Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS58336.roa
File: AS58336.roa (raw, json)
Hash identifier: zqwRYqPm4AFVi7oSNnzuyWWzapPlJiV7AB2arBix/vE=
Subject key identifier: 05:C1:72:AE:88:07:BA:9F:09:89:D1:EF:19:DD:B0:C9:83:A5:9E:4B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 446B35CD69F2CAB984AC54C58BB2A386191F3140
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS58336.roa
Signing time: Tue 13 Sep 2022 01:20:25 +0000
ROA not before: Tue 13 Sep 2022 01:15:25 +0000
ROA not after: Tue 12 Sep 2023 01:20:25 +0000
asID: 58336
IP address blocks: 2a0f:9400:6400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:6b:35:cd:69:f2:ca:b9:84:ac:54:c5:8b:b2:a3:86:19:1f:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 13 01:15:25 2022 GMT
Not After : Sep 12 01:20:25 2023 GMT
Subject: CN=05C172AE8807BA9F0989D1EF19DDB0C983A59E4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:d1:70:a0:72:c0:47:b2:fd:d6:51:a5:4d:
c4:04:68:fd:85:60:34:bc:32:1d:5e:74:76:92:43:
ae:f2:3a:8f:40:b1:dd:c2:86:8a:fd:5e:c2:a3:09:
8d:ae:3b:6e:33:81:7c:bb:4e:e1:8a:0a:b7:df:ac:
b0:4b:a3:be:1c:a7:c7:3d:23:3a:2b:48:81:49:4b:
95:de:e5:6e:09:6e:ea:c7:81:90:c9:d0:eb:2f:9f:
7f:d0:54:31:ae:b6:85:dc:40:43:22:08:2f:48:81:
3f:b7:55:91:77:89:98:77:83:7b:8b:52:b6:2e:bb:
6d:ec:92:0f:90:1d:68:e0:78:60:eb:3c:07:13:92:
60:a7:bc:d1:e9:52:f4:82:21:44:c5:76:ca:f6:ee:
e7:2d:55:c8:33:39:b8:2a:7c:a2:24:d6:09:4e:f2:
6a:64:f1:1c:59:f9:c4:40:33:18:91:0a:bc:ba:c7:
f7:42:0f:b0:ce:15:90:91:34:a9:0e:99:ce:f3:57:
de:2b:9c:46:4f:51:72:bb:fb:33:38:68:c3:ba:3c:
61:02:e2:ce:5c:4b:6a:bc:df:b7:f1:3e:ac:d6:49:
1c:c5:70:75:20:d2:cc:c2:fd:ce:bd:df:62:87:82:
8b:41:7e:5d:74:ce:aa:2b:d9:b8:70:9c:df:70:e2:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C1:72:AE:88:07:BA:9F:09:89:D1:EF:19:DD:B0:C9:83:A5:9E:4B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS58336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6400::/40
Signature Algorithm: sha256WithRSAEncryption
0b:11:13:13:5a:d4:be:8f:55:1c:75:ce:3b:18:9a:71:73:5f:
9d:69:e2:5b:55:36:e2:63:f7:dc:b8:74:c0:f4:66:e5:c0:99:
c7:2a:74:fe:d9:74:9a:0c:d8:64:85:10:cb:30:01:f0:06:e9:
60:24:4b:30:09:a4:bc:b9:b9:32:eb:fe:22:0b:39:81:ab:9c:
ca:c1:6f:d1:68:6c:95:81:6a:67:a5:48:f4:52:6d:40:ef:bf:
1c:07:ab:8b:b8:f5:97:35:3c:3d:1f:83:dc:f2:ba:31:76:62:
e3:e5:4f:b5:77:cf:ad:ec:45:26:31:80:c1:95:86:bb:21:dd:
2c:0d:e0:86:da:21:12:15:ec:53:49:8a:bc:2f:86:68:d0:52:
09:31:27:20:a5:26:ff:d0:50:0d:05:5b:58:4b:9f:6e:9c:c6:
5e:09:c4:58:e5:71:03:ff:c0:90:49:38:82:41:76:8d:83:4f:
a1:52:16:d2:44:06:b3:54:11:cd:e1:61:f5:aa:9d:dc:b4:60:
a7:d9:9a:b9:d5:f4:90:f8:44:07:21:c5:80:d1:d5:74:61:99:
c2:79:62:8f:bf:d5:2d:77:87:cf:ed:fa:2d:d5:79:e3:26:c3:
a2:43:dc:f4:16:21:66:bb:20:01:ca:28:dc:71:de:34:4e:8d:
ef:a3:61:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org