Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210337.roa
File: AS210337.roa (raw, json)
Hash identifier: u6lYmEeftYsJV7a576NTgqLSjSXxw6aV8c6LMbPTbN0=
Subject key identifier: 91:A8:F0:E6:5C:64:AC:A9:EA:D1:D7:B3:1E:B2:13:1A:74:E9:04:65
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6CB8ACE483D8633DA9E2F56C8E68122040F7CD82
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210337.roa
Signing time: Sun 06 Nov 2022 16:34:10 +0000
ROA not before: Sun 06 Nov 2022 16:29:10 +0000
ROA not after: Sun 05 Nov 2023 16:34:10 +0000
asID: 210337
IP address blocks: 2a0f:9400:6105::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b8:ac:e4:83:d8:63:3d:a9:e2:f5:6c:8e:68:12:20:40:f7:cd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 6 16:29:10 2022 GMT
Not After : Nov 5 16:34:10 2023 GMT
Subject: CN=91A8F0E65C64ACA9EAD1D7B31EB2131A74E90465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:b3:46:3e:50:a4:28:88:5d:f8:ff:a5:73:
b8:a1:a2:c3:d8:6d:b3:f1:ea:50:6b:0d:18:95:b0:
3c:18:68:7a:2d:ed:cb:ba:bf:ea:2e:56:34:91:29:
20:9c:46:b6:ba:92:61:c9:37:4a:71:25:7a:7c:c7:
b2:47:7a:e0:9b:8d:ce:a8:82:c3:1e:b9:ef:1e:a3:
57:18:84:0c:6f:c7:b5:84:04:01:95:6d:43:02:f7:
be:45:e5:13:db:4f:4f:54:91:d1:7a:97:fa:b5:6f:
5e:54:37:f1:53:33:65:40:14:7d:49:54:cc:ed:5a:
87:97:0e:96:d4:be:d9:8b:8c:fd:f8:18:11:56:92:
32:d4:aa:f2:82:5d:16:a0:b5:27:48:f5:2e:3a:cb:
1e:4f:55:10:e5:90:13:09:08:26:09:29:3d:73:d8:
82:63:aa:b9:85:19:49:86:56:d8:8a:b9:be:cb:f9:
3d:52:8b:33:d2:f6:78:1d:19:54:e1:c1:e9:5a:55:
79:72:1f:5c:49:4e:ee:07:e9:28:72:56:48:a6:0f:
67:95:05:9a:ce:e1:a3:b6:11:c5:72:4a:69:33:a4:
b1:8f:f9:b1:8a:7a:47:ae:6e:64:c1:f3:88:04:e7:
d0:18:da:21:2a:dd:a3:20:db:5a:46:34:e8:97:2e:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A8:F0:E6:5C:64:AC:A9:EA:D1:D7:B3:1E:B2:13:1A:74:E9:04:65
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6105::/48
Signature Algorithm: sha256WithRSAEncryption
bd:9d:83:52:37:99:cb:c2:9f:1f:d7:dd:27:17:4f:2a:fc:95:
05:30:a3:3a:7d:b4:cd:09:f0:c5:95:84:36:95:1e:19:c2:fd:
62:75:b1:4d:9b:b3:1b:d3:69:a9:3f:5c:53:eb:9b:f0:7f:aa:
3e:1a:13:7d:bc:0b:54:76:5c:41:6c:4a:b4:44:b2:bf:8a:5b:
c4:90:25:81:cc:d5:f6:c5:bb:92:0a:2e:4b:eb:0d:68:f0:b5:
50:80:2a:1f:ac:49:23:4d:9e:be:96:3d:fc:e8:ca:57:80:95:
4e:ea:62:b3:f5:70:7b:7d:7b:e1:82:a2:5b:ba:1b:4e:6c:58:
a6:5a:73:46:25:24:52:0f:69:92:e3:c7:3c:4b:1f:e0:4f:0c:
2d:46:8c:b0:e4:46:18:55:d7:f1:ab:32:d6:82:ee:a7:78:6d:
0c:ca:60:13:fc:d4:31:ad:d3:0f:7e:26:1c:50:61:a9:d1:36:
7a:89:ce:e6:95:5f:86:fc:1c:10:36:02:c0:a8:93:d1:62:bf:
e6:f0:fd:57:fa:0b:a5:b4:e3:9f:15:d5:ff:21:3d:9a:96:e8:
57:e3:5a:9c:27:09:a0:18:96:d5:ce:61:43:6b:df:d3:30:d4:
33:18:cc:10:c7:f2:f4:c2:97:28:c3:cc:31:77:96:87:61:9d:
18:7b:36:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org