Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS49922.roa
File: AS49922.roa (raw, json)
Hash identifier: WP5SuvfbBTj96UhjjZk407CdkQSOwBLT4p47tjRko4Q=
Subject key identifier: 78:93:C1:0F:2E:FB:19:28:BE:4F:88:0D:98:B0:47:BB:0A:61:35:14
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5DED5D448A6BC749FE993423587984FDFAF0D71B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS49922.roa
Signing time: Tue 13 Sep 2022 01:20:30 +0000
ROA not before: Tue 13 Sep 2022 01:15:30 +0000
ROA not after: Tue 12 Sep 2023 01:20:30 +0000
asID: 49922
IP address blocks: 2a0f:9400:6400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ed:5d:44:8a:6b:c7:49:fe:99:34:23:58:79:84:fd:fa:f0:d7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:30 2022 GMT
Not After : Sep 12 01:20:30 2023 GMT
Subject: CN=7893C10F2EFB1928BE4F880D98B047BB0A613514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c6:fc:82:5a:f9:c5:7a:d6:ad:68:dc:d8:f5:
4d:8e:6c:ad:67:ee:22:9d:1b:f8:e5:f3:97:a3:f2:
0e:27:a3:ea:3b:8f:3b:7c:9e:58:08:ee:ba:64:25:
0d:c7:88:f6:32:d7:98:53:25:9d:3d:e0:a5:d2:7d:
fe:b5:60:d9:cd:db:11:1a:2d:17:fa:80:4a:d4:33:
c8:80:58:2b:05:d1:a3:bb:5d:c0:16:55:e9:f6:01:
0f:d8:d2:6d:ca:e4:d7:5e:1c:39:24:77:89:68:cc:
b2:da:30:31:70:ae:66:da:d3:d6:57:17:ff:21:49:
0a:49:93:12:16:4e:0f:a3:65:d1:23:99:0c:d2:19:
78:16:e9:ae:79:d8:28:f2:97:70:27:9a:6c:d7:d5:
87:42:a7:92:c6:c8:61:40:73:8c:d3:a6:34:08:74:
3e:28:a4:2b:df:3e:e8:3a:f6:9f:8c:85:0f:16:cc:
9d:31:c4:e4:37:09:41:4f:ef:22:a8:0b:a3:80:2d:
b8:7c:6b:3a:b8:18:4b:61:79:5f:2a:07:a1:3f:78:
21:0d:01:ac:a3:ab:0e:22:b1:f2:97:b1:4a:e4:b2:
2b:f2:d8:6f:43:2c:84:fc:f7:d7:7c:f3:5a:b2:fc:
f3:01:8d:6e:9e:9b:3c:9f:80:62:22:46:96:9b:2c:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:93:C1:0F:2E:FB:19:28:BE:4F:88:0D:98:B0:47:BB:0A:61:35:14
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS49922.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6400::/40
Signature Algorithm: sha256WithRSAEncryption
56:73:aa:d8:00:44:96:a6:72:5f:08:87:ba:c7:57:ba:59:e8:
05:03:54:b0:6d:ea:16:60:3f:d6:ba:9d:e6:a6:19:d6:0b:cb:
1e:25:74:0e:54:87:65:cf:c5:08:25:b9:45:6f:8a:ed:19:f2:
d9:eb:68:a3:00:82:01:70:0f:88:fd:f9:37:07:76:c5:84:31:
a5:75:70:3a:d6:2b:56:59:c6:c9:37:ca:b4:9e:c0:76:7a:8a:
81:ec:d3:ef:73:e3:4a:31:32:1b:cb:38:59:b5:4d:93:30:74:
d4:30:69:12:f1:dd:0e:95:16:fb:b1:9b:fc:10:26:d5:8c:52:
e1:d2:1b:f3:70:54:71:a3:39:70:9e:e0:b9:82:3f:f0:af:25:
18:b8:92:07:84:bf:92:02:6a:23:05:33:1f:6f:ee:9d:8a:cc:
0a:03:be:20:88:5e:78:00:50:ee:2d:6a:1b:86:76:1a:48:65:
2c:79:4e:fd:5d:a0:4a:25:82:27:b6:79:ea:6b:4f:52:df:c1:
8c:31:46:f0:e0:65:8b:b7:08:b0:f6:26:71:91:71:df:84:3b:
7d:ca:58:89:80:14:d9:f6:1d:f0:55:45:e6:3c:33:f5:e8:32:
7c:35:69:1e:d0:94:e2:ef:5d:99:36:22:7a:83:c2:74:b4:50:
0e:1b:b0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org