Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210537.roa
File: AS210537.roa (raw, json)
Hash identifier: Zmcpxa27by2dcEWjS/qiIhMJFh8thNjGdJpqYSlGNPk=
Subject key identifier: 20:1B:14:94:7F:5E:BE:5C:80:EE:63:A2:A7:BB:98:E1:97:56:3F:A2
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4A3F2BBD06A55F41672C3B3E575357CEB5F1BBCB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210537.roa
Signing time: Tue 13 Sep 2022 01:20:24 +0000
ROA not before: Tue 13 Sep 2022 01:15:24 +0000
ROA not after: Tue 12 Sep 2023 01:20:24 +0000
asID: 210537
IP address blocks: 2a0f:9400:7385::/48 maxlen: 48
2a0f:9400:738b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:3f:2b:bd:06:a5:5f:41:67:2c:3b:3e:57:53:57:ce:b5:f1:bb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:24 2022 GMT
Not After : Sep 12 01:20:24 2023 GMT
Subject: CN=201B14947F5EBE5C80EE63A2A7BB98E197563FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:99:f5:c6:1d:c0:8f:e8:6a:3d:96:02:6f:
cc:25:f7:91:0d:40:08:72:84:b7:45:96:72:4e:6a:
4b:9d:db:5c:75:73:a5:03:4e:d8:01:7b:55:a2:0f:
ee:39:f8:d6:c0:b6:cd:27:0f:69:96:2e:ee:69:5b:
16:6e:14:5d:d6:c3:4d:e9:1b:95:34:08:d0:10:6e:
bc:21:c7:24:2f:cd:8e:97:c7:c7:9d:4f:09:a9:4d:
1a:0c:ab:23:d8:85:7b:c2:5d:6e:46:ff:06:5a:05:
97:b2:b1:a7:c4:3e:22:ad:83:28:51:08:5b:e6:70:
eb:af:d4:b6:77:49:ba:c1:51:43:f9:75:79:41:33:
4a:4c:91:69:9d:66:10:3d:db:b0:e3:1a:2d:81:f6:
59:be:a9:8a:66:53:6a:e2:0c:1a:ad:9a:c4:41:c8:
8f:8b:34:af:0b:c0:b2:45:ac:68:a4:d7:cc:da:3c:
dc:41:3a:83:fd:1d:b6:e6:86:d0:0b:9d:5b:7e:76:
4f:ef:41:f8:7c:0f:fd:7f:9d:9e:d3:7d:75:9b:34:
39:71:be:f2:38:34:d4:ab:21:1e:73:2a:f5:da:c3:
92:19:7a:74:5f:d1:c2:75:09:ca:03:8a:68:84:df:
58:fc:16:79:7e:08:e0:8f:1d:be:9f:dd:ab:cf:f9:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1B:14:94:7F:5E:BE:5C:80:EE:63:A2:A7:BB:98:E1:97:56:3F:A2
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7385::/48
2a0f:9400:738b::/48
Signature Algorithm: sha256WithRSAEncryption
0c:99:95:4e:49:3d:25:5d:d6:58:9f:a3:64:ae:ee:15:62:fa:
2b:7f:31:96:d7:87:02:4d:2f:15:f1:00:56:6b:f9:84:b5:5e:
ef:ff:fd:29:74:fa:a6:28:6b:7e:49:51:3d:30:25:23:eb:e4:
4e:0f:e0:14:1f:79:34:36:05:db:ee:0e:c2:31:b6:dd:46:6e:
3c:de:99:2a:28:99:0c:ab:f3:e7:cd:17:29:1d:5e:73:35:93:
00:83:6e:2a:e7:72:08:84:9f:de:a2:e2:c5:b1:1f:3d:53:7f:
40:80:4e:a9:11:cb:67:e9:c8:29:87:23:4b:4e:77:50:22:d5:
03:d2:b8:89:6d:0e:6c:5c:9a:28:43:87:11:d7:a9:fe:94:6d:
7e:8c:c3:24:f6:58:a3:c3:36:5b:e3:39:1d:56:96:97:f0:9c:
d9:63:d3:bf:9d:84:41:96:c3:6c:6e:b6:ae:ca:1e:a3:49:d2:
f1:b7:0d:0a:ef:b7:17:72:84:70:12:d9:f7:65:86:c4:cd:67:
45:5b:27:56:e4:21:f7:e2:bc:19:92:ef:fa:14:95:72:2f:1d:
7a:b5:46:59:27:a9:9e:b7:ea:db:0d:44:f7:83:f6:03:32:b1:
a8:74:66:90:3d:6f:ee:83:c3:c9:80:65:89:b7:0a:9f:78:71:
f0:08:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org