Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211169.roa
File: AS211169.roa (raw, json)
Hash identifier: SS7t1I/LABl02wvXEQ7Qvt8Bz1K2S3n5bv4vw0t7xD4=
Subject key identifier: C6:7B:64:25:D6:8D:55:6D:00:22:D0:18:AD:C6:B0:D0:13:1F:F3:59
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 58A0B98A29B0E088698E092A701E2DD77DF8C8F4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211169.roa
Signing time: Tue 13 Sep 2022 01:20:26 +0000
ROA not before: Tue 13 Sep 2022 01:15:26 +0000
ROA not after: Tue 12 Sep 2023 01:20:26 +0000
asID: 211169
IP address blocks: 2a0f:9400:6120::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a0:b9:8a:29:b0:e0:88:69:8e:09:2a:70:1e:2d:d7:7d:f8:c8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:26 2022 GMT
Not After : Sep 12 01:20:26 2023 GMT
Subject: CN=C67B6425D68D556D0022D018ADC6B0D0131FF359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:40:7a:18:9d:b8:d0:9a:0d:fc:3e:f9:31:c1:
5a:57:e5:5b:c4:05:ae:2a:61:8f:a3:b2:0e:3e:50:
99:20:11:d6:34:70:6e:74:1c:ab:8a:3f:79:95:c6:
93:d6:a6:1b:5b:27:09:36:95:9f:42:86:c3:10:cf:
cf:f7:eb:22:48:2d:45:9b:be:89:6e:6f:fb:4e:46:
e8:2c:b7:cb:84:3a:99:67:7a:6b:8f:57:c6:46:83:
ee:62:f2:d4:f9:ef:78:d1:c5:51:28:82:23:eb:b0:
8e:7a:ca:3b:7b:93:c6:d1:af:05:de:03:05:90:af:
17:97:50:eb:37:dc:05:0f:cc:d9:60:41:91:53:83:
92:b3:86:e0:57:6e:9a:70:b0:11:b9:80:33:47:1a:
77:46:57:28:5e:d3:58:30:4c:25:72:6f:ed:e6:11:
e9:c7:24:b3:86:98:1d:50:65:16:4d:1a:62:ec:ca:
de:f4:0c:2b:c1:69:1b:be:a5:29:49:8c:f2:f8:88:
4d:e3:2b:ee:80:65:b4:ea:99:21:8e:6d:95:26:65:
90:4d:81:27:6a:af:8d:2d:f7:07:49:7a:ce:24:93:
ca:f3:4d:34:d3:b1:fa:68:f4:97:79:d9:5e:c5:3e:
37:74:1d:a8:73:d5:80:b2:f1:b9:c4:76:0f:64:18:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7B:64:25:D6:8D:55:6D:00:22:D0:18:AD:C6:B0:D0:13:1F:F3:59
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6120::/44
Signature Algorithm: sha256WithRSAEncryption
d1:91:f9:a5:7f:34:d0:0e:e4:78:2f:25:3d:6f:01:65:45:48:
60:30:6f:ae:d1:a4:37:fe:ab:0a:0c:a6:ec:01:31:12:81:50:
80:c7:0f:e1:55:a1:7a:79:16:97:c9:02:20:44:5a:4a:11:b6:
10:1d:e2:c3:64:00:14:61:8a:ae:98:4a:f9:32:ca:e5:fd:c4:
4b:02:8d:b0:8f:16:e5:71:d5:6e:5f:20:1f:56:35:c9:8d:d7:
a7:03:71:7b:9d:a9:03:97:ae:75:1c:fd:13:f5:0e:73:f6:cb:
d2:d0:d4:fb:dd:33:ca:98:03:56:65:a9:d6:7c:3b:2b:b7:79:
ad:1e:b0:05:e0:34:94:c0:e5:03:41:74:08:6b:ec:62:48:b5:
a7:4e:16:fa:1b:f5:52:01:bf:c3:55:02:44:f6:01:9c:d2:c5:
6b:4c:ab:61:59:4a:40:f7:6d:7d:25:93:1f:06:30:66:25:78:
34:5f:88:e3:55:f3:e1:10:e8:27:fd:a6:57:6f:a4:58:3e:1a:
ce:25:d5:2f:5c:08:8e:d3:4a:d9:da:6e:91:c0:f0:42:fd:6c:
2e:5c:82:de:ee:d0:07:0c:77:e1:f0:56:83:3e:11:7b:9e:c2:
d5:2f:9b:9b:59:e6:5e:26:b2:9d:a2:82:a6:71:be:e4:6e:6c:
09:00:fb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org