
Subject: CN=9B3BB3D0B8FF9CFD5CB7D3EF0820B75216663BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:5d:79:29:d8:3a:5f:92:e6:3d:82:df:a5:
ce:e7:52:b8:ce:0a:86:88:97:88:a0:f2:21:cb:65:
66:05:ce:c5:bb:5c:62:c2:63:82:aa:06:33:f9:fe:
ec:e0:c2:18:70:cc:08:d4:ac:01:ea:69:89:49:34:
f5:82:90:48:92:59:0d:3a:65:78:12:50:a0:a8:60:
6f:17:fe:cb:d9:84:20:7b:7d:7c:eb:f7:41:7c:89:
17:bc:e2:b6:11:05:6e:ac:b4:de:74:28:3d:5a:f4:
91:e8:28:e1:9b:37:7f:9b:35:25:a0:98:51:ae:1a:
7f:f8:2b:ea:0c:32:11:18:97:f5:25:27:59:4c:96:
b1:e7:33:ef:67:2d:c0:ad:2d:8a:74:6a:42:1d:a7:
ae:da:a0:d0:34:6b:53:07:db:cb:3d:40:e2:8b:bb:
4f:6e:0f:85:ee:93:b9:97:11:32:b0:fe:03:19:f7:
8e:03:27:96:6b:93:12:2f:ff:46:ca:39:a6:8d:f4:
d1:2e:7d:a3:4d:75:ac:ff:c4:9f:0c:c7:97:a2:01:
46:69:6b:72:fc:30:c7:ee:91:1a:20:30:d8:6b:1b:
a6:06:e0:a3:93:84:4c:be:70:23:0e:04:34:95:3c:
63:21:a3:87:3e:0f:4d:16:6e:37:02:61:cc:f8:e7:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3B:B3:D0:B8:FF:9C:FD:5C:B7:D3:EF:08:20:B7:52:16:66:3B:A9
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209940.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:738d::/48
Signature Algorithm: sha256WithRSAEncryption
d5:d5:c9:8b:62:17:24:c5:3c:c9:78:5d:40:e4:87:95:4c:bc:
16:0d:37:12:88:87:c9:41:8d:4f:c4:c3:67:83:85:15:db:94:
25:aa:79:84:a5:c0:69:76:3c:b7:8a:75:18:1a:06:8b:51:26:
e2:68:4b:8b:b0:36:64:41:82:ee:0f:75:82:a0:b3:17:b0:1b:
bb:a2:f0:9c:2e:05:2f:a2:38:e7:22:ac:99:89:01:a1:8f:c6:
22:55:1e:0c:24:97:0e:fb:2f:72:22:1a:6a:94:40:42:cf:5b:
06:59:29:c3:13:7c:22:ea:04:6b:f7:04:9e:11:8b:8e:7b:a7:
fd:7a:b4:b3:6c:ba:bd:8e:a4:87:32:46:7f:c8:4c:f7:12:ae:
f2:e5:f2:f8:01:4c:67:a0:cd:6f:cc:19:6e:68:57:43:39:21:
12:0e:b3:4b:58:05:c0:0e:e1:1f:94:2c:a0:d2:f6:15:2f:2c:
b3:b5:16:09:64:7a:29:ff:4e:33:8b:39:91:9d:c8:44:f6:10:
0f:ab:b1:fa:b7:cd:2c:78:b8:51:3c:f2:93:f1:63:7d:de:c5:
ee:f9:dd:56:6c:df:39:1d:84:5f:d5:dd:1e:e2:f8:3e:7a:86:
3a:50:60:e5:3f:2e:5d:32:c4:80:d0:a8:64:78:99:c9:e3:b9:
d5:2e:1c:d7
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUE4bLNnn9DOBVovjFv3LvWFXVmNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMjA5MTMwMTE1MjRaFw0yMzA5MTIwMTIwMjRaMDMxMTAvBgNV
BAMTKDlCM0JCM0QwQjhGRjlDRkQ1Q0I3RDNFRjA4MjBCNzUyMTY2NjNCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSXl15Kdg6X5LmPYLfpc7nUrjO
CoaIl4ig8iHLZWYFzsW7XGLCY4KqBjP5/uzgwhhwzAjUrAHqaYlJNPWCkEiSWQ06
ZXgSUKCoYG8X/svZhCB7fXzr90F8iRe84rYRBW6stN50KD1a9JHoKOGbN3+bNSWg
mFGuGn/4K+oMMhEYl/UlJ1lMlrHnM+9nLcCtLYp0akIdp67aoNA0a1MH28s9QOKL
u09uD4Xuk7mXETKw/gMZ944DJ5ZrkxIv/0bKOaaN9NEufaNNdaz/xJ8Mx5eiAUZp
a3L8MMfukRogMNhrG6YG4KOThEy+cCMOBDSVPGMho4c+D00WbjcCYcz457PZAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUmzuz0Lj/nP1ct9PvCCC3UhZmO6kwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwOTk0MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABzjTANBgkqhkiG9w0BAQsFAAOC
AQEA1dXJi2IXJMU8yXhdQOSHlUy8Fg03EoiHyUGNT8TDZ4OFFduUJap5hKXAaXY8
t4p1GBoGi1Em4mhLi7A2ZEGC7g91gqCzF7Abu6LwnC4FL6I45yKsmYkBoY/GIlUe
DCSXDvsvciIaapRAQs9bBlkpwxN8IuoEa/cEnhGLjnun/Xq0s2y6vY6khzJGf8hM
9xKu8uXy+AFMZ6DNb8wZbmhXQzkhEg6zS1gFwA7hH5QsoNL2FS8ss7UWCWR6Kf9O
M4s5kZ3IRPYQD6ux+rfNLHi4UTzyk/Fjfd7F7vndVmzfOR2EX9XdHuL4PnqGOlBg
5T8uXTLEgNCoZHiZyeO51S4c1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org