Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213163.roa
File: AS213163.roa (raw, json)
Hash identifier: kig9Y1pFGHDjbRbx7FADywDJ1EODXx6EX+oXh/pe2v0=
Subject key identifier: BF:51:F8:55:61:15:A2:F8:84:7D:5A:AE:D6:AD:88:1B:D1:5B:1C:1C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2BB8508093215B266C9C81188920E1B109D385EF
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213163.roa
Signing time: Sat 12 Nov 2022 02:47:39 +0000
ROA not before: Sat 12 Nov 2022 02:42:39 +0000
ROA not after: Sat 11 Nov 2023 02:47:39 +0000
asID: 213163
IP address blocks: 2a0f:9400:7215::/48 maxlen: 48
2a0f:9400:7227::/48 maxlen: 48
2a0f:9400:7243::/48 maxlen: 48
2a0f:9400:7244::/48 maxlen: 48
2a0f:9400:7266::/48 maxlen: 48
2a0f:9400:7272::/48 maxlen: 48
2a0f:9400:72e3::/48 maxlen: 48
2a0f:9400:72e4::/48 maxlen: 48
2a0f:9400:72ff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b8:50:80:93:21:5b:26:6c:9c:81:18:89:20:e1:b1:09:d3:85:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 12 02:42:39 2022 GMT
Not After : Nov 11 02:47:39 2023 GMT
Subject: CN=BF51F8556115A2F8847D5AAED6AD881BD15B1C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:d8:e2:62:4a:bd:9b:4e:e2:2e:bf:cb:ac:
71:db:6b:8e:1d:ad:17:e3:6c:83:db:33:99:4d:93:
a9:1f:51:36:eb:0e:9f:03:e5:c1:1e:4d:cf:39:ed:
0d:c8:fb:0c:c7:b5:95:8a:13:fa:f7:5e:e3:3f:e0:
02:36:c0:fc:4a:94:67:ad:d6:da:00:f4:d4:31:e0:
8b:9e:df:9a:30:0e:ef:12:0a:35:9a:53:15:8c:d2:
58:a4:5a:70:ca:b2:70:b7:f6:f8:d7:37:a5:71:e6:
39:57:60:fd:97:d9:69:93:39:58:ce:4e:31:af:02:
72:f6:98:7f:12:9d:c7:02:e3:9b:3a:a8:4d:3b:3b:
88:21:bd:7c:6f:7c:c9:dd:b1:24:d5:16:12:c9:97:
79:37:ab:b3:76:55:be:6c:aa:fe:36:76:cd:32:0d:
45:06:c9:00:46:e1:e3:87:27:79:ec:f6:1e:6a:3a:
73:fd:1b:b9:35:92:70:3b:92:40:12:22:81:eb:36:
86:e1:b5:1a:65:66:1b:ae:22:ca:fa:53:71:28:2b:
e4:aa:f5:f5:14:34:99:bd:f8:43:c4:6a:6f:bc:96:
0e:a6:b0:ff:c1:03:a2:74:36:02:c6:67:b2:0a:f5:
3c:c3:74:fa:da:8f:86:a6:fd:0d:31:c3:c4:a5:7d:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:51:F8:55:61:15:A2:F8:84:7D:5A:AE:D6:AD:88:1B:D1:5B:1C:1C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213163.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7215::/48
2a0f:9400:7227::/48
2a0f:9400:7243::-2a0f:9400:7244:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7266::/48
2a0f:9400:7272::/48
2a0f:9400:72e3::-2a0f:9400:72e4:ffff:ffff:ffff:ffff:ffff
2a0f:9400:72ff::/48
Signature Algorithm: sha256WithRSAEncryption
4d:41:6c:a4:a8:83:32:ef:ed:eb:88:68:f3:ec:98:2f:dc:9d:
4e:3f:07:72:aa:af:e9:66:de:86:f7:ab:20:53:d0:a6:bd:64:
12:8f:f0:98:14:45:17:69:bd:18:6c:91:5a:44:2a:6f:20:b5:
33:68:e6:c1:3b:45:6f:a5:30:32:df:3a:23:01:71:49:c2:75:
ef:d2:5e:97:e6:f8:63:45:b8:49:1c:92:6c:37:2e:5a:8c:55:
aa:44:c6:da:a3:4e:a1:e3:c0:a9:30:0b:1f:42:86:d7:b3:d0:
02:bf:92:ec:2c:d8:e3:13:71:f7:8a:64:83:0a:38:30:6a:86:
a4:82:d4:93:6f:5d:2c:d8:6f:60:3a:af:56:19:0e:b9:4c:db:
b8:46:8b:b8:d6:bf:c1:18:8f:4e:18:09:42:23:72:ca:53:c6:
ae:ed:c4:8f:d2:34:5c:77:66:20:6f:f7:a7:89:42:9e:d0:e6:
de:92:98:dd:54:9b:21:9d:be:49:5b:9a:32:b9:2e:85:26:95:
d4:7c:65:5d:9c:6f:38:5d:54:74:e6:1b:0f:33:39:30:d7:87:
70:ad:7a:ab:72:e1:39:f3:da:e6:d6:a1:39:32:c6:27:96:4a:
73:1c:d2:f0:d4:79:e1:77:43:f1:1a:e4:14:b7:8e:aa:b7:2a:
9c:3b:e2:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org