Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61003.roa
File: AS61003.roa (raw, json)
Hash identifier: Y8x8O8u34803+PZZvV3PTp94+BxQ+PY2xu0lz2uywzo=
Subject key identifier: AB:70:4D:5E:9C:03:18:B3:5D:39:38:A9:BC:A7:D9:84:B9:C3:C8:31
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6CF1B0D4C893F437995218A9DA99B060241C4A4F
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61003.roa
Signing time: Sat 29 Oct 2022 15:36:03 +0000
ROA not before: Sat 29 Oct 2022 15:31:03 +0000
ROA not after: Sat 28 Oct 2023 15:36:03 +0000
asID: 61003
IP address blocks: 2a0f:9400:6800::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:f1:b0:d4:c8:93:f4:37:99:52:18:a9:da:99:b0:60:24:1c:4a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 29 15:31:03 2022 GMT
Not After : Oct 28 15:36:03 2023 GMT
Subject: CN=AB704D5E9C0318B35D3938A9BCA7D984B9C3C831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:ed:49:0b:2f:9a:ab:0e:92:34:f5:bb:94:
02:ef:18:bb:f8:59:71:a6:75:cd:5a:bc:c6:dd:e4:
1a:2a:62:4f:c5:5e:35:33:b3:6c:f1:f0:ec:ba:38:
72:dd:e0:bf:2d:b4:3f:bd:f1:0a:c5:ab:14:17:65:
81:bd:ea:c2:09:06:59:8b:5a:a1:c1:2d:9e:ab:3f:
a2:1b:5b:cd:83:40:4a:25:f5:d2:d9:82:5c:fb:ab:
6d:0b:91:56:a7:49:4c:38:c4:83:ec:b2:1c:58:0c:
87:64:0c:4a:be:73:11:84:91:4c:e3:42:0b:b1:d7:
99:84:49:6a:6d:e8:b5:d1:d3:89:f6:a2:96:16:9f:
aa:b3:de:04:b0:55:80:b7:8e:3f:3d:38:30:3e:1c:
b0:11:c0:da:c4:b8:0a:2e:7d:6e:89:f7:de:ba:7a:
8f:d9:02:f5:4b:39:00:9e:c5:bc:c5:38:ef:ef:8c:
33:b6:60:f0:9a:6a:e4:ad:f3:c2:3c:7f:b3:f1:37:
9d:00:6a:70:af:98:02:2d:d6:80:01:a4:33:fa:cb:
b1:3a:c4:3b:f6:a8:89:94:23:50:e7:d6:93:1f:5b:
8d:63:05:16:db:87:cd:70:01:bb:0e:f4:18:48:4a:
9a:28:f1:9c:b2:99:3e:6b:3f:1d:5e:9c:e7:65:b0:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:70:4D:5E:9C:03:18:B3:5D:39:38:A9:BC:A7:D9:84:B9:C3:C8:31
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61003.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6800::/40
Signature Algorithm: sha256WithRSAEncryption
66:17:da:24:4c:3f:9d:b0:2f:c2:11:cd:4b:a0:56:47:b7:ed:
40:99:5d:ef:53:cd:60:07:f3:92:c8:3d:a6:10:65:ab:24:57:
45:a5:2f:c1:37:d2:c4:b0:63:a6:42:83:a3:86:03:24:88:5d:
cb:c5:91:c5:f0:b7:34:4e:08:93:cf:fb:1e:33:78:30:34:d6:
ee:c5:ab:4b:d1:b6:fc:5b:46:1a:6c:c8:f3:86:46:a8:4c:6b:
00:19:ef:f0:51:d6:eb:f7:b9:d5:ca:e4:03:f3:90:6e:e0:24:
63:bc:49:83:20:af:ee:fa:13:97:5d:1b:5b:2b:27:dc:34:86:
d0:b0:29:94:d2:17:06:43:fd:08:35:40:90:87:71:09:c9:c5:
58:7e:05:4d:26:79:fc:28:df:4f:16:19:53:18:e7:b6:33:c4:
12:25:6c:66:21:02:d7:40:de:20:e7:12:1c:5e:52:a0:c5:72:
1b:1a:e9:23:aa:73:aa:7d:44:44:a6:4e:f1:7f:2c:f5:7a:6c:
71:92:41:6f:f8:46:ea:67:96:97:34:5c:17:80:8b:a3:e8:e0:
9f:13:90:d8:74:1c:5c:e4:eb:d3:c3:5a:a8:2f:6c:82:a2:af:
ce:4f:0b:de:a6:aa:a1:ec:06:a0:8b:c8:65:ea:fd:3a:51:3f:
0c:39:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org