Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212995.roa
File: AS212995.roa (raw, json)
Hash identifier: awo+QltEdF7MLmJky2NlauW10SvdEyjuYDL1WGiCKGk=
Subject key identifier: D8:0E:60:9C:ED:18:86:A4:0A:86:81:35:A4:85:68:8A:41:6B:93:C2
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4D610B72D60E31971A82621F14C2655E0A835B6F
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212995.roa
Signing time: Thu 16 Dec 2021 03:26:34 +0000
ROA not before: Thu 16 Dec 2021 03:21:34 +0000
ROA not after: Thu 15 Dec 2022 03:26:34 +0000
asID: 212995
IP address blocks: 2a0f:9400:8021::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:61:0b:72:d6:0e:31:97:1a:82:62:1f:14:c2:65:5e:0a:83:5b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 16 03:21:34 2021 GMT
Not After : Dec 15 03:26:34 2022 GMT
Subject: CN=D80E609CED1886A40A868135A485688A416B93C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:71:e9:02:f3:bd:a4:53:12:6d:5d:11:ab:
42:56:25:b7:c9:85:f0:15:96:8d:7c:ab:d9:fa:c6:
8f:f3:7a:d9:e5:e3:f1:9a:52:63:fe:62:f3:b4:8d:
53:22:41:88:bd:dd:3f:e3:83:b5:be:17:e6:06:f2:
74:04:a5:87:cb:f6:93:22:ed:c6:c7:76:50:cd:e0:
32:4e:1e:e6:68:b3:13:72:3a:79:a0:c9:bc:75:8e:
7c:62:be:dc:60:35:ad:86:a7:2c:59:b5:be:e6:2d:
d8:a9:07:1d:60:c0:87:15:c1:df:d4:cf:32:cb:0b:
82:cd:40:ba:ab:9f:4d:e4:09:11:f4:4f:45:e5:94:
7c:f8:48:18:91:b8:18:16:8c:7b:b9:27:79:09:3d:
7a:cd:8e:b9:db:dc:8b:e2:c7:10:ba:b0:55:2f:1c:
49:a9:60:ce:7d:21:1d:88:b7:45:05:5a:49:1d:a9:
21:79:01:f3:88:14:d4:2f:78:74:69:e6:fe:78:15:
de:98:71:99:eb:73:b3:af:dd:c5:8f:dc:46:fc:29:
a1:c9:b8:12:29:46:49:4b:2f:9e:65:8e:11:ce:ae:
05:c5:ef:d1:e0:7b:3f:e7:78:f1:38:ba:5d:4b:06:
cb:8b:b4:39:d7:78:5b:ca:74:ac:29:df:9c:cc:10:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0E:60:9C:ED:18:86:A4:0A:86:81:35:A4:85:68:8A:41:6B:93:C2
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8021::/48
Signature Algorithm: sha256WithRSAEncryption
4d:5e:a2:5c:9a:85:e2:96:00:6d:33:a1:d1:48:29:e4:58:16:
45:00:74:9d:06:bb:41:45:d8:37:f7:d3:49:89:d3:cf:cc:e4:
01:89:aa:6b:bc:37:05:32:87:6e:37:ac:75:86:c2:01:4c:ce:
fd:42:1f:4c:88:78:fc:4e:de:e1:69:c0:bb:33:63:b5:6f:21:
9c:68:98:51:b2:c9:1c:26:06:4c:38:8a:17:b0:be:f8:2a:fe:
ea:7a:35:c0:1c:74:28:c3:42:05:76:90:38:a7:4a:00:38:9e:
9b:cb:4d:90:c1:1e:fe:78:64:ea:f7:6e:e6:4f:8b:51:39:61:
b2:6d:82:8c:26:88:dc:08:96:7a:55:fe:d9:f0:c1:a4:85:38:
20:8a:23:8e:79:0f:13:48:de:08:db:94:f2:07:00:e7:d5:d2:
69:8b:24:ba:bd:9d:98:25:ee:9e:51:77:0e:7e:d8:10:e6:b0:
07:33:4c:20:0a:7c:66:53:e4:52:32:c4:39:45:58:f6:8b:f6:
56:11:93:95:75:d3:54:fa:a9:9d:ed:37:1f:1d:0e:95:87:bb:
14:15:1c:b2:44:a1:d5:6e:58:09:64:d1:73:6a:5c:4d:88:36:
35:21:2c:fb:51:a5:1e:81:8e:7b:ad:a7:6f:73:bd:2c:fb:94:
9f:ac:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org