Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210632.roa
File: AS210632.roa (raw, json)
Hash identifier: kHTdbmh3OBKgkFAqEziFrRdz7rPPUARg2s80uJoKUBc=
Subject key identifier: 96:FB:B4:00:33:70:D9:F4:35:41:2C:21:3B:26:14:3A:13:FE:72:BD
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3D8F5D92A618DEFB6607942B044DD604AC46765C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210632.roa
Signing time: Tue 13 Sep 2022 01:20:26 +0000
ROA not before: Tue 13 Sep 2022 01:15:26 +0000
ROA not after: Tue 12 Sep 2023 01:20:26 +0000
asID: 210632
IP address blocks: 2a0f:9400:7729::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8f:5d:92:a6:18:de:fb:66:07:94:2b:04:4d:d6:04:ac:46:76:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:26 2022 GMT
Not After : Sep 12 01:20:26 2023 GMT
Subject: CN=96FBB4003370D9F435412C213B26143A13FE72BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e0:e9:d5:00:87:82:f8:72:bc:ed:09:14:c9:
80:f8:6f:1e:23:e9:08:2c:1e:5c:a6:a1:6c:64:00:
5a:12:a4:95:50:28:7c:cd:ac:e9:34:46:c5:ea:81:
9f:57:18:1a:77:a5:84:58:c3:a4:4e:10:e8:78:53:
82:b6:0f:ae:45:1f:2b:00:9f:27:75:a1:3c:c9:e5:
57:6c:df:c1:57:f2:0c:7a:fd:27:b7:8c:21:4a:45:
79:3b:64:07:8c:7e:d0:52:6e:a4:02:c3:71:44:9d:
96:b0:fe:a3:67:07:c5:74:da:71:69:4d:c5:23:b9:
88:00:28:59:6c:40:e9:05:23:0d:67:1f:c1:dd:5e:
c3:80:b0:58:a3:6c:56:2f:8e:d8:9a:dd:b7:a2:42:
eb:77:40:42:00:d3:b4:db:f7:6b:37:0f:0b:79:01:
08:a8:7a:75:29:d2:57:34:49:35:23:ec:0b:f0:38:
14:42:ec:81:b0:59:10:79:03:88:5f:ee:05:97:77:
c6:b7:80:98:ba:ef:74:d8:69:c1:60:4f:02:e7:7c:
8f:d8:da:33:74:37:01:c2:ab:a0:87:29:b1:e6:1f:
5c:fd:86:0a:79:cb:16:28:00:85:70:b6:6d:36:97:
5f:63:23:9c:11:c0:41:26:eb:b1:cc:37:61:46:fa:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:B4:00:33:70:D9:F4:35:41:2C:21:3B:26:14:3A:13:FE:72:BD
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7729::/48
Signature Algorithm: sha256WithRSAEncryption
9f:05:ac:be:2d:1b:57:bf:0d:c0:c0:42:c5:3d:44:37:b0:91:
39:0a:8b:ce:da:ed:9e:17:be:ab:16:d7:df:b6:8b:b3:6b:a2:
92:f9:c8:3b:28:9b:6f:1c:b1:9b:71:63:dd:b5:40:6e:34:d8:
81:b7:db:a2:3d:71:d7:f4:7b:6b:d3:cf:9c:5f:c7:75:2d:57:
53:80:a9:e0:3f:1e:0e:cc:05:9b:28:32:5b:a4:e8:6c:f8:f5:
17:77:ae:d6:f4:95:d9:25:f0:ce:85:bc:41:f4:1c:82:6a:43:
bb:51:74:c7:f1:51:38:17:b0:bb:54:75:db:5e:2e:22:46:12:
1c:b8:67:18:af:4d:1a:14:2c:7b:fb:2d:f1:ed:2c:29:4c:c3:
a9:f3:d4:d8:14:78:7a:ff:76:f4:61:69:8f:32:4b:09:3a:0d:
16:03:9b:bd:00:26:3c:c1:a7:d1:3c:9e:fb:5a:d4:c6:5a:2b:
22:a8:85:09:b9:0a:eb:a0:7a:5c:d2:b7:ae:b9:e8:4b:78:d5:
e9:e1:83:a0:80:d2:cb:e8:08:c3:57:fd:fd:59:57:2f:cc:37:
07:67:cc:26:7b:02:9a:e0:93:50:37:9a:dc:2f:da:25:90:45:
df:42:15:67:42:d8:1c:c4:dd:62:b6:4e:9c:09:bc:e3:13:06:
31:5f:01:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org