Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213169.roa
File: AS213169.roa (raw, json)
Hash identifier: y5SUYOtwFLynl9YdlExBiath0zjn0loB94i7exHCOUQ=
Subject key identifier: 64:E0:BF:36:53:8D:D2:D9:B2:BE:D9:E1:90:75:CA:B9:FA:8F:6B:29
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6435C360E5AF40B45D89B5819BE88548EE91268F
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213169.roa
Signing time: Tue 13 Sep 2022 01:20:24 +0000
ROA not before: Tue 13 Sep 2022 01:15:24 +0000
ROA not after: Tue 12 Sep 2023 01:20:24 +0000
asID: 213169
IP address blocks: 2a0f:9400:7724::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:35:c3:60:e5:af:40:b4:5d:89:b5:81:9b:e8:85:48:ee:91:26:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:24 2022 GMT
Not After : Sep 12 01:20:24 2023 GMT
Subject: CN=64E0BF36538DD2D9B2BED9E19075CAB9FA8F6B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:9b:7d:6d:93:a2:5e:4a:07:ce:17:6e:66:
c7:ef:f7:c6:89:4d:a4:31:78:d4:3c:10:cf:ab:a3:
e6:d7:27:39:52:fe:a8:83:09:bb:6f:bc:8a:f2:48:
d3:34:09:13:17:d9:9b:52:8b:b9:fb:1d:bc:b5:81:
d1:10:45:b5:07:42:ce:58:32:f2:ab:a4:fe:5f:aa:
37:11:fe:80:ac:b4:cc:f1:ce:6e:1c:b8:93:aa:96:
e5:c7:55:64:68:a6:f1:cc:08:07:f8:39:c3:59:9f:
a2:7f:9f:fa:83:20:c3:01:24:05:5d:c2:b4:3e:78:
d9:3c:6c:8e:e7:a6:2a:b3:e9:46:5c:6e:5c:36:be:
4d:22:8c:e4:10:be:25:98:d8:56:52:9d:d5:a0:4b:
f8:d3:a2:ce:7a:aa:26:5f:ef:12:aa:c8:6f:66:9f:
97:2b:73:c6:11:36:4b:0a:31:e5:e7:c9:e1:98:19:
72:f7:b1:d9:b5:b4:2d:45:0b:7e:07:0e:15:3a:0b:
30:92:51:93:6c:3e:19:8e:6a:1d:68:87:38:b4:19:
61:51:60:72:6a:99:d7:ae:79:c6:4d:90:af:57:86:
73:9a:c3:76:bb:d4:a0:aa:f3:ee:78:70:cc:5e:97:
9b:d3:07:a1:2e:86:98:98:17:10:0a:1d:aa:1e:01:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E0:BF:36:53:8D:D2:D9:B2:BE:D9:E1:90:75:CA:B9:FA:8F:6B:29
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7724::/48
Signature Algorithm: sha256WithRSAEncryption
18:25:28:8b:9d:fe:bb:d9:52:cb:97:84:ac:2a:68:57:a3:ad:
64:02:0e:ee:81:af:28:46:fe:13:c4:60:41:9b:f3:17:25:3f:
fa:80:fd:03:d5:81:85:3e:88:be:74:9e:ad:88:d4:09:7c:58:
48:a8:8d:1e:42:b4:6f:a0:0f:8d:f8:56:cf:db:c2:4d:c0:5f:
56:4b:89:93:a3:c8:68:f1:2c:68:7f:41:32:fe:84:3a:dc:0b:
9d:dc:1f:a9:3c:b0:06:4d:32:89:8d:9d:42:08:71:8d:7b:90:
dd:69:0b:20:45:82:e0:d7:f3:95:23:88:b3:ce:25:7c:63:6d:
71:48:04:8b:b0:da:6d:24:7a:a8:4a:7f:9e:44:0f:8b:ba:43:
40:47:0f:bf:9d:07:85:aa:9f:53:5b:01:66:fd:f9:84:0b:fb:
e1:bb:3b:da:20:09:63:4e:88:dd:47:d9:98:67:38:ba:da:92:
b8:20:3a:70:6a:75:3e:16:e2:ae:ff:23:b7:19:a4:4a:46:5f:
93:81:1e:97:16:b6:39:a5:e3:53:6b:28:73:b7:b3:f9:b9:97:
ef:dc:04:98:39:f2:58:87:6f:7b:22:58:dc:41:c3:ca:a3:98:
21:1c:94:86:4e:06:0a:f7:eb:25:32:c7:c4:f0:cc:69:23:fe:
c5:2e:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org