Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20313938323331.roa
File: 3134322e3230322e39302e302f32342d3234203d3e20313938323331.roa (raw, json)
Hash identifier: B6LiyevRx/xHIfWfWtIAmepCtkSfYCt240DPJQ872AQ=
Subject key identifier: E1:B4:94:1C:F8:A6:5C:8C:ED:FE:DD:BE:13:EA:0F:6E:BC:33:BA:DA
Certificate issuer: /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial: 73DCDF978AB71E669237768582D628DB6EF3549D
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20313938323331.roa
Signing time: Thu 02 May 2024 16:24:35 +0000
ROA not before: Thu 02 May 2024 16:19:35 +0000
ROA not after: Thu 01 May 2025 16:24:35 +0000
asID: 198231
IP address blocks: 142.202.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 20:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:dc:df:97:8a:b7:1e:66:92:37:76:85:82:d6:28:db:6e:f3:54:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Validity
Not Before: May 2 16:19:35 2024 GMT
Not After : May 1 16:24:35 2025 GMT
Subject: CN=E1B4941CF8A65C8CEDFEDDBE13EA0F6EBC33BADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:20:98:88:c1:0c:1a:48:c7:58:87:09:ed:
e7:40:d0:ea:22:b9:93:29:8e:07:26:98:db:7e:26:
0d:69:ed:e9:fa:24:6c:68:7f:4d:0c:14:9a:98:48:
ed:2e:28:9f:4a:6d:a0:31:56:7f:f9:fe:2b:4d:e2:
c6:cf:98:f4:66:0b:d3:0b:18:ec:3a:9b:16:af:4e:
a3:94:7b:4b:f0:b6:d0:46:9f:cc:66:08:dd:04:68:
6b:11:6f:d4:68:29:2a:e1:7a:6c:4c:d8:c9:09:4c:
29:22:28:38:39:25:ba:3d:36:ff:9e:ca:f7:85:70:
cd:17:28:7d:5c:c8:d3:0b:18:68:3a:e7:b6:ed:b9:
65:ba:17:57:16:62:15:90:1d:3f:71:f5:3b:3c:75:
fc:18:0c:97:4f:8c:46:4e:69:31:14:67:af:d9:a9:
ca:66:73:3e:20:f2:37:ce:5e:55:eb:a9:cd:6a:3a:
23:78:22:4d:29:48:44:e9:9f:33:a0:d4:d0:72:74:
62:b1:42:d9:24:51:7b:2a:5a:cf:fe:98:d1:10:8a:
6b:47:5e:93:e8:87:68:46:8a:0d:14:54:02:12:e9:
97:1e:0d:f4:59:d8:1e:52:52:90:1c:97:3a:d2:89:
20:e2:44:97:eb:ae:b4:e5:65:34:ea:98:3c:90:49:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B4:94:1C:F8:A6:5C:8C:ED:FE:DD:BE:13:EA:0F:6E:BC:33:BA:DA
X509v3 Authority Key Identifier:
keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e20313938323331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.202.90.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e0:46:f8:f6:3d:97:2c:92:8b:36:cd:b1:b2:ae:fa:1c:8d:
64:db:78:55:08:9e:08:96:a8:20:f3:18:67:d7:4a:82:47:79:
05:89:46:19:33:67:e5:f0:07:72:55:29:fb:97:64:5c:d7:20:
35:59:e2:eb:d1:9a:8d:83:60:f6:5a:bc:2e:8a:05:44:f3:85:
00:d5:ea:01:02:ba:ee:85:ff:c7:ae:c8:e5:58:56:62:78:ab:
c0:40:84:c5:6d:2e:01:bf:d3:c8:aa:bb:a9:ca:e6:71:08:fc:
0d:ff:ee:4e:dd:54:99:9c:27:e1:52:05:31:54:4d:86:48:6d:
a3:5b:18:11:7a:58:d5:65:94:3c:7f:94:34:41:83:a1:4a:df:
d1:d5:a8:ea:1b:30:a9:f9:71:49:d7:59:b1:00:52:5d:a1:b1:
01:3f:fa:92:03:40:b9:9b:df:05:02:2c:2f:73:be:66:61:92:
34:ff:e5:c6:08:1b:7c:81:ca:49:e0:a5:21:0a:cd:e6:77:a7:
08:30:67:e8:59:a5:fa:36:2d:a9:2f:39:d6:77:66:a4:9c:d4:
9e:5a:00:ee:36:c4:f6:e3:a4:83:2c:a6:33:6f:16:27:b7:cc:
80:05:93:06:c3:a5:79:a1:b9:c0:ea:43:df:c3:9a:42:51:9e:
5d:f8:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 22:45:50 2024 by rpki-client on console-ams.rpki-client.org