Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS49581.roa
File: AS49581.roa (raw, json)
Hash identifier: UgICw0k558b7FENMVUeo/G+0adRlo0u6/TWL/J/lOPs=
Subject key identifier: EB:7F:2A:60:67:54:FF:D4:F3:6C:0B:05:88:9D:C0:0A:7C:7C:5E:EC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 45D06D6CBF8B4B52BBFE31D876881229E84A3C4D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS49581.roa
Signing time: Mon 05 Aug 2024 18:51:03 +0000
ROA not before: Mon 05 Aug 2024 18:46:03 +0000
ROA not after: Mon 04 Aug 2025 18:51:03 +0000
asID: 49581
IP address blocks: 2a0f:9400:7389::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Nov 2024 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d0:6d:6c:bf:8b:4b:52:bb:fe:31:d8:76:88:12:29:e8:4a:3c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 5 18:46:03 2024 GMT
Not After : Aug 4 18:51:03 2025 GMT
Subject: CN=EB7F2A606754FFD4F36C0B05889DC00A7C7C5EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:19:62:27:b8:ad:aa:fb:79:37:e1:e8:d3:
40:49:c9:63:38:60:5e:69:5e:78:04:52:0d:f9:fa:
ff:7d:3b:95:f0:46:3f:86:73:9c:fe:20:e5:34:85:
45:fd:ad:8e:22:8b:98:c1:79:a9:c6:eb:d6:c7:9a:
e4:21:a4:89:64:61:9e:6b:13:72:d4:6f:7f:b4:05:
f0:41:49:d9:51:7b:16:5c:93:56:9e:5a:be:49:b1:
af:a7:e7:38:6e:66:71:5d:67:ba:99:a8:aa:31:c9:
3f:7a:19:a0:d2:15:d8:e1:4c:4c:63:de:d1:5c:c8:
c9:f5:fc:d7:34:06:8d:dd:83:a6:db:4d:8c:dd:31:
4c:5c:4c:fb:9b:54:99:f5:4e:8f:27:8c:9e:71:2c:
48:53:ab:59:10:c3:b3:e0:b1:62:28:39:65:ca:8d:
02:14:eb:cd:6c:15:6e:0a:50:95:57:b9:3a:39:86:
28:60:6e:c5:57:d6:e1:2a:50:b5:8c:91:f0:96:f3:
af:f8:ef:82:5f:03:06:fe:7a:b6:2a:06:d8:3d:18:
d1:b2:cd:d9:15:13:2b:9e:1c:73:7f:27:57:6b:1a:
20:70:7e:61:2c:f4:58:dc:0e:83:a2:b1:90:82:38:
f9:40:0d:47:db:bd:d5:d0:97:52:2e:ec:f5:4f:5b:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:2A:60:67:54:FF:D4:F3:6C:0B:05:88:9D:C0:0A:7C:7C:5E:EC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS49581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7389::/48
Signature Algorithm: sha256WithRSAEncryption
ce:c0:bf:32:fa:bf:26:81:d9:06:54:2d:a2:1b:a3:c9:12:50:
12:5d:de:d8:5e:0a:e8:d5:1c:3d:34:20:dd:8d:86:27:a1:7b:
55:3d:76:d3:a2:e3:58:5b:ea:50:e6:2c:c2:51:07:4b:c1:4b:
d1:29:a2:f5:79:98:f5:4d:81:6f:40:b8:53:41:4e:fe:d4:b1:
81:10:58:c5:1f:81:ec:c7:8c:2f:f5:05:8f:57:fa:a9:ee:73:
73:1c:9d:95:c4:05:4f:fa:a0:19:c2:0b:21:c8:e1:96:b5:bf:
6f:1e:6d:bd:de:4f:91:e6:fa:da:3a:bf:7a:b2:7a:5f:05:ad:
c5:c5:2f:27:48:f5:92:7f:e5:a0:9c:ff:d9:c6:dc:b5:e9:3f:
4a:de:83:10:51:37:03:63:1a:f3:b2:7c:48:b7:14:a3:20:7f:
a6:07:71:9e:7e:ee:b0:31:d8:f2:b7:61:9e:6d:f7:72:a0:49:
74:56:28:98:35:9f:1c:0b:a6:f1:80:48:77:f7:49:f7:ae:db:
44:24:9a:19:55:8c:81:53:6f:a5:87:5b:7e:33:23:7c:7b:c5:
b7:1f:08:d1:f1:bc:cc:97:ce:74:89:03:93:c3:21:6e:8e:64:
89:c2:7b:04:16:57:0a:bb:6f:7d:0e:ab:66:9c:3f:e5:b5:93:
63:84:e6:22
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIURdBtbL+LS1K7/jHYdogSKehKPE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDA4MDUxODQ2MDNaFw0yNTA4MDQxODUxMDNaMDMxMTAvBgNV
BAMTKEVCN0YyQTYwNjc1NEZGRDRGMzZDMEIwNTg4OURDMDBBN0M3QzVFRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa4hliJ7itqvt5N+Ho00BJyWM4
YF5pXngEUg35+v99O5XwRj+Gc5z+IOU0hUX9rY4ii5jBeanG69bHmuQhpIlkYZ5r
E3LUb3+0BfBBSdlRexZck1aeWr5Jsa+n5zhuZnFdZ7qZqKoxyT96GaDSFdjhTExj
3tFcyMn1/Nc0Bo3dg6bbTYzdMUxcTPubVJn1To8njJ5xLEhTq1kQw7PgsWIoOWXK
jQIU681sFW4KUJVXuTo5hihgbsVX1uEqULWMkfCW86/474JfAwb+erYqBtg9GNGy
zdkVEyueHHN/J1drGiBwfmEs9FjcDoOisZCCOPlADUfbvdXQl1Iu7PVPW5IjAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQU638qYGdU/9TzbAsFiJ3ACnx8XuwwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzQ5NTgxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+UAHOJMA0GCSqGSIb3DQEBCwUAA4IB
AQDOwL8y+r8mgdkGVC2iG6PJElASXd7YXgro1Rw9NCDdjYYnoXtVPXbTouNYW+pQ
5izCUQdLwUvRKaL1eZj1TYFvQLhTQU7+1LGBEFjFH4Hsx4wv9QWPV/qp7nNzHJ2V
xAVP+qAZwgshyOGWtb9vHm293k+R5vraOr96snpfBa3FxS8nSPWSf+WgnP/Zxty1
6T9K3oMQUTcDYxrzsnxItxSjIH+mB3Gefu6wMdjyt2GebfdyoEl0ViiYNZ8cC6bx
gEh390n3rttEJJoZVYyBU2+lh1t+MyN8e8W3HwjR8bzMl850iQOTwyFujmSJwnsE
FlcKu299DqtmnD/ltZNjhOYi
-----END CERTIFICATE-----
Generated at Sat Nov 9 03:07:35 2024 by rpki-client on console-ams.rpki-client.org