Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48266.roa
File: AS48266.roa (raw, json)
Hash identifier: 3ULn3BIXOJ7/BcCKyInvg+Nsbzbp/Zw30IvQsDra7dI=
Subject key identifier: 9D:C7:E4:43:12:F2:21:92:D8:F9:2E:5C:23:01:29:4B:8D:8B:0C:DE
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 59220C80254EADD930D6DDEA232AD3A25F421B33
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48266.roa
Signing time: Tue 13 Sep 2022 01:20:27 +0000
ROA not before: Tue 13 Sep 2022 01:15:27 +0000
ROA not after: Tue 12 Sep 2023 01:20:27 +0000
asID: 48266
IP address blocks: 2a0f:9400:7724::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:22:0c:80:25:4e:ad:d9:30:d6:dd:ea:23:2a:d3:a2:5f:42:1b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:27 2022 GMT
Not After : Sep 12 01:20:27 2023 GMT
Subject: CN=9DC7E44312F22192D8F92E5C2301294B8D8B0CDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:2c:14:5d:ac:b5:94:9e:32:1b:4f:0e:ed:
ac:b9:8a:24:68:62:ae:ea:be:7d:0c:e9:f7:31:94:
7b:a1:1d:28:c2:92:4c:a8:94:65:bf:64:91:61:b3:
7a:8b:64:7d:cd:42:a2:86:17:56:ad:0c:82:a0:fa:
34:5f:03:ef:45:16:fb:de:60:dc:91:dc:f2:b4:16:
4a:16:7a:30:8c:1d:44:49:22:d4:b2:ad:91:84:9f:
9b:9e:5f:22:d5:0b:e7:b3:49:51:f9:d7:d0:43:9b:
38:30:4c:70:3f:3c:8f:d6:e9:26:eb:75:be:8f:62:
89:ba:25:f5:28:24:3e:6d:cb:86:b8:37:59:11:da:
3e:19:c4:c0:c4:c4:bc:9a:58:b8:3c:2e:82:0a:f2:
22:a1:7b:8f:77:3b:39:9b:35:2a:b3:9b:4d:30:68:
81:31:f1:2f:e8:a0:69:bd:bd:1f:84:da:2e:8e:87:
db:6d:63:2c:5e:7e:ff:6d:2d:6c:b5:d2:6e:68:34:
8c:5e:82:7b:9e:8c:fc:b8:1e:fa:85:01:cf:25:9f:
e6:3a:85:ce:50:8d:f2:eb:a5:02:63:88:22:ed:51:
06:33:73:15:74:36:3f:31:21:67:7b:fd:c0:c2:80:
3e:35:a1:4c:69:ff:e1:63:b9:f6:dc:5a:fb:51:74:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C7:E4:43:12:F2:21:92:D8:F9:2E:5C:23:01:29:4B:8D:8B:0C:DE
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7724::/48
Signature Algorithm: sha256WithRSAEncryption
a1:65:2c:2f:18:39:55:0b:b4:38:98:e0:ac:16:82:23:3e:dc:
69:8f:40:69:0e:54:49:4f:20:ed:69:95:80:c5:f4:d9:9b:6f:
50:bf:7b:ff:35:7c:05:1a:37:d7:ca:8c:5c:2c:0b:94:82:8c:
e4:c8:63:7c:b8:5b:be:09:14:4e:d0:44:fd:37:b2:16:9e:e2:
53:86:13:86:93:e9:2b:5c:a2:26:6c:4c:a4:84:b3:7a:ce:b9:
d1:ae:7a:9a:bd:a9:b0:31:f6:da:e3:3d:3d:0f:16:96:35:53:
94:26:f1:3e:8d:d1:e3:d5:75:c8:e2:1d:19:29:e7:18:92:77:
5c:68:b1:8b:8a:6b:bb:45:b3:3a:b2:e7:86:80:0e:df:b1:57:
b4:f2:0a:ad:b1:1a:eb:cc:0d:86:0d:13:5e:c9:29:06:c6:a6:
80:2a:38:f2:58:1b:d3:30:67:a2:dc:46:29:36:24:fb:43:5c:
86:3c:df:b6:62:99:cc:50:a0:9b:54:ca:41:cf:77:64:d1:bc:
54:72:44:40:d5:47:02:30:5c:e9:6e:51:3f:a9:9a:3f:72:af:
86:25:c7:b9:c3:c5:42:7a:7d:f7:21:4d:1e:78:1d:87:db:e8:
b7:87:bc:e3:a4:82:46:cc:b2:41:50:54:76:37:7d:40:1c:fd:
c7:7f:b2:2b
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUWSIMgCVOrdkw1t3qIyrTol9CGzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMjA5MTMwMTE1MjdaFw0yMzA5MTIwMTIwMjdaMDMxMTAvBgNV
BAMTKDlEQzdFNDQzMTJGMjIxOTJEOEY5MkU1QzIzMDEyOTRCOEQ4QjBDREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVSwUXay1lJ4yG08O7ay5iiRo
Yq7qvn0M6fcxlHuhHSjCkkyolGW/ZJFhs3qLZH3NQqKGF1atDIKg+jRfA+9FFvve
YNyR3PK0FkoWejCMHURJItSyrZGEn5ueXyLVC+ezSVH519BDmzgwTHA/PI/W6Sbr
db6PYom6JfUoJD5ty4a4N1kR2j4ZxMDExLyaWLg8LoIK8iKhe493OzmbNSqzm00w
aIEx8S/ooGm9vR+E2i6Oh9ttYyxefv9tLWy10m5oNIxegnuejPy4HvqFAc8ln+Y6
hc5QjfLrpQJjiCLtUQYzcxV0Nj8xIWd7/cDCgD41oUxp/+FjufbcWvtRdAJtAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUncfkQxLyIZLY+S5cIwEpS42LDN4wHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzQ4MjY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+UAHckMA0GCSqGSIb3DQEBCwUAA4IB
AQChZSwvGDlVC7Q4mOCsFoIjPtxpj0BpDlRJTyDtaZWAxfTZm29Qv3v/NXwFGjfX
yoxcLAuUgozkyGN8uFu+CRRO0ET9N7IWnuJThhOGk+krXKImbEykhLN6zrnRrnqa
vamwMfba4z09DxaWNVOUJvE+jdHj1XXI4h0ZKecYkndcaLGLimu7RbM6sueGgA7f
sVe08gqtsRrrzA2GDRNeySkGxqaAKjjyWBvTMGei3EYpNiT7Q1yGPN+2YpnMUKCb
VMpBz3dk0bxUckRA1UcCMFzpblE/qZo/cq+GJce5w8VCen33IU0eeB2H2+i3h7zj
pIJGzLJBUFR2N31AHP3Hf7Ir
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org