Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215740.roa
File: AS215740.roa (raw, json)
Hash identifier: zM5uCewic3yb7YaJvQgD8rcbPGfW3ry3GFVEMV8R0dI=
Subject key identifier: 27:BF:7F:60:1D:5B:DE:54:0A:7F:98:B2:01:27:1A:3E:0A:F3:87:70
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 672D7681B8F6C645083538F3DC8D66FA7BABD762
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215740.roa
Signing time: Mon 07 Oct 2024 21:40:08 +0000
ROA not before: Mon 07 Oct 2024 21:35:08 +0000
ROA not after: Mon 06 Oct 2025 21:40:08 +0000
asID: 215740
IP address blocks: 2a0f:9400:7e15::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Nov 2024 11:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:2d:76:81:b8:f6:c6:45:08:35:38:f3:dc:8d:66:fa:7b:ab:d7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 7 21:35:08 2024 GMT
Not After : Oct 6 21:40:08 2025 GMT
Subject: CN=27BF7F601D5BDE540A7F98B201271A3E0AF38770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:7a:57:a5:3a:e4:a1:37:6a:df:ae:fa:30:
f7:a8:c4:f9:b3:09:6c:5a:c3:cb:f2:e4:ec:bf:92:
eb:44:73:cc:fa:53:51:e6:fe:0e:56:9c:05:22:36:
92:e9:33:a0:53:bb:a6:dc:b5:e8:3d:52:bc:b7:c3:
36:2d:d2:28:f1:08:a1:a5:b1:42:6e:4f:7c:88:6d:
92:b1:b5:42:50:b5:6d:b4:24:e3:4b:70:14:4d:e6:
6d:35:b6:e2:fc:9d:67:d0:88:d6:75:aa:c1:f6:dc:
21:64:2a:98:f5:48:bc:01:15:f1:e6:11:ab:7d:14:
0e:61:ba:a7:4e:b0:ce:5b:79:58:58:31:18:9f:34:
c2:6f:e9:b5:d5:a8:df:db:8c:7d:0d:58:43:a8:df:
ca:1d:5c:43:1b:27:d2:00:b1:0b:95:9e:69:e3:b8:
30:c2:e1:b4:3d:c2:c6:d7:62:a6:fe:db:e9:4a:76:
e3:d0:72:75:8d:77:09:d1:0d:34:73:d0:f1:75:84:
21:76:05:74:3c:b8:25:6c:19:21:66:b0:18:e3:65:
ad:8b:21:13:22:8a:d3:22:99:cd:0b:61:51:ee:c9:
9d:ff:55:e8:0f:6d:5a:29:f7:79:c7:6c:55:26:76:
da:8c:e9:8d:c9:7f:05:b5:d9:62:0a:14:70:69:8f:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BF:7F:60:1D:5B:DE:54:0A:7F:98:B2:01:27:1A:3E:0A:F3:87:70
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215740.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e15::/48
Signature Algorithm: sha256WithRSAEncryption
02:51:75:5a:52:29:38:d1:45:5c:95:32:e3:19:37:ab:ef:f7:
29:ea:6b:99:18:7c:4c:47:86:fd:2f:8d:84:b3:82:58:a0:06:
4c:01:eb:db:2c:55:4a:b6:8e:1b:95:0e:9b:22:fe:0e:ff:e1:
8c:24:37:3b:d8:a4:ff:7d:60:64:f0:01:ae:56:20:02:d5:3b:
c4:78:48:41:18:df:11:78:74:d2:9f:f1:65:6c:04:8a:4c:91:
c8:b2:83:b5:9d:b4:be:aa:6d:4c:83:4f:fe:f3:d3:b4:3f:44:
e5:c2:87:01:fa:20:64:b8:27:ac:97:31:4a:df:8c:bb:b1:7a:
7f:43:58:af:15:26:24:45:79:82:eb:e8:cf:f6:5c:d8:72:b4:
a2:aa:a3:59:6f:34:c3:cb:34:7b:2c:c4:0a:5d:87:34:51:3a:
02:2e:13:8f:5f:15:e7:cf:41:fc:35:98:f8:ec:71:c9:db:50:
e5:c7:42:94:db:74:9d:92:af:d7:36:cf:bc:31:c1:2a:88:1f:
bf:ea:e0:a0:6a:34:6e:ae:7a:14:e9:1b:ae:6c:ac:67:68:23:
c3:89:e9:e9:9e:a2:ad:96:57:87:c4:c9:9e:0a:78:b2:44:0a:
2d:fa:a9:44:91:44:1b:c7:44:17:8e:9a:44:81:fc:f1:5b:a5:
cb:2c:ef:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:09 2024 by rpki-client on console-fra.rpki-client.org