Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS833256.roa
File: AS833256.roa (raw, json)
Hash identifier: CNQ3wCY0+F7dcAi/Z4An8VJvAz51IRi/eW/ciO4XaXk=
Subject key identifier: DD:53:77:56:4A:24:0C:A1:12:38:14:14:0B:B4:9A:0D:A2:DC:02:91
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2508921BB16BF32E41A6BEA7BBFA9386D071CA51
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS833256.roa
Signing time: Fri 02 May 2025 16:36:52 +0000
ROA not before: Fri 02 May 2025 16:31:52 +0000
ROA not after: Fri 01 May 2026 16:36:52 +0000
asID: 833256
IP address blocks: 2a0f:9400:693c::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 May 2025 17:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:08:92:1b:b1:6b:f3:2e:41:a6:be:a7:bb:fa:93:86:d0:71:ca:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 2 16:31:52 2025 GMT
Not After : May 1 16:36:52 2026 GMT
Subject: CN=DD5377564A240CA1123814140BB49A0DA2DC0291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2f:0b:5b:c9:b5:6b:34:22:42:1c:92:c2:8d:
2e:49:2a:56:b4:01:eb:f0:bf:03:c9:11:7c:5d:46:
a5:2d:51:a5:50:73:a3:5e:3f:ee:4c:90:9a:bd:15:
5c:c4:85:a6:86:df:73:de:49:dd:20:1c:f6:8c:ba:
ea:2d:86:5a:0a:af:b0:2a:e9:29:02:a8:61:f8:cf:
7a:55:0f:4a:24:50:83:8c:84:3b:8f:3e:91:07:68:
0d:d9:10:80:41:f3:0e:4e:78:a2:15:2f:f0:90:19:
8d:e4:43:51:be:01:67:49:79:d6:78:9f:e9:fc:70:
47:43:0d:7b:84:28:af:a9:e3:02:32:15:4d:22:a9:
f9:e1:de:e2:74:10:13:60:ac:0e:fe:c2:f5:ed:17:
6b:29:5c:2d:67:dd:b8:c4:cf:e4:61:a3:3d:9c:1d:
d1:37:0b:32:71:ad:64:2b:85:21:ab:5f:f2:27:a1:
c2:24:c2:ee:05:2b:28:9c:b2:31:e9:d8:2a:7a:0f:
10:71:cc:f2:ac:a3:83:5d:ba:de:4a:91:94:7b:90:
a8:8c:f6:d3:c2:50:10:9a:6f:2d:84:96:87:48:aa:
2b:13:7e:7f:2b:47:c8:27:33:f1:c7:1c:eb:77:31:
69:14:e0:73:a3:09:00:4e:e9:bb:26:ce:14:fc:ec:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:53:77:56:4A:24:0C:A1:12:38:14:14:0B:B4:9A:0D:A2:DC:02:91
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS833256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:693c::/48
Signature Algorithm: sha256WithRSAEncryption
a8:04:71:39:85:0d:7a:6b:44:c9:61:49:94:7e:d4:04:a8:04:
ac:69:1b:10:f6:e3:39:0c:04:f6:72:79:f6:ae:92:fe:4b:5a:
a8:4b:d0:46:35:e7:f0:51:f4:91:a5:1f:d3:17:6a:c6:0a:34:
2d:7d:0e:c3:a2:b9:cc:71:8d:4a:75:31:e6:bb:74:0f:33:41:
6b:8d:d9:9f:07:f8:57:23:73:6b:1d:a8:db:0e:7d:fd:a2:5f:
fe:3f:c6:62:9c:ef:5f:c5:79:3a:90:b7:0d:51:74:72:11:ad:
a5:40:ed:bf:f8:cb:ba:e3:32:75:76:db:45:da:25:7a:40:af:
21:66:eb:1d:3b:52:2e:0f:7c:06:db:8a:e0:b9:6d:81:92:53:
0a:1c:67:b4:34:75:64:2d:f2:0f:26:59:4a:3e:7e:d5:bc:44:
cd:00:f7:84:f5:71:36:be:81:bb:bc:8b:e8:3a:2e:87:90:da:
4d:7e:8c:0f:dd:eb:59:6a:c4:61:96:af:7b:91:0f:11:6b:02:
d3:f3:96:69:d4:b8:4d:c7:78:66:38:93:88:a0:db:5b:24:3f:
02:ad:66:bf:5e:7b:63:2e:09:d4:78:a4:72:ef:bc:99:c6:d2:
cd:57:3a:47:3e:2f:49:28:bd:f2:76:b2:83:0d:9d:93:41:26:
fe:65:41:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:20 2025 by rpki-client